$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/323430323a396330303a3a2f33322d3332203d3e2039363736.roa File: 323430323a396330303a3a2f33322d3332203d3e2039363736.roa (raw, json) Hash identifier: 9OUmnuWjjpgoS1r40yiT4072IJUbXpp3sB49k6G8aSU= Subject key identifier: D6:E6:35:A0:7A:BB:DF:D4:52:5F:12:32:27:3C:BD:DC:9F:8C:34:8E Certificate issuer: /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C Certificate serial: 4345A7966EBD014ACDEA79DE138178E0243EF901 Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SAVECOM/0/323430323a396330303a3a2f33322d3332203d3e2039363736.roa Signing time: Mon 11 May 2026 16:54:21 +0000 ROA not before: Mon 11 May 2026 16:49:21 +0000 ROA not after: Mon 10 May 2027 16:54:21 +0000 asID: 9676 IP address blocks: 2402:9c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:45:a7:96:6e:bd:01:4a:cd:ea:79:de:13:81:78:e0:24:3e:f9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C Validity Not Before: May 11 16:49:21 2026 GMT Not After : May 10 16:54:21 2027 GMT Subject: CN=D6E635A07ABBDFD4525F1232273CBDDC9F8C348E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ed:33:86:41:82:90:d6:ad:08:38:c9:59:c4: c8:1c:17:ef:f0:1f:77:30:87:a3:ed:06:d0:6b:95: 01:8f:50:f2:85:98:02:93:89:20:85:5a:28:30:ed: f6:45:62:3f:54:45:e8:a7:43:58:4e:a7:35:a6:a2: d4:2d:b0:53:fb:b1:c6:32:60:42:5b:b0:c1:7d:0b: e4:ad:f5:0f:d5:0f:5e:34:a9:25:58:5f:3e:0d:c3: 71:81:62:f9:be:d1:00:0a:8e:5a:5e:7a:4e:8b:12: 4a:d9:99:c5:42:3f:4b:0e:f2:ea:d3:2b:18:5e:75: b7:ea:a3:46:3c:c7:aa:f2:c4:71:6a:ba:11:cb:d9: f9:c0:b7:b8:42:1f:eb:17:9e:7e:3d:ef:44:58:97: ff:4b:28:75:34:15:06:5d:34:5b:fd:7a:a9:e3:57: 8e:7a:67:c5:28:d4:b2:c6:6e:c9:36:95:21:c3:28: 12:c8:72:ba:71:3b:7e:3b:ad:01:be:0d:f7:0a:f2: 06:03:25:83:31:5d:16:b7:7a:0c:f8:ce:6a:3b:3e: a2:ec:3a:34:16:e7:38:96:9c:5a:8d:09:81:3a:0d: f1:e8:32:30:3c:92:5e:83:f3:a5:a8:66:a2:b0:73: ff:2e:da:e3:23:cd:91:3c:78:8a:c3:a4:8e:4d:08: d4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E6:35:A0:7A:BB:DF:D4:52:5F:12:32:27:3C:BD:DC:9F:8C:34:8E X509v3 Authority Key Identifier: keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/323430323a396330303a3a2f33322d3332203d3e2039363736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9c00::/32 Signature Algorithm: sha256WithRSAEncryption 8f:4a:58:da:4d:4e:76:61:a4:3d:a5:d3:cb:6d:c7:8d:72:26: 89:db:66:f3:34:ea:19:bb:29:b3:c0:6e:20:7e:c2:aa:d5:aa: af:d2:2d:79:32:d7:b1:dc:9d:06:2a:63:65:72:fb:6d:1e:82: 