$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/6L3NsAMT96HD4dOz552pmJMd_Qw.roa File: 6L3NsAMT96HD4dOz552pmJMd_Qw.roa (raw, json) Hash identifier: 3Tb8XMHDPq9h9m6L273AidOz2F7v0lMERUVeHcH36tA= Subject key identifier: E8:BD:CD:B0:03:13:F7:A1:C3:E1:D3:B3:E7:9D:A9:98:93:1D:FD:0C Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0CDF Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/6L3NsAMT96HD4dOz552pmJMd_Qw.roa Signing time: Mon 26 Aug 2024 05:25:22 +0000 ROA not before: Mon 26 Aug 2024 05:25:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9676 IP address blocks: 61.65.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 26 05:25:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E8BDCDB00313F7A1C3E1D3B3E79DA998931DFD0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:7e:4a:5c:71:8c:b7:ac:a3:92:1b:50:1c: 3b:90:69:9c:b1:d1:c7:ff:29:4b:2e:f0:f6:26:f2: 5a:e3:65:40:b2:c3:0c:45:23:cd:79:31:e1:57:df: e7:02:ff:7a:80:e7:9d:83:99:37:fc:2b:17:25:22: 8b:ed:3c:65:2d:0e:89:ab:a6:b3:f1:b9:41:70:f6: bd:72:0f:4e:88:f6:f0:09:b9:8c:1c:ee:c6:d9:b0: 75:cf:ca:58:d8:3c:be:6d:02:12:58:ce:85:dc:4d: d4:42:1b:a5:37:83:22:d1:4e:b5:92:47:a8:fb:7e: 62:fa:98:8a:53:f4:06:3d:53:86:91:9b:f3:d8:26: bf:2a:92:e1:66:3b:06:ae:e4:5c:17:ef:23:f3:61: 43:3c:1f:24:c3:a2:fe:65:78:f3:18:dc:88:6e:81: 41:ea:9d:e6:96:f1:4e:bf:47:c7:f5:d7:b1:ce:75: af:53:2f:a6:3d:a7:df:fa:e6:7a:47:fc:b1:74:bf: 2c:3b:6c:d8:83:80:15:c3:cf:d9:46:e5:6b:ef:bb: c9:26:e0:3c:1c:63:ea:42:14:c8:ea:2b:b6:d4:a7: c8:a1:29:3b:7f:2c:27:58:70:d6:59:e5:d2:60:48: d9:2a:df:20:e1:6c:aa:28:d2:cb:c5:0d:71:43:6a: e9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BD:CD:B0:03:13:F7:A1:C3:E1:D3:B3:E7:9D:A9:98:93:1D:FD:0C X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/6L3NsAMT96HD4dOz552pmJMd_Qw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.65.0.0/17 Signature Algorithm: sha256WithRSAEncryption d1:ef:61:82:41:4c:e3:b8:e4:43:88:8a:a2:63:70:91:f0:d0: c5:eb:e7:df:83:af:38:0f:f6:41:be:0d:06:7d:a3:ab:57:a7: 2a:fe:61:50:4b:a3:c5:fb:83:f8:7d:31:75:db:d3:43:fd:79: 6e:8e:b2:c9:d7:cc:02:9d:c9:c0:6f:f2:e8:12:02:7c:d4:f2: 3b:a6:a5:7e:8c:97:9b:8b:fa:83:ce:af:99:ca:be:4d:7a:5d: a5:1e:df:55:82:94:5a:ae:92:fe:e0:cb:13:8c:eb:32:4f:1a: 0c:c4:84:b0:9d:3b:41:86:26:f1:a5:8f:e4:21:fa:8b:06:6d: c7:cf:fa:f2:7f:4f:78:73:00:18:72:07:02:d1:84:81:2a:b1: 26:97:0f:94:a8:e0:c4:92:77:2c:5c:07:45:91:ce:a8:96:8d: 46:25:3e:26:d3:ba:85:b2:7e:ed:6a:70:b3:da:16:f7:3f:4d: e2:2d:86:d6:60:bc:08:fa:25:f7:a0:e3:8c:34:85:e7:3f:8e: d4:1f:6f:0c:6f:3a:39:90:cf:ce:9f:1f:23:99:f5:68:c3:18: a3:69:cb:25:bb:3f:94:17:ed:ae:44:6f:b1:0f:3e:f3:e4:5c: 09:8f:6e:23:b2:69:a7:6b:df:fd:a7:3e:15:d9:0c:be:90:e2: 6a:f2:60:2a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNDA4MjYw NTI1MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4QkRDREIwMDMxM0Y3 QTFDM0UxRDNCM0U3OURBOTk4OTMxREZEMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeOn5KXHGMt6yjkhtQHDuQaZyx0cf/KUsu8PYm8lrjZUCywwxF I815MeFX3+cC/3qA552DmTf8KxclIovtPGUtDomrprPxuUFw9r1yD06I9vAJuYwc 7sbZsHXPyljYPL5tAhJYzoXcTdRCG6U3gyLRTrWSR6j7fmL6mIpT9AY9U4aRm/PY Jr8qkuFmOwau5FwX7yPzYUM8HyTDov5lePMY3IhugUHqneaW8U6/R8f117HOda9T L6Y9p9/65npH/LF0vyw7bNiDgBXDz9lG5Wvvu8km4DwcY+pCFMjqK7bUp8ihKTt/ LCdYcNZZ5dJgSNkq3yDhbKoo0svFDXFDaulTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU6L3NsAMT96HD4dOz552pmJMd/QwwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vNkwzTnNBTVQ5NkhENGRP ejU1MnBtSk1kX1F3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Bz1BADANBgkqhkiG9w0BAQsFAAOCAQEA0e9hgkFM47jkQ4iKomNwkfDQxevn34Ov OA/2Qb4NBn2jq1enKv5hUEujxfuD+H0xddvTQ/15bo6yydfMAp3JwG/y6BICfNTy O6alfoyXm4v6g86vmcq+TXpdpR7fVYKUWq6S/uDLE4zrMk8aDMSEsJ07QYYm8aWP 5CH6iwZtx8/68n9PeHMAGHIHAtGEgSqxJpcPlKjgxJJ3LFwHRZHOqJaNRiU+JtO6 hbJ+7Wpws9oW9z9N4i2G1mC8CPol96DjjDSF5z+O1B9vDG86OZDPzp8fI5n1aMMY o2nLJbs/lBftrkRvsQ8+8+RcCY9uI7Jpp2vf/ac+FdkMvpDiavJgKg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org