$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/zaDSf5RQaqs0JPpv69vcmU4cpgA.roa File: zaDSf5RQaqs0JPpv69vcmU4cpgA.roa (raw, json) Hash identifier: BPIGyyt53u3DQMfzI21srqXApnrhD8PEc1V08TTp4FI= Subject key identifier: CD:A0:D2:7F:94:50:6A:AB:34:24:FA:6F:EB:DB:DC:99:4E:1C:A6:00 Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0C42 Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/zaDSf5RQaqs0JPpv69vcmU4cpgA.roa Signing time: Mon 26 Aug 2024 05:19:22 +0000 ROA not before: Mon 26 Aug 2024 05:19:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131619 IP address blocks: 103.116.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3138 (0xc42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: Aug 26 05:19:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CDA0D27F94506AAB3424FA6FEBDBDC994E1CA600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:31:ab:da:ee:a2:ba:c8:df:cb:79:3b:25: 15:02:69:8a:e3:2a:ea:39:7e:d6:c6:e0:65:77:df: 3d:c1:8b:f2:e1:26:9f:90:2f:75:b2:e6:11:fd:36: b4:00:de:56:01:25:67:f9:88:3f:76:0d:33:97:fd: 98:82:06:24:14:f1:6c:5c:b9:d6:8d:bf:8c:93:bf: 1d:a5:15:3c:7c:65:9e:48:e7:94:40:64:b7:31:f7: ac:d8:ae:e9:63:fd:f6:eb:da:9f:df:79:5b:98:e4: 4a:50:56:c4:04:44:85:89:af:98:af:75:16:3f:34: 80:7d:eb:6e:ae:ed:bb:e8:5f:fb:70:d1:ea:bc:88: 9a:8b:e0:54:60:03:af:7f:d1:bb:53:a0:c2:aa:bc: d0:52:a2:08:5e:61:18:86:49:b4:eb:b9:a0:47:71: 69:c5:33:0c:49:05:6d:fd:3a:96:97:3b:b4:46:8b: c7:a7:41:57:d3:84:a5:fd:a1:f0:43:ff:f9:d6:23: 51:44:f9:c6:96:c6:37:57:14:a5:0a:5d:99:0e:73: 74:c0:a0:c2:82:d0:96:1b:83:b2:28:91:91:77:80: 53:7f:c9:5a:59:38:80:f8:6a:2e:2b:a5:d6:b0:da: c3:a6:5d:5f:b3:94:ad:03:79:0a:1a:ef:26:97:ed: 1f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A0:D2:7F:94:50:6A:AB:34:24:FA:6F:EB:DB:DC:99:4E:1C:A6:00 X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/zaDSf5RQaqs0JPpv69vcmU4cpgA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.97.0/24 Signature Algorithm: sha256WithRSAEncryption a6:6c:12:2d:40:94:12:a5:a8:14:c5:18:de:e6:df:f6:5b:43: 7e:14:6b:40:5d:c6:65:9f:aa:01:f2:38:8c:11:00:93:de:8c: d2:a7:c9:9b:35:ac:b5:5a:ad:72:c4:71:bb:0b:74:eb:33:de: 60:34:eb:7f:f6:32:f3:82:08:6e:b0:b7:6a:42:ac:d4:82:f9: 83:b0:1d:7b:77:91:86:db:37:35:38:ac:45:98:73:dd:92:82: 30:09:dd:54:63:0b:ce:a9:3c:8d:0c:99:03:f4:fa:db:93:56: e6:f1:da:ff:b7:ce:b0:8f:be:7a:f1:ec:29:89:9d:69:a9:1c: ed:2a:2a:cc:75:59:80:96:42:25:df:90:61:e4:f2:cf:d1:18: c8:55:8c:f9:d9:a3:65:36:94:05:fc:a5:a8:53:13:4e:b8:e5: 9a:04:36:9e:d7:a6:67:99:49:c9:0a:02:4c:81:04:98:4d:5e: 83:2a:fe:fe:9f:b9:63:4b:cd:bf:c4:25:6d:24:5b:18:b4:23: de:92:07:5c:0c:18:fc:17:50:48:a0:77:5a:1d:50:a2:df:2a: 08:a5:46:e5:1c:47:11:12:fe:8d:63:37:a9:c1:77:f3:e3:c4: a6:2e:f7:ff:a9:53:57:17:3d:0b:f8:aa:b5:f1:1a:dd:8a:b5: e3:73:fd:d1 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNDA4MjYw NTE5MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENEQTBEMjdGOTQ1MDZB QUIzNDI0RkE2RkVCREJEQzk5NEUxQ0E2MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl4jGr2u6iusjfy3k7JRUCaYrjKuo5ftbG4GV33z3Bi/LhJp+Q L3Wy5hH9NrQA3lYBJWf5iD92DTOX/ZiCBiQU8WxcudaNv4yTvx2lFTx8ZZ5I55RA ZLcx96zYrulj/fbr2p/feVuY5EpQVsQERIWJr5ivdRY/NIB9626u7bvoX/tw0eq8 iJqL4FRgA69/0btToMKqvNBSogheYRiGSbTruaBHcWnFMwxJBW39OpaXO7RGi8en QVfThKX9ofBD//nWI1FE+caWxjdXFKUKXZkOc3TAoMKC0JYbg7IokZF3gFN/yVpZ OID4ai4rpdaw2sOmXV+zlK0DeQoa7yaX7R9ZAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUzaDSf5RQaqs0JPpv69vcmU4cpgAwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy96YURTZjVSUWFxczBK UHB2Njl2Y21VNGNwZ0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3RhMA0GCSqGSIb3DQEBCwUAA4IBAQCmbBItQJQSpagUxRje5t/2W0N+FGtA XcZln6oB8jiMEQCT3ozSp8mbNay1Wq1yxHG7C3TrM95gNOt/9jLzgghusLdqQqzU gvmDsB17d5GG2zc1OKxFmHPdkoIwCd1UYwvOqTyNDJkD9Prbk1bm8dr/t86wj756 8ewpiZ1pqRztKirMdVmAlkIl35Bh5PLP0RjIVYz52aNlNpQF/KWoUxNOuOWaBDae 16ZnmUnJCgJMgQSYTV6DKv7+n7ljS82/xCVtJFsYtCPekgdcDBj8F1BIoHdaHVCi 3yoIpUblHEcREv6NYzepwXfz48SmLvf/qVNXFz0L+Kq18RrdirXjc/3R -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:08 2024 by rpki-client on console-ams.rpki-client.org