$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/OxEekMYLJ6o4Ak8eoVztISuVxGQ.roa File: OxEekMYLJ6o4Ak8eoVztISuVxGQ.roa (raw, json) Hash identifier: D/AmEAZ27c/GvGhHymp3BANqfQb+YvIgQjgYH3OP2Y0= Subject key identifier: 3B:11:1E:90:C6:0B:27:AA:38:02:4F:1E:A1:5C:ED:21:2B:95:C4:64 Certificate issuer: /CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Certificate serial: 1240 Authority key identifier: 68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/OxEekMYLJ6o4Ak8eoVztISuVxGQ.roa Signing time: Mon 26 Aug 2024 05:17:03 +0000 ROA not before: Mon 26 Aug 2024 05:17:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131663 IP address blocks: 103.130.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4672 (0x1240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Validity Not Before: Aug 26 05:17:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3B111E90C60B27AA38024F1EA15CED212B95C464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:03:aa:d0:a1:27:22:89:b9:5c:08:7b:8c: 2e:57:16:7a:8a:30:9f:4d:84:46:4d:9a:f8:0d:6f: 3c:ee:c6:5c:43:e1:f3:92:f4:5e:79:aa:5b:19:7d: 3c:34:88:40:0b:0d:b0:de:45:a4:57:1e:90:f7:c1: e2:0f:68:33:ad:49:d9:ac:4e:44:66:be:e9:bf:4b: 5d:7d:22:4b:fd:73:21:01:d6:93:ab:4a:4d:43:34: f8:54:8d:47:99:8d:d2:9c:90:16:0e:60:61:9d:9e: ff:fc:24:57:7b:90:1f:c3:e7:18:70:45:7b:81:c3: ad:90:b5:a7:74:44:03:7a:c2:ca:39:07:2d:60:0d: f0:1c:90:ee:ad:fc:bd:05:e4:ba:fa:ac:cb:af:96: 75:58:ae:fc:2a:1a:1b:c8:89:24:3f:48:07:9c:d9: d7:e4:1a:ca:a2:2d:32:27:4d:dc:f0:32:30:0d:f5: d4:19:01:6e:00:a1:bf:0a:79:45:58:e7:8c:9b:30: 22:26:9a:95:82:6b:4d:ef:b9:7f:91:81:b9:94:4c: 4f:d9:6f:37:0e:78:59:6f:98:68:4d:65:33:f3:81: 4e:1c:b7:be:85:7d:09:44:c4:9c:c3:02:c7:03:f0: 0c:86:21:29:0c:1a:f6:84:d8:ea:6d:96:08:ed:04: 4f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:11:1E:90:C6:0B:27:AA:38:02:4F:1E:A1:5C:ED:21:2B:95:C4:64 X509v3 Authority Key Identifier: keyid:68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/OxEekMYLJ6o4Ak8eoVztISuVxGQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.100.0/22 Signature Algorithm: sha256WithRSAEncryption d8:38:7d:91:f1:6b:d9:65:f3:c5:f2:e9:ee:e1:e3:2f:5f:6c: b2:ee:64:51:f6:ce:3b:e8:b2:e3:4f:12:32:dc:0c:05:45:2b: d6:92:06:22:a5:16:03:eb:10:11:2c:02:e5:58:63:e0:fe:b6: 67:e5:d4:b9:20:a8:d6:03:a1:7a:ce:43:6d:fe:95:d9:38:93: 80:5d:7e:11:29:e2:b9:bf:cd:ba:48:50:8c:29:37:ff:91:ea: 7e:67:71:c9:67:08:7b:cd:bc:d5:9e:2e:7a:b9:d7:4f:c0:af: 35:32:1b:80:77:c1:af:6e:00:9f:6f:43:e5:72:cf:96:1c:a9: 7b:58:6a:9a:7a:b5:ea:03:ac:a0:8f:ce:b2:9d:91:52:6a:e6: 42:9a:33:50:c7:b5:ef:23:81:a3:41:8d:26:8b:29:b7:bc:88: ea:40:ff:bc:cb:74:63:89:e9:0c:4d:91:85:36:93:40:a6:88: 73:57:84:e0:d9:e9:9a:4a:4e:5e:ae:12:11:c8:0a:3e:7c:e5: 54:c7:4e:63:6c:41:ef:ef:86:bd:dd:33:cf:8d:bb:01:d5:9a: aa:0b:4c:b9:4c:8a:67:ca:cd:c5:77:87:a5:37:6c:7a:df:08: c6:83:39:d6:91:53:f8:4a:23:cc:72:9f:53:6c:42:6d:87:b0: ef:9c:2e:9e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhD QUMxRkEwNEQ4MENGRTNFMkJFOTdDN0FCMTg1MkI2NjU2NTM1RjAeFw0yNDA4MjYw NTE3MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCMTExRTkwQzYwQjI3 QUEzODAyNEYxRUExNUNFRDIxMkI5NUM0NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG+wOq0KEnIom5XAh7jC5XFnqKMJ9NhEZNmvgNbzzuxlxD4fOS 9F55qlsZfTw0iEALDbDeRaRXHpD3weIPaDOtSdmsTkRmvum/S119Ikv9cyEB1pOr Sk1DNPhUjUeZjdKckBYOYGGdnv/8JFd7kB/D5xhwRXuBw62Qtad0RAN6wso5By1g DfAckO6t/L0F5Lr6rMuvlnVYrvwqGhvIiSQ/SAec2dfkGsqiLTInTdzwMjAN9dQZ AW4Aob8KeUVY54ybMCImmpWCa03vuX+RgbmUTE/ZbzcOeFlvmGhNZTPzgU4ct76F fQlExJzDAscD8AyGISkMGvaE2OptlgjtBE9JAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUOxEekMYLJ6o4Ak8eoVztISuVxGQwHwYDVR0jBBgwFoAUaMrB+gTYDP4+K+l8 erGFK2ZWU18wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0lHQUJZ VEUvYU1yQi1nVFlEUDQtSy1sOGVyR0ZLMlpXVTE4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9hTXJCLWdUWURQNC1LLWw4ZXJHRksyWldVMTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HSUdBQllURS9PeEVla01ZTEo2bzRB azhlb1Z6dElTdVZ4R1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4JkMA0GCSqGSIb3DQEBCwUAA4IBAQDYOH2R8WvZZfPF8unu4eMvX2yy7mRR 9s476LLjTxIy3AwFRSvWkgYipRYD6xARLALlWGPg/rZn5dS5IKjWA6F6zkNt/pXZ OJOAXX4RKeK5v826SFCMKTf/kep+Z3HJZwh7zbzVni56uddPwK81MhuAd8GvbgCf b0Plcs+WHKl7WGqaerXqA6ygj86ynZFSauZCmjNQx7XvI4GjQY0miym3vIjqQP+8 y3RjiekMTZGFNpNApohzV4Tg2emaSk5erhIRyAo+fOVUx05jbEHv74a93TPPjbsB 1ZqqC0y5TIpnys3Fd4elN2x63wjGgznWkVP4SiPMcp9TbEJth7DvnC6e -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org