$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/sARw9pMu_RpcSMhi8ubdIQCRQa8.roa File: sARw9pMu_RpcSMhi8ubdIQCRQa8.roa (raw, json) Hash identifier: kyDTvc/E2K4lbKvS33fEfyUu1GnXr626zoGtZ35HhX4= Subject key identifier: B0:04:70:F6:93:2E:FD:1A:5C:48:C8:62:F2:E6:DD:21:00:91:41:AF Certificate issuer: /CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Certificate serial: 139F Authority key identifier: 68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/sARw9pMu_RpcSMhi8ubdIQCRQa8.roa Signing time: Fri 22 Aug 2025 08:52:03 +0000 ROA not before: Fri 22 Aug 2025 08:52:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131663 IP address blocks: 103.130.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5023 (0x139f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Validity Not Before: Aug 22 08:52:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B00470F6932EFD1A5C48C862F2E6DD21009141AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:bd:8a:f1:e7:83:a7:32:02:93:2a:0c:67: 21:52:3d:67:79:db:39:b0:32:de:12:66:99:f8:8e: 74:ef:a0:39:3e:bd:a4:45:06:4a:06:38:43:1c:07: d1:62:4b:e4:e4:0d:1a:44:3b:e0:f2:14:ff:90:ef: 5a:1f:ac:70:26:e4:43:8b:27:57:bd:81:34:29:d8: 27:f0:4e:f3:53:63:41:47:67:e2:7f:db:35:60:5a: e1:9d:c2:5e:14:81:b1:77:c6:0e:8a:fd:72:a7:fe: f8:1e:b3:f7:26:b5:62:41:b8:21:96:73:75:15:7a: 4d:91:36:e9:a8:ce:10:86:9b:36:c2:34:95:8c:9f: aa:13:e8:9d:58:67:e3:3b:26:e6:58:65:7e:a9:3d: 92:b2:5c:d2:69:d1:39:23:3f:b1:5a:19:25:2b:b0: 95:8c:c8:c9:96:ea:0d:bc:68:36:1d:5f:7a:15:52: 41:d2:af:68:26:20:25:06:32:a8:29:4f:73:24:3e: 23:00:3a:bf:b7:9b:6c:b0:f3:95:38:7e:70:40:9f: 24:86:93:3c:40:58:f4:d2:cf:83:f8:c9:ed:5c:4b: 81:28:87:92:e4:e7:46:55:92:61:b9:49:00:46:67: f2:f2:88:d3:d7:c7:13:a5:d5:f5:68:8e:5a:99:70: 5a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:04:70:F6:93:2E:FD:1A:5C:48:C8:62:F2:E6:DD:21:00:91:41:AF X509v3 Authority Key Identifier: keyid:68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/sARw9pMu_RpcSMhi8ubdIQCRQa8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.100.0/22 Signature Algorithm: sha256WithRSAEncryption 56:1f:47:24:f8:8a:16:df:72:f6:a6:dc:02:36:88:15:df:45: 3e:a4:b8:3d:dd:f8:1c:c7:51:ab:87:f7:a5:7b:8e:4d:66:2b: 39:e4:99:51:e3:37:f2:3b:41:cd:55:a1:b9:f8:ec:48:c0:99: d1:7f:71:3f:17:97:37:7e:d2:30:85:54:5a:19:39:12:18:cf: 7c:e5:38:da:f2:16:ae:cb:81:8b:ad:fa:89:22:53:d1:4b:27: 01:0b:2c:d9:0a:5a:48:6d:7b:8a:6d:f9:19:7d:49:a0:c5:1c: d7:45:bb:59:86:18:75:59:14:ca:94:e6:e5:f7:8f:26:2b:d0: 97:db:6f:a3:f4:eb:b5:99:3f:1b:8e:e5:f4:5f:25:d4:01:63: 75:3a:2e:57:f3:c8:65:f7:1c:1c:41:e5:54:8e:e0:65:3b:bd: 6d:21:d5:b7:db:73:a2:1c:7f:53:79:01:03:4e:dc:fd:e0:9f: ca:57:65:2b:21:1d:66:0d:34:5d:2f:01:03:3f:25:f3:c6:e9: 97:49:8e:cb:3b:74:d9:d1:65:a3:28:e7:44:47:98:38:3f:c0: cd:61:da:c2:da:b6:ef:f0:89:4f:3b:f8:e8:e3:2a:29:f1:d7: f5:3d:b3:47:7e:a9:48:fa:fa:9a:d2:2e:3b:66:47:29:31:7f: 20:d8:4b:cb -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhD QUMxRkEwNEQ4MENGRTNFMkJFOTdDN0FCMTg1MkI2NjU2NTM1RjAeFw0yNTA4MjIw ODUyMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwMDQ3MEY2OTMyRUZE MUE1QzQ4Qzg2MkYyRTZERDIxMDA5MTQxQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxMb2K8eeDpzICkyoMZyFSPWd52zmwMt4SZpn4jnTvoDk+vaRF BkoGOEMcB9FiS+TkDRpEO+DyFP+Q71ofrHAm5EOLJ1e9gTQp2CfwTvNTY0FHZ+J/ 2zVgWuGdwl4UgbF3xg6K/XKn/vges/cmtWJBuCGWc3UVek2RNumozhCGmzbCNJWM n6oT6J1YZ+M7JuZYZX6pPZKyXNJp0TkjP7FaGSUrsJWMyMmW6g28aDYdX3oVUkHS r2gmICUGMqgpT3MkPiMAOr+3m2yw85U4fnBAnySGkzxAWPTSz4P4ye1cS4Eoh5Lk 50ZVkmG5SQBGZ/LyiNPXxxOl1fVojlqZcFrDAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUsARw9pMu/RpcSMhi8ubdIQCRQa8wHwYDVR0jBBgwFoAUaMrB+gTYDP4+K+l8 erGFK2ZWU18wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0lHQUJZ VEUvYU1yQi1nVFlEUDQtSy1sOGVyR0ZLMlpXVTE4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9hTXJCLWdUWURQNC1LLWw4ZXJHRksyWldVMTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HSUdBQllURS9zQVJ3OXBNdV9ScGNT TWhpOHViZElRQ1JRYTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4JkMA0GCSqGSIb3DQEBCwUAA4IBAQBWH0ck+IoW33L2ptwCNogV30U+pLg9 3fgcx1Grh/ele45NZis55JlR4zfyO0HNVaG5+OxIwJnRf3E/F5c3ftIwhVRaGTkS GM985Tja8hauy4GLrfqJIlPRSycBCyzZClpIbXuKbfkZfUmgxRzXRbtZhhh1WRTK lObl948mK9CX22+j9Ou1mT8bjuX0XyXUAWN1Oi5X88hl9xwcQeVUjuBlO71tIdW3 23OiHH9TeQEDTtz94J/KV2UrIR1mDTRdLwEDPyXzxumXSY7LO3TZ0WWjKOdER5g4 P8DNYdrC2rbv8IlPO/jo4yop8df1PbNHfqlI+vqa0i47ZkcpMX8g2EvL -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:33 2025 by rpki-client