$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/3nXdg-8WyEpyjsMbBgBBmX79z4s.roa File: 3nXdg-8WyEpyjsMbBgBBmX79z4s.roa (raw, json) Hash identifier: PlPYfEyAsvlG4JiIx6quKIkAtamCi+iu8rMJ+pvIERs= Subject key identifier: DE:75:DD:83:EF:16:C8:4A:72:8E:C3:1B:06:00:41:99:7E:FD:CF:8B Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0BC8 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/3nXdg-8WyEpyjsMbBgBBmX79z4s.roa Signing time: Fri 01 Sep 2023 09:40:40 +0000 ROA not before: Fri 01 Sep 2023 09:40:40 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9676 IP address blocks: 2402:9c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3016 (0xbc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Sep 1 09:40:40 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DE75DD83EF16C84A728EC31B060041997EFDCF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:23:77:fe:33:a9:c0:1e:97:21:c2:4b:de: 6b:96:e6:11:04:0c:b9:16:d3:01:6a:6a:ef:dc:ca: 3b:09:cf:90:e8:4f:b1:f7:ee:5d:f0:dd:b3:0b:11: 6e:f1:99:87:f7:71:2b:e9:b3:8e:e0:fc:19:f3:5f: 9a:e6:4d:7e:61:fb:e1:95:61:6d:ed:cb:34:94:68: c0:a6:6c:f6:52:40:6a:9c:38:22:a6:e0:88:93:ee: 2c:b7:00:fe:36:4f:67:30:fa:3f:6e:af:51:e2:37: 09:78:7e:93:9e:ea:c0:a9:b4:1d:ff:37:47:76:b2: f6:6d:d7:b5:ce:d8:db:7c:c6:95:0d:e6:09:aa:5f: 46:50:db:01:da:e4:70:14:06:82:25:9a:21:fe:86: 7e:81:15:77:ae:e9:88:8a:d4:43:a8:88:e9:55:36: 1a:0f:65:5a:66:40:4d:9e:f0:02:7b:73:7e:d6:e1: 2c:b5:5f:a2:0b:c2:ae:6d:2e:93:31:e6:1b:60:7e: f7:9d:9e:4e:ec:e5:68:c4:7f:0c:12:a7:30:13:ca: c5:c3:4e:a9:03:e4:1c:a2:e9:6e:6f:9f:23:3b:cb: 6f:5f:88:51:86:d9:e5:0f:47:09:49:25:28:3e:2b: 23:8f:29:3e:0d:e3:28:df:11:19:51:df:81:c6:bd: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:75:DD:83:EF:16:C8:4A:72:8E:C3:1B:06:00:41:99:7E:FD:CF:8B X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/3nXdg-8WyEpyjsMbBgBBmX79z4s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:9c00::/32 Signature Algorithm: sha256WithRSAEncryption b0:35:33:d2:34:58:af:88:78:2f:a2:71:d5:cd:6f:d8:d6:a8: ff:76:95:9e:2f:e1:8b:9a:26:6a:db:9e:a8:c0:2d:8a:5b:94: 3d:6d:5c:ab:c9:11:a8:99:37:91:14:17:c5:6d:af:6a:a6:e0: 5c:32:7e:53:a0:32:d4:87:ed:7d:c1:8e:d6:1e:5d:b4:bd:ee: 7c:c8:a8:4f:b0:12:95:fa:55:bb:9c:6f:07:24:64:4f:b7:99: c6:d4:e6:02:ea:0e:6a:72:a8:01:6a:b4:fc:9b:c1:03:2d:d6: f7:d3:96:d3:c0:a7:6f:6b:11:19:1b:0e:cd:73:67:b3:4b:ea: e9:03:fa:6d:71:ff:98:02:80:19:71:6e:10:06:b5:08:fa:f3: aa:1e:73:fe:fa:49:26:11:87:c5:a1:07:bb:84:7b:b9:ad:5c: 00:a7:33:7c:5b:4e:d0:6c:65:ff:ee:f1:66:0a:7b:ec:b1:3d: 1b:c3:55:46:60:f4:3d:ff:8b:d5:35:77:19:7f:c6:5b:2b:7d: 5e:5d:49:36:f2:79:e4:69:cb:60:7d:62:9b:bd:f0:db:f7:80: 1a:45:31:e8:32:b4:ae:27:73:ab:13:b4:f6:db:99:06:61:cb: cf:17:7a:7a:b3:65:d8:9a:db:36:1a:f0:e6:4c:5f:2d:a7:9a: 2f:d5:ff:d2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yMzA5MDEw OTQwNDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERFNzVERDgzRUYxNkM4 NEE3MjhFQzMxQjA2MDA0MTk5N0VGRENGOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgTiN3/jOpwB6XIcJL3muW5hEEDLkW0wFqau/cyjsJz5DoT7H3 7l3w3bMLEW7xmYf3cSvps47g/BnzX5rmTX5h++GVYW3tyzSUaMCmbPZSQGqcOCKm 4IiT7iy3AP42T2cw+j9ur1HiNwl4fpOe6sCptB3/N0d2svZt17XO2Nt8xpUN5gmq X0ZQ2wHa5HAUBoIlmiH+hn6BFXeu6YiK1EOoiOlVNhoPZVpmQE2e8AJ7c37W4Sy1 X6ILwq5tLpMx5htgfvednk7s5WjEfwwSpzATysXDTqkD5Byi6W5vnyM7y29fiFGG 2eUPRwlJJSg+KyOPKT4N4yjfERlR34HGvZQNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU3nXdg+8WyEpyjsMbBgBBmX79z4swHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vM25YZGctOFd5RXB5anNN YkJnQkJtWDc5ejRzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQCnAAwDQYJKoZIhvcNAQELBQADggEBALA1M9I0WK+IeC+icdXNb9jWqP92lZ4v 4YuaJmrbnqjALYpblD1tXKvJEaiZN5EUF8Vtr2qm4FwyflOgMtSH7X3BjtYeXbS9 7nzIqE+wEpX6VbucbwckZE+3mcbU5gLqDmpyqAFqtPybwQMt1vfTltPAp29rERkb Ds1zZ7NL6ukD+m1x/5gCgBlxbhAGtQj686oec/76SSYRh8WhB7uEe7mtXACnM3xb TtBsZf/u8WYKe+yxPRvDVUZg9D3/i9U1dxl/xlsrfV5dSTbyeeRpy2B9Ypu98Nv3 gBpFMegytK4nc6sTtPbbmQZhy88XenqzZdia2zYa8OZMXy2nmi/V/9I= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:52 2024 by rpki-client on console-ams.rpki-client.org