$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/6XGvDhhCQBa13ub_Oe5hYLv8zMM.roa File: 6XGvDhhCQBa13ub_Oe5hYLv8zMM.roa (raw, json) Hash identifier: Z1Gx766UgoSnBYLl2jt8suotvAI/pJir5o3p/czJyzk= Subject key identifier: E9:71:AF:0E:18:42:40:16:B5:DE:E6:FF:39:EE:61:60:BB:FC:CC:C3 Certificate issuer: /CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Certificate serial: 13A0 Authority key identifier: 68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/6XGvDhhCQBa13ub_Oe5hYLv8zMM.roa Signing time: Fri 22 Aug 2025 08:52:03 +0000 ROA not before: Fri 22 Aug 2025 08:52:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131663 IP address blocks: 2403:b7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5024 (0x13a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Validity Not Before: Aug 22 08:52:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E971AF0E18424016B5DEE6FF39EE6160BBFCCCC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:21:d3:7a:77:de:f2:97:cb:db:a1:f3:8a:47: e8:d3:ea:29:b3:71:67:92:25:38:49:f9:86:89:7d: 2f:0c:4b:3c:f6:44:f6:b6:69:1a:51:3d:50:9f:21: a3:43:86:8b:89:e0:64:85:41:9e:5f:22:55:23:4b: f6:e3:57:a6:61:a8:7d:7d:4c:b4:e7:b0:a0:b5:55: 95:61:d5:8e:63:38:1e:91:92:0d:ee:4a:1b:98:61: d2:28:b8:69:05:54:da:ab:bc:62:27:53:9d:29:92: fc:5b:57:4f:5b:c5:8c:ff:81:1a:4d:58:e8:08:f8: ae:86:c0:66:cc:12:7a:46:8c:bc:3e:ed:4e:f6:cd: 6d:d1:a8:1e:1a:f1:e4:aa:81:56:9d:d2:59:5b:ca: 92:57:79:3d:a2:f6:8f:33:44:0c:2d:1c:c5:c3:9e: 25:e6:d3:9b:7b:36:85:5e:ff:39:d2:1e:90:85:97: 35:89:cb:0d:de:0d:71:de:0c:54:09:f0:38:46:90: 58:eb:01:78:f2:cd:c5:32:2d:bc:49:67:23:1a:d9: 99:77:8d:16:c0:b5:b1:9d:a5:d2:74:29:a7:77:b2: 74:49:64:5d:b3:ab:05:4c:53:fc:28:ba:77:0e:f7: 80:0a:13:fa:41:97:13:4d:ac:9c:d1:e0:6d:ad:98: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:AF:0E:18:42:40:16:B5:DE:E6:FF:39:EE:61:60:BB:FC:CC:C3 X509v3 Authority Key Identifier: keyid:68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/6XGvDhhCQBa13ub_Oe5hYLv8zMM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:b7c0::/32 Signature Algorithm: sha256WithRSAEncryption aa:ff:fb:f7:1f:8f:76:85:47:07:91:d9:7a:41:dd:54:89:89: 71:1e:93:e5:10:c9:c9:6a:09:66:f3:21:83:14:04:59:7c:f6: bc:89:fe:1e:79:94:ba:ea:a7:44:6c:50:84:c5:20:f9:88:f4: 57:d3:b1:c0:ea:74:d7:eb:94:77:4a:63:25:95:dc:fe:c9:d7: d8:07:e6:e5:86:8c:ad:a9:2d:fa:68:38:4a:57:28:0a:d5:f1: 54:28:90:c2:ae:19:64:dd:46:83:4f:8a:cc:60:b2:cc:a2:66: 96:26:22:20:ae:0f:03:cc:1a:87:bd:27:95:93:4e:bd:e6:18: 75:6f:c1:44:e7:8d:55:98:0d:20:7a:c0:9f:65:f2:4b:66:8c: 53:e9:e6:b2:91:b8:16:86:16:61:28:56:a0:1c:92:06:58:62: 0c:d3:f9:51:f1:5b:cc:d7:d5:dd:55:88:b5:14:14:43:37:69: dd:11:e9:25:41:53:ce:e6:2d:33:67:c0:5f:1e:f6:2e:2d:2d: f0:97:dd:fe:98:39:af:2f:7d:4f:d3:3d:f0:01:98:00:21:30: dd:38:7e:3e:6c:c7:44:87:d1:f3:58:1f:b8:ac:0e:71:9c:0a: 2d:c0:c5:09:5a:ea:7d:f8:3b:e1:ec:83:62:63:09:07:ea:9d: b3:b8:8a:36 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhD QUMxRkEwNEQ4MENGRTNFMkJFOTdDN0FCMTg1MkI2NjU2NTM1RjAeFw0yNTA4MjIw ODUyMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU5NzFBRjBFMTg0MjQw MTZCNURFRTZGRjM5RUU2MTYwQkJGQ0NDQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWIdN6d97yl8vbofOKR+jT6imzcWeSJThJ+YaJfS8MSzz2RPa2 aRpRPVCfIaNDhouJ4GSFQZ5fIlUjS/bjV6ZhqH19TLTnsKC1VZVh1Y5jOB6Rkg3u ShuYYdIouGkFVNqrvGInU50pkvxbV09bxYz/gRpNWOgI+K6GwGbMEnpGjLw+7U72 zW3RqB4a8eSqgVad0llbypJXeT2i9o8zRAwtHMXDniXm05t7NoVe/znSHpCFlzWJ yw3eDXHeDFQJ8DhGkFjrAXjyzcUyLbxJZyMa2Zl3jRbAtbGdpdJ0Kad3snRJZF2z qwVMU/wouncO94AKE/pBlxNNrJzR4G2tmPrTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6XGvDhhCQBa13ub/Oe5hYLv8zMMwHwYDVR0jBBgwFoAUaMrB+gTYDP4+K+l8 erGFK2ZWU18wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0lHQUJZ VEUvYU1yQi1nVFlEUDQtSy1sOGVyR0ZLMlpXVTE4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9hTXJCLWdUWURQNC1LLWw4ZXJHRksyWldVMTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HSUdBQllURS82WEd2RGhoQ1FCYTEz dWJfT2U1aFlMdjh6TU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAO3wDANBgkqhkiG9w0BAQsFAAOCAQEAqv/79x+PdoVHB5HZekHdVImJcR6T 5RDJyWoJZvMhgxQEWXz2vIn+HnmUuuqnRGxQhMUg+Yj0V9OxwOp01+uUd0pjJZXc /snX2Afm5YaMrakt+mg4SlcoCtXxVCiQwq4ZZN1Gg0+KzGCyzKJmliYiIK4PA8wa h70nlZNOveYYdW/BROeNVZgNIHrAn2XyS2aMU+nmspG4FoYWYShWoBySBlhiDNP5 UfFbzNfV3VWItRQUQzdp3RHpJUFTzuYtM2fAXx72Li0t8Jfd/pg5ry99T9M98AGY ACEw3Th+PmzHRIfR81gfuKwOcZwKLcDFCVrqffg74eyDYmMJB+qds7iKNg== -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:34 2025 by rpki-client