08:50:89:07:0b:a3:52:58:7d:ef:c1:de:14:3d:28:1e:9a:9b: fc:db:1b:f2:9a:36:e5:21:c4:f1:48:1d:50:72:f5:6d:a7:cc: b4:bb:94:cf:8e:38:0a:90:09:af:b1:b9:32:45:8f:11:75:f6: 18:60:61:10:c1:2f:58:4f:16:3d:af:11:85:7d:59:8f:83:c3: 06:ed:e8:be:5b:1e:37:a9:43:9c:8e:b7:1c:58:c5:eb:3a:6e: db:b2:86:ac:0e:f1:6d:9d:a2:11:cf:a7:af:a1:27:61:7e:1a: 25:d2:67:0a:84:66:ed:c1:c1:15:ed:f2:1a:9a:71:67:5e:5d: fd:0c:3d:e4:d4:07:32:41:7e:d1:98:70:d8:d9:e7:91:f9:81: fc:7a:42:d7:e1:fd:d8:c5:e4:f7:24:fb:3c:15:a2:cb:07:91: f8:9c:d9:55:a9:a0:7f:94:82:88:2d:c2:85:1d:a9:13:c4:d4: f1:f2:24:3b:3f:e5:0b:13:c2:05:94:2b:67:81:79:a9:91:5c: 90:90:0e:7e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUQ0Wnlm69AUrN6nneE4F44CQ++QEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2MkRDMjU1RTg3QzBFRTYzRENBMEVBREQ0QTM4RjA2 QjZDNTU1QzAeFw0yNjA1MTExNjQ5MjFaFw0yNzA1MTAxNjU0MjFaMDMxMTAvBgNV BAMTKEQ2RTYzNUEwN0FCQkRGRDQ1MjVGMTIzMjI3M0NCRERDOUY4QzM0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7TOGQYKQ1q0IOMlZxMgcF+/w H3cwh6PtBtBrlQGPUPKFmAKTiSCFWigw7fZFYj9UReinQ1hOpzWmotQtsFP7scYy YEJbsMF9C+St9Q/VD140qSVYXz4Nw3GBYvm+0QAKjlpeek6LEkrZmcVCP0sO8urT Kxhedbfqo0Y8x6ryxHFquhHL2fnAt7hCH+sXnn4970RYl/9LKHU0FQZdNFv9eqnj V456Z8Uo1LLGbsk2lSHDKBLIcrpxO347rQG+DfcK8gYDJYMxXRa3egz4zmo7PqLs OjQW5ziWnFqNCYE6DfHoMjA8kl6D86WoZqKwc/8u2uMjzZE8eIrDpI5NCNRbAgMB AAGjggHiMIIB3jAdBgNVHQ4EFgQU1uY1oHq739RSXxIyJzy93J+MNI4wHwYDVR0j BBgwFoAUmWLcJV6HwO5j3KDq3Uo48GtsVVwwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0FWRUNP TS8wLzk5NjJEQzI1NUU4N0MwRUU2M0RDQTBFQURENEEzOEYwNkI2QzU1NUMuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvOTk2MkRDMjU1RTg3QzBFRTYzRENBMEVBREQ0 QTM4RjA2QjZDNTU1Qy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1y c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NBVkVDT00vMC8zMjM0MzAzMjNh Mzk2MzMwMzAzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzOTM2MzczNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQCnAAwDQYJKoZIhvcNAQELBQADggEBAI9KWNpNTnZhpD2l08ttx41yJonb ZvM06hm7KbPAbiB+wqrVqq/SLXky17HcnQYqY2Vy+20egghQiQcLo1JYfe/B3hQ9 KB6am/zbG/KaNuUhxPFIHVBy9W2nzLS7lM+OOAqQCa+xuTJFjxF19hhgYRDBL1hP Fj2vEYV9WY+Dwwbt6L5bHjepQ5yOtxxYxes6btuyhqwO8W2dohHPp6+hJ2F+GiXS ZwqEZu3BwRXt8hqacWdeXf0MPeTUBzJBftGYcNjZ55H5gfx6Qtfh/djF5Pck+zwV ossHkfic2VWpoH+UgogtwoUdqRPE1PHyJDs/5QsTwgWUK2eBeamRXJCQDn4= -----END CERTIFICATE-----Generated at Wed May 13 19:17:52 2026 by rpki-client