$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/wUCF-ZXpeIJpRzPpExxOOeg4kHc.roa File: wUCF-ZXpeIJpRzPpExxOOeg4kHc.roa (raw, json) Hash identifier: FmHRfCyZT2y3v8qYa4QcPmSasQhaO1Lenx33RFRMml4= Subject key identifier: C1:40:85:F9:95:E9:78:82:69:47:33:E9:13:1C:4E:39:E8:38:90:77 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0D62 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/wUCF-ZXpeIJpRzPpExxOOeg4kHc.roa Signing time: Mon 10 Feb 2025 13:51:05 +0000 ROA not before: Mon 10 Feb 2025 13:51:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9676 IP address blocks: 210.62.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 13:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3426 (0xd62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Feb 10 13:51:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C14085F995E97882694733E9131C4E39E8389077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:36:6a:dc:c9:7c:11:4c:4e:7d:01:52:f4:99: 26:6f:34:74:6d:80:0e:cf:07:0f:bb:14:e3:f1:85: a4:1a:7f:3b:3c:0a:49:18:9d:b3:11:bb:44:df:41: c0:8b:62:01:f6:1b:d2:b3:b6:aa:c2:64:64:21:8a: 47:c9:8f:e0:b0:5e:f2:93:c3:98:ed:1a:20:a8:65: 3c:bd:c9:89:1a:87:aa:80:09:c3:50:e4:77:13:00: f1:2b:36:f7:34:ed:1e:ea:ec:f0:9c:7e:19:85:9b: 7e:d0:b4:68:07:8c:97:a9:7c:1f:87:9b:24:78:c2: 8c:21:49:87:57:fd:7f:d3:68:8a:7b:6b:50:10:87: 21:56:34:47:1d:00:b8:42:c3:1a:7e:d5:ec:6f:5c: a3:63:24:17:1a:ad:ff:c8:a4:d1:18:87:dd:5f:26: fa:77:b0:59:d9:22:6a:ff:21:dc:01:5d:dc:9d:ba: 2e:5b:2a:eb:cc:e4:c7:eb:2d:06:67:dc:35:24:fb: 47:13:e8:b9:4f:d3:9b:e9:a4:33:45:6e:f6:f7:b3: 96:3f:ac:c8:3a:45:6b:8d:a4:4e:eb:fa:45:d2:ce: ac:e1:de:b2:a6:8c:0f:23:35:fb:a0:2a:6c:29:d0: d7:2b:5a:3b:a7:9f:43:17:c0:a5:2c:b6:9b:1e:ea: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:85:F9:95:E9:78:82:69:47:33:E9:13:1C:4E:39:E8:38:90:77 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/wUCF-ZXpeIJpRzPpExxOOeg4kHc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.176.0/20 Signature Algorithm: sha256WithRSAEncryption 41:a8:81:fe:b0:83:f8:c6:d9:c8:d1:df:9f:7c:f0:54:fc:c1: 40:bb:e9:e9:e9:9c:5b:db:9d:78:b8:e2:ea:a2:f7:36:fd:59: 01:3f:a8:ba:a9:30:61:3a:87:fd:d9:a4:34:4a:99:36:a6:28: 6e:9e:1c:81:00:8f:64:43:ce:2d:33:4e:f7:1f:53:96:a2:94: 8c:93:af:ba:66:b6:a5:a1:ac:57:78:09:f8:e9:7c:c9:32:24: f7:ba:46:b2:7f:84:74:c1:48:16:45:d8:3f:86:0c:a4:e2:43: 38:64:0f:4f:d3:cc:c0:09:24:73:bc:3e:63:42:96:67:e0:68: 06:b7:3a:99:3d:4c:05:75:c6:da:69:e1:94:12:d3:b1:82:dd: dc:9f:aa:ba:5d:d7:8f:33:3c:8c:f6:1d:f3:27:a6:e6:12:17: 82:b8:16:cc:6a:40:c2:3d:81:6c:f8:ee:4f:5a:b1:5b:26:38: a9:72:ea:77:ac:b4:0d:6e:31:c4:ed:9f:70:2c:54:89:c3:e9: b3:e8:23:b8:f1:25:fb:b2:53:54:b3:f3:e8:e9:6b:82:a0:ce: b1:dd:66:6b:cf:b7:ea:a3:6c:49:74:4b:10:f4:2a:11:d6:dd: 4e:95:7a:f2:57:0c:f1:ca:68:5f:79:1d:c2:8b:31:ce:c2:0f: 4c:79:ff:c7 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNTAyMTAx MzUxMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMxNDA4NUY5OTVFOTc4 ODI2OTQ3MzNFOTEzMUM0RTM5RTgzODkwNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJNmrcyXwRTE59AVL0mSZvNHRtgA7PBw+7FOPxhaQafzs8CkkY nbMRu0TfQcCLYgH2G9KztqrCZGQhikfJj+CwXvKTw5jtGiCoZTy9yYkah6qACcNQ 5HcTAPErNvc07R7q7PCcfhmFm37QtGgHjJepfB+HmyR4wowhSYdX/X/TaIp7a1AQ hyFWNEcdALhCwxp+1exvXKNjJBcarf/IpNEYh91fJvp3sFnZImr/IdwBXdydui5b KuvM5MfrLQZn3DUk+0cT6LlP05vppDNFbvb3s5Y/rMg6RWuNpE7r+kXSzqzh3rKm jA8jNfugKmwp0NcrWjunn0MXwKUstpse6vUXAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUwUCF+ZXpeIJpRzPpExxOOeg4kHcwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vd1VDRi1aWHBlSUpwUnpQ cEV4eE9PZWc0a0hjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BNI+sDANBgkqhkiG9w0BAQsFAAOCAQEAQaiB/rCD+MbZyNHfn3zwVPzBQLvp6emc W9udeLji6qL3Nv1ZAT+ouqkwYTqH/dmkNEqZNqYobp4cgQCPZEPOLTNO9x9TlqKU jJOvuma2paGsV3gJ+Ol8yTIk97pGsn+EdMFIFkXYP4YMpOJDOGQPT9PMwAkkc7w+ Y0KWZ+BoBrc6mT1MBXXG2mnhlBLTsYLd3J+qul3XjzM8jPYd8yem5hIXgrgWzGpA wj2BbPjuT1qxWyY4qXLqd6y0DW4xxO2fcCxUicPps+gjuPEl+7JTVLPz6OlrgqDO sd1ma8+36qNsSXRLEPQqEdbdTpV68lcM8cpoX3kdwosxzsIPTHn/xw== -----END CERTIFICATE-----Generated at Thu Apr 17 13:08:00 2025 by rpki-client