$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/GhP-XFFZ_okVYauo81QZbA0uBYo.roa File: GhP-XFFZ_okVYauo81QZbA0uBYo.roa (raw, json) Hash identifier: oP0yDR0oiRQqFRVLTNHisINFNLUTDHbUmFKSKg5IpJM= Subject key identifier: 1A:13:FE:5C:51:59:FE:89:15:61:AB:A8:F3:54:19:6C:0D:2E:05:8A Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0BBE Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/GhP-XFFZ_okVYauo81QZbA0uBYo.roa Signing time: Fri 01 Sep 2023 09:40:37 +0000 ROA not before: Fri 01 Sep 2023 09:40:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9676 IP address blocks: 211.79.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Sep 1 09:40:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1A13FE5C5159FE891561ABA8F354196C0D2E058A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:8b:5f:3c:51:70:b4:29:90:b5:46:f5:a9: fb:e5:cc:1b:8c:3b:9f:0e:ea:d2:06:d2:d1:43:28: be:50:b8:fb:af:e7:3c:99:88:8b:4c:e2:89:23:9a: 19:66:d0:fb:61:d2:8c:34:d9:15:98:83:08:d1:0b: 0c:b2:0b:f7:d0:b9:87:ae:c3:f1:5d:d0:97:8a:3e: eb:de:33:cd:52:4e:00:95:0c:95:cf:d5:b1:91:88: 31:44:dc:2b:2d:a1:50:ff:01:b4:fc:a9:e2:7e:2f: 7b:bf:46:e8:0d:b9:71:3f:cf:19:c1:36:b9:9f:af: 09:7d:c0:9d:a6:85:ab:2e:61:a8:25:88:9c:b5:11: 69:5a:43:f2:a3:ee:89:cb:c7:e3:c7:4c:fa:cf:08: bd:b4:56:15:4a:a0:a6:ca:f6:b6:1b:7e:ee:35:d8: 62:ea:5e:77:63:28:d1:37:26:50:96:f4:f7:1c:f6: 22:10:c5:02:51:79:1d:cf:52:e2:bd:7a:7a:46:b6: cb:ee:2b:95:92:64:1b:29:2a:73:48:74:80:d6:eb: 32:29:e3:9d:fc:32:28:0d:68:1b:59:ab:e2:92:69: 07:fd:b3:56:c6:bd:ff:27:ca:ae:7a:18:fd:1c:a9: 2b:20:42:f3:4e:33:c6:58:a1:54:f3:f7:53:34:4a: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:13:FE:5C:51:59:FE:89:15:61:AB:A8:F3:54:19:6C:0D:2E:05:8A X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/GhP-XFFZ_okVYauo81QZbA0uBYo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.64.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:be:ef:02:db:c0:a7:d3:bf:6b:96:93:36:53:9f:89:36:af: 97:8c:4d:3a:9a:38:59:90:b5:5f:41:07:98:88:f4:58:ee:96: 80:04:59:e0:29:ba:c4:ff:2c:69:ee:d0:d4:84:74:9a:30:d5: 72:9c:35:d9:93:40:30:09:c1:50:fc:f0:c5:df:1d:3a:3b:54: bd:37:f9:79:1b:f7:8d:2e:d8:44:b2:f5:87:fc:cc:5b:fb:41: 8b:6d:6a:2d:68:4f:9c:32:c6:7f:68:b1:d9:5d:b7:93:00:3b: 91:31:1f:12:d0:e3:3d:c7:d3:d8:52:e9:c2:43:ad:f6:be:af: b9:5e:8b:17:b0:c9:b2:ab:34:65:25:44:f6:4f:12:b1:b3:a2: c1:55:3c:e4:b9:a7:a1:be:6f:52:dd:4f:dc:37:43:97:2a:eb: a8:08:16:c3:d4:da:03:04:95:20:c8:22:6c:c7:8f:d3:e2:17: b0:af:30:6a:39:e4:d1:22:91:ca:6b:d5:51:63:16:a2:97:ce: cb:ef:4f:23:d9:ba:62:63:a0:9b:b9:4c:58:45:36:ca:43:c9: df:55:19:a0:bb:3d:2e:dc:4e:fd:75:87:f0:b3:cb:f2:d6:a1: e5:82:d6:b8:b7:36:44:f1:66:41:23:bc:77:ee:55:27:cb:0f: 61:dd:a7:65 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICC74wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yMzA5MDEw OTQwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFBMTNGRTVDNTE1OUZF ODkxNTYxQUJBOEYzNTQxOTZDMEQyRTA1OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqVotfPFFwtCmQtUb1qfvlzBuMO58O6tIG0tFDKL5QuPuv5zyZ iItM4okjmhlm0Pth0ow02RWYgwjRCwyyC/fQuYeuw/Fd0JeKPuveM81STgCVDJXP 1bGRiDFE3CstoVD/AbT8qeJ+L3u/RugNuXE/zxnBNrmfrwl9wJ2mhasuYagliJy1 EWlaQ/Kj7onLx+PHTPrPCL20VhVKoKbK9rYbfu412GLqXndjKNE3JlCW9Pcc9iIQ xQJReR3PUuK9enpGtsvuK5WSZBspKnNIdIDW6zIp4538MigNaBtZq+KSaQf9s1bG vf8nyq56GP0cqSsgQvNOM8ZYoVTz91M0SpaHAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUGhP+XFFZ/okVYauo81QZbA0uBYowHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vR2hQLVhGRlpfb2tWWWF1 bzgxUVpiQTB1QllvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdNPQDANBgkqhkiG9w0BAQsFAAOCAQEASr7vAtvAp9O/a5aTNlOfiTavl4xNOpo4 WZC1X0EHmIj0WO6WgARZ4Cm6xP8sae7Q1IR0mjDVcpw12ZNAMAnBUPzwxd8dOjtU vTf5eRv3jS7YRLL1h/zMW/tBi21qLWhPnDLGf2ix2V23kwA7kTEfEtDjPcfT2FLp wkOt9r6vuV6LF7DJsqs0ZSVE9k8SsbOiwVU85Lmnob5vUt1P3DdDlyrrqAgWw9Ta AwSVIMgibMeP0+IXsK8wajnk0SKRymvVUWMWopfOy+9PI9m6YmOgm7lMWEU2ykPJ 31UZoLs9LtxO/XWH8LPL8tah5YLWuLc2RPFmQSO8d+5VJ8sPYd2nZQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:52 2024 by rpki-client on console-ams.rpki-client.org