$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/OXdepfqZtgrqWGsPoR3DP4M3l08.roa File: OXdepfqZtgrqWGsPoR3DP4M3l08.roa (raw, json) Hash identifier: tAIiNtNAzyWzUckVn5drWt0ahVWLWaqMn6PMK/utbwk= Subject key identifier: 39:77:5E:A5:FA:99:B6:0A:EA:58:6B:0F:A1:1D:C3:3F:83:37:97:4F Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0C45 Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/OXdepfqZtgrqWGsPoR3DP4M3l08.roa Signing time: Mon 26 Aug 2024 05:19:23 +0000 ROA not before: Mon 26 Aug 2024 05:19:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131619 IP address blocks: 103.116.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: Aug 26 05:19:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=39775EA5FA99B60AEA586B0FA11DC33F8337974F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:f3:d0:75:11:40:68:f3:c1:12:49:04:47: 82:fd:1e:8e:21:65:c9:ca:99:67:90:ce:4e:a3:d6: 2b:d6:00:30:99:a9:3c:3a:07:d8:53:90:08:15:fd: 6e:b4:51:39:a6:b4:d7:b6:bf:31:d2:61:9b:8c:cf: b3:03:71:3a:c3:1a:b4:42:a4:cc:5a:37:09:c7:65: 43:19:a2:44:4f:3a:dd:99:60:db:1a:18:36:5d:35: 56:4f:77:2c:da:1c:81:10:cc:bf:b3:dd:6f:60:d9: 55:1c:00:a3:ee:25:22:cf:d4:df:75:66:e7:0b:f7: 6e:1e:9d:c8:7e:a6:2c:2b:63:37:7a:1f:e0:da:f4: 8f:2a:cf:62:da:05:ce:59:23:3a:f4:4c:a6:c9:de: 35:49:b4:24:1f:ca:4f:f6:ad:e9:bd:5e:d1:2c:92: 9d:93:96:4d:c7:06:90:01:ff:45:0b:d0:08:26:f8: 21:0d:fb:ca:7b:a9:7e:64:a6:d0:28:13:24:69:93: 53:33:9a:a4:38:9f:ec:ab:77:e6:d1:53:55:20:15: c1:49:55:74:67:1d:34:7b:fa:f0:3e:af:b3:89:e6: f9:22:70:8c:77:53:85:ca:a7:c7:89:6d:a0:6d:9b: 63:32:0e:b7:eb:ca:05:46:c1:2a:c8:a6:8e:c6:e3: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:77:5E:A5:FA:99:B6:0A:EA:58:6B:0F:A1:1D:C3:3F:83:37:97:4F X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/OXdepfqZtgrqWGsPoR3DP4M3l08.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.99.0/24 Signature Algorithm: sha256WithRSAEncryption 83:2c:c5:06:5a:83:ca:24:fd:84:58:45:01:5f:1b:0d:db:1b: 94:8d:56:d7:bc:2b:ad:04:ec:85:f5:40:15:75:a4:08:33:1a: 8d:01:72:3b:c5:15:b7:97:bd:89:7c:70:ee:0d:ce:8d:89:dd: ca:ed:f5:7e:e3:45:9a:6c:78:fa:44:05:05:49:13:db:ea:d0: 9a:d6:77:00:d4:66:5b:18:7f:5b:cd:2d:df:83:4a:4d:5f:1c: 69:b4:22:d5:e4:e0:40:03:1b:1e:71:c1:26:bb:df:69:b8:27: 2c:bb:cd:19:0d:7a:d2:c5:63:b9:8a:5c:0e:3a:53:f3:57:9c: 5e:87:8e:cc:fb:46:e4:d9:99:a9:4d:13:9c:a0:8b:df:00:9c: 1a:ef:b8:d0:9c:08:1e:d5:67:5f:5b:e1:3b:a6:2e:98:34:72: 23:e0:a2:10:8d:a0:8a:59:11:f7:45:1d:15:14:24:7c:57:a7: 33:68:85:7e:44:61:35:5f:f5:34:b7:02:f8:33:79:a8:19:6f: f9:17:ac:57:47:08:19:1f:7c:f5:86:91:f4:b7:a5:1f:b2:19: 55:c3:f9:80:67:52:28:02:cc:35:47:ab:fe:c3:de:8f:bc:a9: 1b:97:ac:a7:e7:29:a6:a0:fa:29:44:ac:da:41:e0:9b:74:ea: 03:50:ac:14 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNDA4MjYw NTE5MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5Nzc1RUE1RkE5OUI2 MEFFQTU4NkIwRkExMURDMzNGODMzNzk3NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzgvPQdRFAaPPBEkkER4L9Ho4hZcnKmWeQzk6j1ivWADCZqTw6 B9hTkAgV/W60UTmmtNe2vzHSYZuMz7MDcTrDGrRCpMxaNwnHZUMZokRPOt2ZYNsa GDZdNVZPdyzaHIEQzL+z3W9g2VUcAKPuJSLP1N91ZucL924ench+piwrYzd6H+Da 9I8qz2LaBc5ZIzr0TKbJ3jVJtCQfyk/2rem9XtEskp2Tlk3HBpAB/0UL0Agm+CEN +8p7qX5kptAoEyRpk1MzmqQ4n+yrd+bRU1UgFcFJVXRnHTR7+vA+r7OJ5vkicIx3 U4XKp8eJbaBtm2MyDrfrygVGwSrIpo7G496tAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUOXdepfqZtgrqWGsPoR3DP4M3l08wHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9PWGRlcGZxWnRncnFX R3NQb1IzRFA0TTNsMDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3RjMA0GCSqGSIb3DQEBCwUAA4IBAQCDLMUGWoPKJP2EWEUBXxsN2xuUjVbX vCutBOyF9UAVdaQIMxqNAXI7xRW3l72JfHDuDc6Nid3K7fV+40WabHj6RAUFSRPb 6tCa1ncA1GZbGH9bzS3fg0pNXxxptCLV5OBAAxseccEmu99puCcsu80ZDXrSxWO5 ilwOOlPzV5xeh47M+0bk2ZmpTROcoIvfAJwa77jQnAge1WdfW+E7pi6YNHIj4KIQ jaCKWRH3RR0VFCR8V6czaIV+RGE1X/U0twL4M3moGW/5F6xXRwgZH3z1hpH0t6Uf shlVw/mAZ1IoAsw1R6v+w96PvKkbl6yn5ymmoPopRKzaQeCbdOoDUKwU -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:08 2024 by rpki-client on console-ams.rpki-client.org