$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/8ee4Mpg5jSY-613nmMFs804n32Y.roa File: 8ee4Mpg5jSY-613nmMFs804n32Y.roa (raw, json) Hash identifier: shKqDrD6kM0iXscb0wGGmGWW1PSbLkSjJ9+/MzheiQQ= Subject key identifier: F1:E7:B8:32:98:39:8D:26:3E:EB:5D:E7:98:C1:6C:F3:4E:27:DF:66 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0CD6 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/8ee4Mpg5jSY-613nmMFs804n32Y.roa Signing time: Mon 26 Aug 2024 05:25:21 +0000 ROA not before: Mon 26 Aug 2024 05:25:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9676 IP address blocks: 101.0.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 26 05:25:21 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F1E7B83298398D263EEB5DE798C16CF34E27DF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:f4:68:ee:d0:02:06:f9:6c:b7:45:5e:01: 26:07:3f:18:a6:0f:88:bc:79:15:00:46:cc:6a:a7: a0:b2:d4:98:b6:6f:d3:3b:ec:81:51:8b:e0:50:dc: c5:db:d3:8a:72:3f:39:c0:b1:74:18:f1:5d:fb:7b: 11:0b:eb:c4:95:d8:24:f7:6a:be:16:29:57:ff:3c: 8b:ff:4e:15:08:ed:e3:1d:04:6f:52:d8:9c:ea:48: 94:c7:03:66:8e:d2:9e:3d:2f:87:46:b1:a0:18:5c: 4d:d1:5c:a6:a2:35:10:7a:65:21:34:7d:b1:d4:48: 8d:23:3e:34:d0:6f:41:71:1e:6e:3a:a9:12:9b:e2: 77:77:78:99:4e:e3:89:e1:be:d7:67:c0:47:15:47: ae:56:2f:da:2f:7c:b0:9a:37:4a:a4:da:ab:f4:6e: 2c:0c:f3:fe:3e:12:71:df:34:3a:5a:b6:d6:f4:55: 58:fa:ae:26:d5:51:2a:6c:67:3f:6b:d2:e6:63:4e: 54:9d:62:c9:c8:6b:4b:70:ca:ff:94:19:75:cc:7d: 42:22:34:78:27:cd:2a:0d:47:72:2c:8e:1f:93:a7: 8c:ca:15:27:13:ac:1f:fa:8d:a4:b2:df:e7:4c:c7: 2c:50:0b:d2:6b:41:30:df:fd:14:4a:74:87:26:32: 85:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E7:B8:32:98:39:8D:26:3E:EB:5D:E7:98:C1:6C:F3:4E:27:DF:66 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/8ee4Mpg5jSY-613nmMFs804n32Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.0.128.0/18 Signature Algorithm: sha256WithRSAEncryption 52:44:fe:7d:b7:a9:9e:1e:96:8d:ed:d1:8d:cd:57:f1:45:94: 3f:50:3a:8d:8a:3e:8e:69:80:03:95:61:79:a4:57:f3:db:f9: 5d:ea:af:d8:e8:af:89:1c:62:30:e9:c7:a1:8a:a5:bc:9f:df: 73:46:48:b7:16:92:ec:fa:15:47:3c:fc:ce:f5:b0:1e:66:0e: ca:59:b0:3c:a7:2e:90:1d:fc:c7:56:c9:59:1f:fe:07:60:3a: ec:45:42:7c:51:26:18:e9:9b:85:ee:42:ce:2d:f0:55:e6:f0: 84:90:48:24:81:d2:07:7b:16:d8:fe:17:0e:5f:2b:60:bb:32: ed:ec:04:2d:0d:09:d2:59:4a:c4:50:b9:b8:31:4f:f6:e7:c4: 68:b2:ae:8c:63:02:ed:94:46:ea:0e:c5:9c:5a:d1:ac:78:0b: b2:23:da:66:35:85:03:ee:56:6e:5a:8c:41:4d:31:b1:c8:29: d6:74:e2:8c:3b:96:af:8e:b0:e7:12:83:88:d5:d0:92:8a:8a: 17:d1:dd:1d:20:b5:d1:49:75:1f:3a:f3:6d:b1:5d:db:47:e9: 82:01:d1:61:d2:6b:37:5a:93:34:5e:cf:e1:17:32:3f:33:a6: b5:18:81:6d:30:04:31:47:eb:75:54:03:7a:07:98:da:06:ca: ec:a1:c8:ac -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNDA4MjYw NTI1MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxRTdCODMyOTgzOThE MjYzRUVCNURFNzk4QzE2Q0YzNEUyN0RGNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBQfRo7tACBvlst0VeASYHPximD4i8eRUARsxqp6Cy1Ji2b9M7 7IFRi+BQ3MXb04pyPznAsXQY8V37exEL68SV2CT3ar4WKVf/PIv/ThUI7eMdBG9S 2JzqSJTHA2aO0p49L4dGsaAYXE3RXKaiNRB6ZSE0fbHUSI0jPjTQb0FxHm46qRKb 4nd3eJlO44nhvtdnwEcVR65WL9ovfLCaN0qk2qv0biwM8/4+EnHfNDpattb0VVj6 ribVUSpsZz9r0uZjTlSdYsnIa0twyv+UGXXMfUIiNHgnzSoNR3Isjh+Tp4zKFScT rB/6jaSy3+dMxyxQC9JrQTDf/RRKdIcmMoWLAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU8ee4Mpg5jSY+613nmMFs804n32YwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vOGVlNE1wZzVqU1ktNjEz bm1NRnM4MDRuMzJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BmUAgDANBgkqhkiG9w0BAQsFAAOCAQEAUkT+fbepnh6Wje3Rjc1X8UWUP1A6jYo+ jmmAA5VheaRX89v5Xeqv2OiviRxiMOnHoYqlvJ/fc0ZItxaS7PoVRzz8zvWwHmYO ylmwPKcukB38x1bJWR/+B2A67EVCfFEmGOmbhe5Czi3wVebwhJBIJIHSB3sW2P4X Dl8rYLsy7ewELQ0J0llKxFC5uDFP9ufEaLKujGMC7ZRG6g7FnFrRrHgLsiPaZjWF A+5WblqMQU0xscgp1nTijDuWr46w5xKDiNXQkoqKF9HdHSC10Ul1HzrzbbFd20fp ggHRYdJrN1qTNF7P4RcyPzOmtRiBbTAEMUfrdVQDegeY2gbK7KHIrA== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:13 2024 by rpki-client on console-ams.rpki-client.org