$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/1bY3JtpMibm1TT65jFRqfHVebEk.roa File: 1bY3JtpMibm1TT65jFRqfHVebEk.roa (raw, json) Hash identifier: fdK+nCVMFZgXl/6rFb0MpQpbnRvRQe9OwgsR6j7pqNw= Subject key identifier: D5:B6:37:26:DA:4C:89:B9:B5:4D:3E:B9:8C:54:6A:7C:75:5E:6C:49 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0CD3 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/1bY3JtpMibm1TT65jFRqfHVebEk.roa Signing time: Mon 26 Aug 2024 05:25:20 +0000 ROA not before: Mon 26 Aug 2024 05:25:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9676 IP address blocks: 122.201.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 26 05:25:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D5B63726DA4C89B9B54D3EB98C546A7C755E6C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:e7:91:72:d2:af:82:fa:ee:a7:f0:8f:c4: e6:ee:59:9f:ef:4b:f2:fc:c6:0f:72:6b:2f:cd:f3: d8:60:15:30:07:9a:e1:f3:97:87:a5:d4:9a:1d:ff: b9:73:b4:59:d2:e1:3b:cf:05:0e:d3:18:e5:12:54: 94:f1:fc:6a:d5:d8:01:f0:71:a7:1b:aa:ff:d2:2d: d6:0b:40:9e:84:5e:b3:b9:82:9b:c4:41:a1:c6:3c: 7f:24:12:c1:59:de:00:e4:cb:25:40:7a:55:5d:6e: a0:32:b0:c4:99:01:71:4a:25:45:b1:d6:b9:88:a8: d8:31:a5:cb:b8:0f:47:df:94:43:ff:85:56:3c:27: a1:bf:5b:58:d6:63:81:49:00:5b:8d:3c:64:d4:c7: 53:ad:3e:4a:ed:fb:29:04:d6:e9:3f:41:a2:0c:8e: 9f:6a:35:22:08:ff:2d:85:f8:8b:8b:05:4a:35:eb: 30:e3:24:12:0c:2f:eb:19:e8:5f:61:30:ad:7a:12: a0:ae:6c:1c:7e:77:4c:3d:8c:f1:d1:e4:0b:46:1d: 52:8b:3c:9f:8d:ed:b8:8f:84:ef:db:c5:df:6b:b0: a2:60:c0:c3:b9:46:4b:18:4b:0b:7b:50:15:d0:21: ec:72:2f:48:c9:63:ea:b1:2a:82:fd:c3:0f:47:93: 69:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B6:37:26:DA:4C:89:B9:B5:4D:3E:B9:8C:54:6A:7C:75:5E:6C:49 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/1bY3JtpMibm1TT65jFRqfHVebEk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.201.128.0/17 Signature Algorithm: sha256WithRSAEncryption 8c:73:8e:6e:61:e4:58:df:6a:dc:60:c1:59:9a:9b:2e:d9:b5: a9:89:fe:26:c4:cb:f6:21:08:3a:13:15:68:d2:0d:4f:c9:3a: 7e:11:d4:d4:84:48:50:d4:da:97:ac:e9:19:12:a7:4a:22:39: f9:97:32:18:1f:56:4c:69:d7:71:58:9e:87:0c:0e:7b:fc:0a: a4:61:d6:07:90:40:a8:17:35:e7:14:34:9a:15:b6:48:fc:dc: a4:c6:99:6e:10:cd:6e:5e:66:36:2a:48:3a:cd:dd:17:9d:07: 21:77:36:d5:bb:71:88:ef:b7:af:1a:bb:2e:f0:3f:ef:03:9c: eb:d7:e4:11:6d:53:fd:3f:a5:b1:9d:73:10:74:64:66:23:f7: d0:2b:93:a8:3b:a1:d2:ac:76:68:d9:37:74:77:58:77:1e:02: 0a:43:c4:22:3b:8d:bf:6b:67:e4:6e:5c:06:48:53:86:4b:c9: 09:fe:01:b1:0e:e0:cf:a4:79:65:c5:68:19:2f:a6:9b:56:a2: 3d:cd:07:38:00:04:be:1c:4d:c4:29:7e:ec:fe:a1:a0:94:17: e4:e3:a0:51:fa:01:e3:a2:d5:7f:f8:41:83:d0:b1:a5:e1:51: 66:44:25:b7:aa:f8:90:38:47:5b:cc:25:f2:ef:38:cc:33:73: 49:e5:7d:a5 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNDA4MjYw NTI1MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1QjYzNzI2REE0Qzg5 QjlCNTREM0VCOThDNTQ2QTdDNzU1RTZDNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI4OeRctKvgvrup/CPxObuWZ/vS/L8xg9yay/N89hgFTAHmuHz l4el1Jod/7lztFnS4TvPBQ7TGOUSVJTx/GrV2AHwcacbqv/SLdYLQJ6EXrO5gpvE QaHGPH8kEsFZ3gDkyyVAelVdbqAysMSZAXFKJUWx1rmIqNgxpcu4D0fflEP/hVY8 J6G/W1jWY4FJAFuNPGTUx1OtPkrt+ykE1uk/QaIMjp9qNSII/y2F+IuLBUo16zDj JBIML+sZ6F9hMK16EqCubBx+d0w9jPHR5AtGHVKLPJ+N7biPhO/bxd9rsKJgwMO5 RksYSwt7UBXQIexyL0jJY+qxKoL9ww9Hk2l7AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU1bY3JtpMibm1TT65jFRqfHVebEkwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vMWJZM0p0cE1pYm0xVFQ2 NWpGUnFmSFZlYkVrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME B3rJgDANBgkqhkiG9w0BAQsFAAOCAQEAjHOObmHkWN9q3GDBWZqbLtm1qYn+JsTL 9iEIOhMVaNINT8k6fhHU1IRIUNTal6zpGRKnSiI5+ZcyGB9WTGnXcViehwwOe/wK pGHWB5BAqBc15xQ0mhW2SPzcpMaZbhDNbl5mNipIOs3dF50HIXc21btxiO+3rxq7 LvA/7wOc69fkEW1T/T+lsZ1zEHRkZiP30CuTqDuh0qx2aNk3dHdYdx4CCkPEIjuN v2tn5G5cBkhThkvJCf4BsQ7gz6R5ZcVoGS+mm1aiPc0HOAAEvhxNxCl+7P6hoJQX 5OOgUfoB46LVf/hBg9CxpeFRZkQlt6r4kDhHW8wl8u84zDNzSeV9pQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org