$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/SsukmPPYalA4Rl0ngK8cc5Uh9hU.roa File: SsukmPPYalA4Rl0ngK8cc5Uh9hU.roa (raw, json) Hash identifier: ZHcICfKV9lm9/MeivD9INNiPdKl3On72bnRqa8l2xZA= Subject key identifier: 4A:CB:A4:98:F3:D8:6A:50:38:46:5D:27:80:AF:1C:73:95:21:F6:15 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0CE3 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/SsukmPPYalA4Rl0ngK8cc5Uh9hU.roa Signing time: Mon 26 Aug 2024 05:25:24 +0000 ROA not before: Mon 26 Aug 2024 05:25:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9676 IP address blocks: 61.60.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 26 05:25:24 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4ACBA498F3D86A5038465D2780AF1C739521F615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:44:3a:b9:90:d5:72:2e:71:71:57:5f:9c: ce:4c:af:22:c4:1c:79:ea:bc:44:97:07:66:e8:49: f3:e2:28:73:bf:cc:4d:c8:45:92:6e:82:9b:3b:f4: 85:8a:8e:e8:bc:5b:4a:96:d4:31:50:40:d8:91:37: f8:64:b4:89:d2:58:36:de:1b:2d:0e:c0:49:a7:d0: 1d:bc:51:06:94:4f:10:5d:7d:2a:10:da:22:5f:73: 50:f4:0f:87:0a:48:5d:34:9b:14:34:00:b8:71:24: 30:40:3f:28:87:c3:5d:50:e0:18:ca:0a:06:e8:53: a7:6a:f5:10:23:72:c4:30:c3:1e:16:db:6c:d3:31: 64:15:30:32:56:dc:1f:9a:3a:bd:ea:8a:b6:8d:15: e6:70:cf:f1:0b:a8:07:3c:67:a3:df:de:4f:9b:c5: 0e:42:da:57:67:e3:b9:6e:20:0b:f8:5c:da:04:27: 38:da:c1:ad:77:51:e7:d0:34:01:cd:bd:e8:16:86: d6:53:71:02:e7:c8:a6:a9:f6:9f:99:d5:a9:30:1e: 30:23:63:43:c2:1f:c4:68:df:b4:dc:af:f6:70:a1: 1e:23:cd:fd:bb:76:e5:74:eb:f5:f2:32:25:a8:6b: 7e:21:61:6d:70:14:d3:d8:3e:6a:3a:e1:70:6c:0e: 41:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CB:A4:98:F3:D8:6A:50:38:46:5D:27:80:AF:1C:73:95:21:F6:15 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/SsukmPPYalA4Rl0ngK8cc5Uh9hU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.160.0/19 Signature Algorithm: sha256WithRSAEncryption 11:8c:92:6c:b7:c1:9f:c2:1b:69:17:43:1c:90:75:7d:a8:82: 94:c1:a6:df:bd:78:b5:ef:3b:75:91:2c:9f:27:ec:9f:68:50: 60:d9:33:7f:d2:cb:2b:87:40:ba:98:b3:a8:a2:65:2f:52:ef: 4f:10:2e:7b:a0:ba:f5:27:8d:c1:cb:d3:83:58:06:24:71:37: 81:01:5d:fd:46:ce:a9:27:ce:ee:7e:b9:b3:43:ec:fc:b6:4e: e1:e8:4e:c3:c7:1d:8c:f1:50:e8:dd:d5:3c:19:6c:bd:69:7b: 74:3b:2e:25:fb:9e:04:91:c7:fe:fa:ea:5c:a3:c3:df:45:58: 69:34:d2:b4:48:09:2a:58:07:11:10:0a:5a:22:da:af:ab:35: 23:23:37:2c:14:31:a5:07:9e:b1:88:28:a5:2f:01:7c:92:a4: 03:b9:2e:50:a8:7e:97:06:5b:48:15:ba:f8:57:82:b4:e0:00: dd:d0:61:74:c2:67:56:0a:74:eb:2c:83:8a:ca:34:11:87:40: 7b:d2:d2:8f:32:41:96:96:87:06:5f:b2:db:ed:c6:c5:33:a4: ff:56:2d:6a:fb:68:e8:7e:5b:62:5e:c6:0d:03:51:be:74:c6: a3:a9:15:a6:7b:af:bd:e3:84:09:d4:25:6f:45:86:dc:e9:2d: 32:72:ef:6b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNDA4MjYw NTI1MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBQ0JBNDk4RjNEODZB NTAzODQ2NUQyNzgwQUYxQzczOTUyMUY2MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr+kQ6uZDVci5xcVdfnM5MryLEHHnqvESXB2boSfPiKHO/zE3I RZJugps79IWKjui8W0qW1DFQQNiRN/hktInSWDbeGy0OwEmn0B28UQaUTxBdfSoQ 2iJfc1D0D4cKSF00mxQ0ALhxJDBAPyiHw11Q4BjKCgboU6dq9RAjcsQwwx4W22zT MWQVMDJW3B+aOr3qiraNFeZwz/ELqAc8Z6Pf3k+bxQ5C2ldn47luIAv4XNoEJzja wa13UefQNAHNvegWhtZTcQLnyKap9p+Z1akwHjAjY0PCH8Ro37Tcr/ZwoR4jzf27 duV06/XyMiWoa34hYW1wFNPYPmo64XBsDkHdAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUSsukmPPYalA4Rl0ngK8cc5Uh9hUwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vU3N1a21QUFlhbEE0Umww bmdLOGNjNVVoOWhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BT08oDANBgkqhkiG9w0BAQsFAAOCAQEAEYySbLfBn8IbaRdDHJB1faiClMGm3714 te87dZEsnyfsn2hQYNkzf9LLK4dAupizqKJlL1LvTxAue6C69SeNwcvTg1gGJHE3 gQFd/UbOqSfO7n65s0Ps/LZO4ehOw8cdjPFQ6N3VPBlsvWl7dDsuJfueBJHH/vrq XKPD30VYaTTStEgJKlgHERAKWiLar6s1IyM3LBQxpQeesYgopS8BfJKkA7kuUKh+ lwZbSBW6+FeCtOAA3dBhdMJnVgp06yyDiso0EYdAe9LSjzJBlpaHBl+y2+3GxTOk /1Ytavto6H5bYl7GDQNRvnTGo6kVpnuvveOECdQlb0WG3OktMnLvaw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org