$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/bU6kkgOGL8MiZM4nNw1wx8Ax-gM.roa File: bU6kkgOGL8MiZM4nNw1wx8Ax-gM.roa (raw, json) Hash identifier: w5Ajp33GC22aDVHI8HS9JKhW7ZCkH24zVbUcd7wKJ3A= Subject key identifier: 6D:4E:A4:92:03:86:2F:C3:22:64:CE:27:37:0D:70:C7:C0:31:FA:03 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0D66 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/bU6kkgOGL8MiZM4nNw1wx8Ax-gM.roa Signing time: Mon 10 Feb 2025 13:51:06 +0000 ROA not before: Mon 10 Feb 2025 13:51:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9676 IP address blocks: 118.99.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3430 (0xd66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Feb 10 13:51:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6D4EA49203862FC32264CE27370D70C7C031FA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:46:63:a3:56:f6:d3:39:4a:b7:6e:97:5d: 75:14:17:8e:57:e1:f3:cd:3d:86:e0:23:d6:30:0e: 9b:42:6a:31:83:97:c1:45:7e:f5:25:5d:36:89:38: 74:94:e0:1e:bf:e7:e3:24:b4:75:c6:53:2c:54:7b: b2:1a:07:6f:eb:b0:04:59:9b:e4:12:02:90:8d:5c: db:93:17:29:c0:7e:69:19:c6:3a:f9:e3:37:7c:f7: a4:02:7c:af:e5:b7:50:ca:2e:1e:ea:81:24:89:fc: c0:d7:c0:07:a1:74:c8:59:67:c7:d9:e4:ff:c7:e5: 65:e9:f8:fb:aa:75:88:1a:de:d1:f0:73:18:dc:d2: 1e:89:51:d5:78:e9:e1:67:d8:ce:c5:60:f5:62:63: 2b:6c:ea:49:42:93:9b:a0:03:81:f5:4d:e9:81:65: 2c:c0:f8:1d:a6:35:3b:2c:c3:a5:aa:90:eb:94:5c: cd:df:a8:a6:93:7c:a1:a4:d6:50:b9:f9:cb:8a:28: ec:c6:f6:78:ac:e5:1c:27:3a:77:fe:f2:6a:ce:c5: e5:97:47:49:29:38:ec:42:dd:13:e6:01:4e:ba:90: 97:2d:19:df:0f:e2:8e:15:e1:db:54:87:41:9c:44: dd:6d:11:53:46:96:d8:6d:f3:06:46:77:97:76:49: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4E:A4:92:03:86:2F:C3:22:64:CE:27:37:0D:70:C7:C0:31:FA:03 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/bU6kkgOGL8MiZM4nNw1wx8Ax-gM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.99.128.0/17 Signature Algorithm: sha256WithRSAEncryption 3a:5c:e4:d2:e0:d8:cf:66:04:48:6c:e5:f8:6a:37:c5:8e:39: 3d:55:1a:e5:1e:2e:ff:ab:de:a4:a7:3e:50:6d:36:4e:a4:4a: b3:04:3e:db:8b:d5:65:de:29:7c:a1:57:ba:18:5d:a2:a6:b3: 26:25:12:b1:ca:4d:b7:df:61:53:bb:00:43:17:10:ad:2d:31: 8b:d5:e0:d5:41:36:be:d6:45:3b:bc:a0:bd:e3:24:d1:03:3f: 9b:ef:58:8f:72:44:eb:2a:de:39:b5:73:aa:5c:a6:22:8c:20: 6b:41:a9:d4:4c:52:c7:d5:b4:ea:79:5c:d6:9c:2c:62:6f:4e: ac:e9:a6:a9:5a:7e:ec:62:ac:c7:69:94:a9:69:32:29:41:d3: 9d:4c:50:ef:b8:eb:8b:46:f6:86:59:74:4c:33:18:e1:6e:92: da:0f:05:6c:ec:ed:ec:06:24:d5:ae:43:54:ad:b1:1e:b4:4b: ed:85:06:f4:32:1a:9f:26:ba:10:14:e8:fd:ce:39:fb:25:0e: 82:f3:8f:db:c0:1d:5d:4d:5d:78:8c:a5:bf:8c:ac:46:de:4b: 27:99:38:62:f1:92:63:e0:b8:39:1b:59:42:b2:e9:05:49:3b: 14:8e:8c:74:4e:4a:10:b8:b2:95:35:a1:37:73:fc:40:e9:7f: 7a:c0:6a:51 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNTAyMTAx MzUxMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZENEVBNDkyMDM4NjJG QzMyMjY0Q0UyNzM3MEQ3MEM3QzAzMUZBMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+M0Zjo1b20zlKt26XXXUUF45X4fPNPYbgI9YwDptCajGDl8FF fvUlXTaJOHSU4B6/5+MktHXGUyxUe7IaB2/rsARZm+QSApCNXNuTFynAfmkZxjr5 4zd896QCfK/lt1DKLh7qgSSJ/MDXwAehdMhZZ8fZ5P/H5WXp+PuqdYga3tHwcxjc 0h6JUdV46eFn2M7FYPViYyts6klCk5ugA4H1TemBZSzA+B2mNTssw6WqkOuUXM3f qKaTfKGk1lC5+cuKKOzG9nis5RwnOnf+8mrOxeWXR0kpOOxC3RPmAU66kJctGd8P 4o4V4dtUh0GcRN1tEVNGltht8wZGd5d2SdjnAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUbU6kkgOGL8MiZM4nNw1wx8Ax+gMwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vYlU2a2tnT0dMOE1pWk00 bk53MXd4OEF4LWdNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME B3ZjgDANBgkqhkiG9w0BAQsFAAOCAQEAOlzk0uDYz2YESGzl+Go3xY45PVUa5R4u /6vepKc+UG02TqRKswQ+24vVZd4pfKFXuhhdoqazJiUSscpNt99hU7sAQxcQrS0x i9Xg1UE2vtZFO7ygveMk0QM/m+9Yj3JE6yreObVzqlymIowga0Gp1ExSx9W06nlc 1pwsYm9OrOmmqVp+7GKsx2mUqWkyKUHTnUxQ77jri0b2hll0TDMY4W6S2g8FbOzt 7AYk1a5DVK2xHrRL7YUG9DIanya6EBTo/c45+yUOgvOP28AdXU1deIylv4ysRt5L J5k4YvGSY+C4ORtZQrLpBUk7FI6MdE5KELiylTWhN3P8QOl/esBqUQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net