$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/H-dcASs8FCo72KW4CA_1TqIdxWE.roa File: H-dcASs8FCo72KW4CA_1TqIdxWE.roa (raw, json) Hash identifier: kLwvz8il24CdaqzuTULQwmkOzoZnnzRw6LDMgDu/7kk= Subject key identifier: 1F:E7:5C:01:2B:3C:14:2A:3B:D8:A5:B8:08:0F:F5:4E:A2:1D:C5:61 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0D60 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/H-dcASs8FCo72KW4CA_1TqIdxWE.roa Signing time: Mon 10 Feb 2025 13:51:05 +0000 ROA not before: Mon 10 Feb 2025 13:51:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9676 IP address blocks: 61.58.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Feb 10 13:51:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1FE75C012B3C142A3BD8A5B8080FF54EA21DC561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0b:8b:48:61:e3:ff:40:e6:07:19:41:39:5a: bd:63:81:20:a5:f0:e3:65:69:c6:2a:03:c5:ba:c8: 20:e1:93:a9:29:27:59:b9:ed:fe:92:d7:54:9b:c5: c9:ce:3d:df:3e:fa:2d:b8:a7:e3:a7:09:47:ea:8f: 6e:41:1d:74:e2:4b:1f:55:9d:56:41:35:0e:0e:53: cb:c1:e1:79:b1:87:37:a9:6d:55:b8:29:18:15:88: d4:b5:a7:94:99:8d:a1:91:fe:7d:60:ce:ea:ec:e7: 40:5f:6b:80:b5:ad:35:e4:d7:dc:ec:58:ab:5e:3e: b9:15:c7:d1:df:99:50:c7:16:30:8f:8f:4b:45:d8: b1:b1:6e:df:6b:12:f5:28:99:da:d5:5a:5b:d6:ac: 89:c1:22:3c:7a:5f:72:cd:df:4f:4b:14:65:a4:da: a8:4c:37:cb:87:c8:87:52:ac:8e:d7:b0:6b:62:81: 86:9c:d7:5f:fa:d8:db:97:fd:3a:07:aa:47:c7:88: 4b:4d:14:dd:99:74:c3:1a:1d:57:a8:73:08:0f:51: 98:ed:fd:14:27:b1:35:b0:52:d3:ed:3b:2b:df:b6: 96:87:9b:e9:47:69:b7:0c:19:3e:8f:9c:51:8d:45: 5d:b7:c0:5b:bc:d6:01:e7:a5:f2:62:ae:f2:0a:b9: a9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E7:5C:01:2B:3C:14:2A:3B:D8:A5:B8:08:0F:F5:4E:A2:1D:C5:61 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/H-dcASs8FCo72KW4CA_1TqIdxWE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.192.0/18 Signature Algorithm: sha256WithRSAEncryption 79:a3:78:6d:87:f9:38:9b:90:d7:2c:94:3a:30:e9:70:b3:5f: e8:20:c2:2a:6a:f3:46:19:19:13:ab:28:2e:ca:e8:f1:d1:7d: a9:29:5d:0f:ad:3b:f1:61:b2:aa:cf:02:1b:e5:52:2b:a6:f4: 43:6e:24:04:ed:eb:36:80:4d:00:a2:aa:c5:3c:c6:fe:b0:6d: 3b:20:b1:e0:ee:66:0e:6f:66:6f:fc:0b:c2:2f:51:aa:90:40: e9:51:a9:8d:e0:91:12:2a:f6:1e:36:57:bc:76:9a:e4:0a:ce: 1c:6a:6c:34:56:ef:26:69:d9:81:7e:fc:dd:4a:28:44:5d:e7: b1:dc:c2:09:3a:9b:92:af:1e:87:f8:44:7b:b3:32:14:e2:fa: b6:e1:4d:a5:68:8b:88:0e:2f:fa:fa:64:3d:7a:f5:de:3c:ed: 50:26:43:e0:1d:1e:36:50:fe:bc:62:a5:16:2c:dd:7d:f9:55: 43:23:f5:3c:5a:4b:c4:6e:ca:08:ba:7a:78:7e:49:86:d1:85: af:42:a4:7a:b2:47:16:f8:b3:72:f5:6c:bb:92:0a:b2:94:45: 01:15:9a:88:02:22:ec:49:9e:f1:a9:5a:de:61:8b:fb:fc:e4: 26:2b:a4:d4:2f:1c:5b:b3:dd:43:63:f4:dd:23:e3:c0:69:86: 31:a1:66:b7 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNTAyMTAx MzUxMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGRTc1QzAxMkIzQzE0 MkEzQkQ4QTVCODA4MEZGNTRFQTIxREM1NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoC4tIYeP/QOYHGUE5Wr1jgSCl8ONlacYqA8W6yCDhk6kpJ1m5 7f6S11SbxcnOPd8++i24p+OnCUfqj25BHXTiSx9VnVZBNQ4OU8vB4XmxhzepbVW4 KRgViNS1p5SZjaGR/n1gzurs50Bfa4C1rTXk19zsWKtePrkVx9HfmVDHFjCPj0tF 2LGxbt9rEvUomdrVWlvWrInBIjx6X3LN309LFGWk2qhMN8uHyIdSrI7XsGtigYac 11/62NuX/ToHqkfHiEtNFN2ZdMMaHVeocwgPUZjt/RQnsTWwUtPtOyvftpaHm+lH abcMGT6PnFGNRV23wFu81gHnpfJirvIKuakrAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUH+dcASs8FCo72KW4CA/1TqIdxWEwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vSC1kY0FTczhGQ283MktX NENBXzFUcUlkeFdFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Bj06wDANBgkqhkiG9w0BAQsFAAOCAQEAeaN4bYf5OJuQ1yyUOjDpcLNf6CDCKmrz RhkZE6soLsro8dF9qSldD6078WGyqs8CG+VSK6b0Q24kBO3rNoBNAKKqxTzG/rBt OyCx4O5mDm9mb/wLwi9RqpBA6VGpjeCREir2HjZXvHaa5ArOHGpsNFbvJmnZgX78 3UooRF3nsdzCCTqbkq8eh/hEe7MyFOL6tuFNpWiLiA4v+vpkPXr13jztUCZD4B0e NlD+vGKlFizdfflVQyP1PFpLxG7KCLp6eH5JhtGFr0KkerJHFvizcvVsu5IKspRF ARWaiAIi7Eme8ala3mGL+/zkJiuk1C8cW7PdQ2P03SPjwGmGMaFmtw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net