$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/u8rl2w7io81gZokrxbLmwdcC8fM.roa File: u8rl2w7io81gZokrxbLmwdcC8fM.roa (raw, json) Hash identifier: DXx2GWjISM27LVGjEZGhahbsJeVpFkvDCkpLIPcYosg= Subject key identifier: BB:CA:E5:DB:0E:E2:A3:CD:60:66:89:2B:C5:B2:E6:C1:D7:02:F1:F3 Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0DA8 Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/u8rl2w7io81gZokrxbLmwdcC8fM.roa Signing time: Fri 22 Aug 2025 08:56:47 +0000 ROA not before: Fri 22 Aug 2025 08:56:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131619 IP address blocks: 103.116.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3496 (0xda8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: Aug 22 08:56:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BBCAE5DB0EE2A3CD6066892BC5B2E6C1D702F1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:8c:88:88:c8:02:93:3a:f4:95:f2:0c:38: c1:82:18:c3:f7:d1:6b:65:ab:a5:30:c8:3c:4d:03: 2c:e9:86:b5:31:00:51:de:e0:f3:26:32:d0:12:61: 7c:f0:da:53:e7:58:85:22:21:68:7e:20:78:aa:6b: 09:06:a7:ea:af:1e:74:64:66:31:a8:40:7b:dd:ba: d0:17:e3:e3:40:f3:e3:6e:54:e5:b7:13:72:aa:79: fc:4a:ac:a7:47:ff:32:b0:64:fe:22:f4:b1:4e:f0: a3:17:ab:69:16:fe:54:74:8f:6c:24:3e:09:7b:11: c6:67:48:0b:e4:0a:2c:6f:a2:78:eb:7b:41:a3:cc: 79:8c:bd:dd:6d:34:0c:bb:44:b2:5e:19:39:5b:dd: db:c9:dc:8c:04:17:88:f6:7b:cd:2b:08:aa:d0:80: 4f:69:f0:f7:10:23:c8:9a:c8:6f:cf:35:84:72:22: f8:7d:a8:32:91:77:bc:f2:78:47:90:e8:69:00:de: 03:11:d3:97:30:ac:3f:33:e6:26:98:6f:cf:06:db: 13:98:ec:f3:ce:d9:ef:60:80:48:7e:5e:21:5b:09: 28:72:b2:d1:4a:ee:6f:82:ad:88:94:00:74:7e:fb: 92:f6:88:6a:ae:76:80:b6:72:32:c4:37:52:2e:ee: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CA:E5:DB:0E:E2:A3:CD:60:66:89:2B:C5:B2:E6:C1:D7:02:F1:F3 X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/u8rl2w7io81gZokrxbLmwdcC8fM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.98.0/24 Signature Algorithm: sha256WithRSAEncryption 35:d9:fa:72:45:81:e9:75:c8:29:9c:60:86:ca:1e:3f:3c:22: 24:f9:54:19:45:af:63:1b:24:cb:c1:cd:0e:bf:4d:6b:30:c5: ec:5b:4e:e2:b7:fe:9f:ba:7c:06:69:e2:36:03:af:20:0d:29: 4e:dc:fc:2b:ff:fd:2f:8e:fc:53:04:63:cd:39:92:a2:fc:2d: f7:60:73:44:77:dc:e4:d3:56:01:00:82:84:79:87:49:84:16: 9a:87:e8:1b:fa:f3:9c:be:d9:cc:e5:31:e8:c3:49:0a:25:ad: 2e:9e:05:1e:3b:ca:ce:f0:67:8a:69:0f:1c:e3:35:a1:85:eb: 8e:1f:cc:d3:ad:cf:6a:4a:fd:ce:a3:6a:4b:45:04:77:2b:b6: 80:82:85:10:fb:bd:f7:02:8c:18:94:6c:1d:2e:82:08:4f:e3: ec:24:bd:ee:16:4f:82:c3:a6:e1:9c:11:b9:8f:5f:9f:ea:67: 6b:9f:bc:77:d3:23:54:2c:6b:ca:24:17:97:7e:cd:17:c6:60: 5d:e1:01:c4:93:76:d3:7a:cb:3b:ad:50:f0:f1:e3:b9:af:56: 08:c8:5c:83:d3:f3:2c:b4:21:3b:7d:48:c1:5d:bb:71:f8:c8: 14:40:d5:47:70:db:2b:b0:48:d8:c0:17:33:e8:9d:73:34:c4: 2c:66:84:0d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNTA4MjIw ODU2NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJCQ0FFNURCMEVFMkEz Q0Q2MDY2ODkyQkM1QjJFNkMxRDcwMkYxRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1M4yIiMgCkzr0lfIMOMGCGMP30Wtlq6UwyDxNAyzphrUxAFHe 4PMmMtASYXzw2lPnWIUiIWh+IHiqawkGp+qvHnRkZjGoQHvdutAX4+NA8+NuVOW3 E3KqefxKrKdH/zKwZP4i9LFO8KMXq2kW/lR0j2wkPgl7EcZnSAvkCixvonjre0Gj zHmMvd1tNAy7RLJeGTlb3dvJ3IwEF4j2e80rCKrQgE9p8PcQI8iayG/PNYRyIvh9 qDKRd7zyeEeQ6GkA3gMR05cwrD8z5iaYb88G2xOY7PPO2e9ggEh+XiFbCShystFK 7m+CrYiUAHR++5L2iGqudoC2cjLEN1Iu7v+HAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUu8rl2w7io81gZokrxbLmwdcC8fMwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy91OHJsMnc3aW84MWda b2tyeGJMbXdkY0M4Zk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3RiMA0GCSqGSIb3DQEBCwUAA4IBAQA12fpyRYHpdcgpnGCGyh4/PCIk+VQZ Ra9jGyTLwc0Ov01rMMXsW07it/6funwGaeI2A68gDSlO3Pwr//0vjvxTBGPNOZKi /C33YHNEd9zk01YBAIKEeYdJhBaah+gb+vOcvtnM5THow0kKJa0ungUeO8rO8GeK aQ8c4zWhheuOH8zTrc9qSv3Oo2pLRQR3K7aAgoUQ+733AowYlGwdLoIIT+PsJL3u Fk+Cw6bhnBG5j1+f6mdrn7x30yNULGvKJBeXfs0XxmBd4QHEk3bTess7rVDw8eO5 r1YIyFyD0/MstCE7fUjBXbtx+MgUQNVHcNsrsEjYwBcz6J1zNMQsZoQN -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:03 2025 by rpki-client