$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/KyXrODuOd-fYsDPdNNrh1lWrTGg.roa File: KyXrODuOd-fYsDPdNNrh1lWrTGg.roa (raw, json) Hash identifier: GMKotDEC88NA+4fDY4Zr474R88l4xehGmWg+S+gHmGs= Subject key identifier: 2B:25:EB:38:3B:8E:77:E7:D8:B0:33:DD:34:DA:E1:D6:55:AB:4C:68 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0E5D Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/KyXrODuOd-fYsDPdNNrh1lWrTGg.roa Signing time: Fri 22 Aug 2025 08:44:35 +0000 ROA not before: Fri 22 Aug 2025 08:44:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9676 IP address blocks: 61.58.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3677 (0xe5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 22 08:44:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2B25EB383B8E77E7D8B033DD34DAE1D655AB4C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:e1:92:63:de:3e:2a:05:57:43:74:da:40: db:4f:9f:3b:ba:72:b8:c3:df:0f:d2:49:bc:7d:8c: ba:ac:75:ae:73:0c:7e:67:69:93:8e:28:97:b5:ce: d6:68:4e:49:25:58:06:00:ce:9b:e3:e3:56:ce:86: 5d:95:93:99:1b:ef:ac:b3:6a:3f:ae:e3:f4:90:11: 3d:60:56:ba:c8:c4:6a:f7:18:8e:db:20:1f:15:7d: 31:55:8f:68:c8:bf:31:f5:f9:32:a4:f7:b5:97:72: f5:57:2b:b7:70:a2:95:24:db:a8:b2:0d:ba:ad:f1: e4:08:be:bf:ea:59:2e:57:57:d3:01:6c:7f:01:27: 78:e9:5a:ee:55:2f:16:f7:74:3b:dd:81:29:1d:3a: 92:90:99:67:32:19:9d:1b:ae:ec:9f:2d:fa:69:fc: ec:7e:7b:13:5d:94:ca:ce:a8:46:07:66:a2:d6:17: ec:65:14:7d:d3:b7:8a:2c:bb:6f:58:e2:fe:f3:4b: 22:e6:cb:5c:f6:72:c9:b9:ce:22:9d:a7:c1:3e:b4: 14:da:a5:1b:84:77:2b:49:a5:28:e6:0a:a2:b6:19: cc:3b:bb:63:b1:e0:17:e6:50:02:07:cd:6c:29:14: fe:2a:88:b9:49:28:4b:d8:7b:1f:bc:13:35:88:0a: 74:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:25:EB:38:3B:8E:77:E7:D8:B0:33:DD:34:DA:E1:D6:55:AB:4C:68 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/KyXrODuOd-fYsDPdNNrh1lWrTGg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.192.0/18 Signature Algorithm: sha256WithRSAEncryption c7:61:cf:5f:9e:04:db:63:d0:f5:85:0c:dd:60:34:96:7f:b6: 90:79:45:cf:f6:64:3f:df:1a:c2:28:f5:a0:f9:f6:ce:4e:94: 6d:60:6a:b0:08:d0:4b:5e:1c:2c:2c:40:36:5f:ce:3c:d0:70: 74:a1:25:e9:70:14:ad:ba:23:e4:cb:ab:9f:f1:93:05:d1:a8: e6:a9:53:8e:af:ac:46:5e:88:04:12:23:7c:5d:74:b2:37:25: 05:b2:97:67:79:e4:1b:18:16:2f:d5:00:84:d8:b8:3f:0c:87: 85:7d:a5:97:8f:7e:5e:91:a0:4e:a7:00:79:3a:93:3c:bc:21: 8a:9f:77:36:43:bb:db:3a:9a:05:c9:b3:db:66:d1:de:30:68: 5b:5f:e2:4e:fe:6b:95:38:f5:68:cf:85:f0:b0:76:b9:14:a2: 62:2b:d3:1e:8b:ee:26:de:37:f0:89:bc:b1:05:d2:4f:2f:f6: 9d:51:cf:1a:bd:df:0d:4f:4d:b5:dc:d4:20:73:df:c7:1e:20: d9:59:6a:ca:6a:b1:5b:30:5b:9d:f9:04:10:26:a9:83:b8:a9: 5f:3e:ea:e1:d7:a4:eb:69:d6:41:79:3a:7b:a2:bc:4c:1e:99: a5:43:20:11:02:b7:40:d3:71:2e:42:39:1b:d3:f0:c5:b0:77: 72:e7:e3:0f -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNTA4MjIw ODQ0MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJCMjVFQjM4M0I4RTc3 RTdEOEIwMzNERDM0REFFMUQ2NTVBQjRDNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC01OGSY94+KgVXQ3TaQNtPnzu6crjD3w/SSbx9jLqsda5zDH5n aZOOKJe1ztZoTkklWAYAzpvj41bOhl2Vk5kb76yzaj+u4/SQET1gVrrIxGr3GI7b IB8VfTFVj2jIvzH1+TKk97WXcvVXK7dwopUk26iyDbqt8eQIvr/qWS5XV9MBbH8B J3jpWu5VLxb3dDvdgSkdOpKQmWcyGZ0bruyfLfpp/Ox+exNdlMrOqEYHZqLWF+xl FH3Tt4osu29Y4v7zSyLmy1z2csm5ziKdp8E+tBTapRuEdytJpSjmCqK2Gcw7u2Ox 4BfmUAIHzWwpFP4qiLlJKEvYex+8EzWICnSzAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUKyXrODuOd+fYsDPdNNrh1lWrTGgwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vS3lYck9EdU9kLWZZc0RQ ZE5OcmgxbFdyVEdnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Bj06wDANBgkqhkiG9w0BAQsFAAOCAQEAx2HPX54E22PQ9YUM3WA0ln+2kHlFz/Zk P98awij1oPn2zk6UbWBqsAjQS14cLCxANl/OPNBwdKEl6XAUrboj5Murn/GTBdGo 5qlTjq+sRl6IBBIjfF10sjclBbKXZ3nkGxgWL9UAhNi4PwyHhX2ll49+XpGgTqcA eTqTPLwhip93NkO72zqaBcmz22bR3jBoW1/iTv5rlTj1aM+F8LB2uRSiYivTHovu Jt438Im8sQXSTy/2nVHPGr3fDU9NtdzUIHPfxx4g2VlqymqxWzBbnfkEECapg7ip Xz7q4dek62nWQXk6e6K8TB6ZpUMgEQK3QNNxLkI5G9PwxbB3cufjDw== -----END CERTIFICATE-----Generated at Wed Oct 29 08:40:51 2025 by rpki-client