$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/SurxeuMdlskjuu3oYAuFe-LzI8M.roa File: SurxeuMdlskjuu3oYAuFe-LzI8M.roa (raw, json) Hash identifier: 9OemVku/OKkAc8vWIb9L3h+sirBxDXbcyQDLzj4sRek= Subject key identifier: 4A:EA:F1:7A:E3:1D:96:C9:23:BA:ED:E8:60:0B:85:7B:E2:F3:23:C3 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0E62 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/SurxeuMdlskjuu3oYAuFe-LzI8M.roa Signing time: Fri 22 Aug 2025 08:44:36 +0000 ROA not before: Fri 22 Aug 2025 08:44:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9676 IP address blocks: 60.245.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3682 (0xe62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 22 08:44:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4AEAF17AE31D96C923BAEDE8600B857BE2F323C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7f:bf:12:c6:79:8c:77:5c:01:56:bc:fe:12: a3:69:a5:fc:c3:d6:13:5c:ce:0b:a7:91:2d:68:96: 23:c2:71:6a:6c:ef:46:6d:c2:c9:88:2d:b9:18:87: 64:36:25:84:76:97:59:62:c0:09:f2:84:6b:04:ef: 31:af:9f:a9:24:fc:aa:c4:2e:17:2d:07:1b:7c:63: 28:6c:30:18:9a:22:96:14:ad:2d:cb:dc:7b:c7:3a: d4:f6:9c:9f:71:c6:ff:66:59:a9:34:2c:3c:e0:b7: c9:1d:f9:76:91:49:57:9f:c5:3e:f7:8a:91:8f:47: 7e:9c:1d:d8:56:93:df:2c:23:ba:70:35:f9:7a:fd: 95:05:6a:d5:82:bf:15:e3:a0:68:dc:2f:19:5e:90: 29:2e:17:d6:fd:b6:45:f4:f5:95:06:dc:b6:85:38: b9:45:0d:ae:ab:55:09:0c:11:0e:de:61:5d:de:8d: 23:1c:77:80:fa:64:2d:32:94:39:7b:eb:6d:52:b4: c2:cf:45:68:eb:eb:12:4b:77:4c:75:ea:6a:0d:44: 0e:4a:21:5b:82:bc:00:f4:5e:c6:44:8a:30:5d:a1: a8:a1:10:92:15:0e:d6:1b:a2:75:aa:64:cf:81:a0: 95:75:68:74:35:50:9b:bd:e9:60:0a:99:e6:d0:20: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EA:F1:7A:E3:1D:96:C9:23:BA:ED:E8:60:0B:85:7B:E2:F3:23:C3 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/SurxeuMdlskjuu3oYAuFe-LzI8M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.0.0/18 Signature Algorithm: sha256WithRSAEncryption 61:0f:0e:7e:ae:2f:67:ca:3f:75:cb:ef:a7:dd:60:57:c7:cf: d8:b1:46:44:01:f1:97:3b:21:0b:98:71:3c:b8:15:95:2f:80: e4:3e:58:88:a5:4b:68:be:c4:39:45:1c:9a:18:ac:7d:1b:26: 42:62:af:d3:d1:21:c7:98:df:4f:70:2f:1f:37:56:0a:03:e6: 45:05:55:53:1a:dd:20:0b:1e:a6:ee:4d:7f:b6:bd:cd:41:80: 39:fc:4f:3b:0d:de:e1:fa:de:bc:26:4c:78:51:f3:07:3b:eb: a5:60:9c:a0:53:8c:ef:a6:2a:ed:04:c3:cf:5c:e7:48:f7:5f: 6d:f3:c5:6a:2d:dd:81:12:3f:dd:b5:01:97:c9:5d:eb:8b:ac: 7e:b4:4c:9b:01:1f:b2:f7:c8:ad:ba:7e:4a:72:37:0c:de:c9: e3:67:df:40:30:39:d7:c1:1b:19:b3:37:82:b5:be:38:d1:3c: 3d:6c:35:a3:cb:d3:e9:34:1e:3e:1c:88:20:50:3b:73:b0:4c: 7b:68:10:57:fb:1a:a2:b5:88:37:6c:29:d0:cf:0b:31:2b:6d: 34:f8:72:f7:24:cc:9f:14:8f:c3:08:85:c7:3a:47:fd:f2:f4: 5a:a4:ea:2a:c6:6d:be:39:59:4b:14:de:7c:e4:88:9e:17:02: 8a:ee:06:78 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNTA4MjIw ODQ0MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRBRUFGMTdBRTMxRDk2 QzkyM0JBRURFODYwMEI4NTdCRTJGMzIzQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlf78SxnmMd1wBVrz+EqNppfzD1hNczgunkS1oliPCcWps70Zt wsmILbkYh2Q2JYR2l1liwAnyhGsE7zGvn6kk/KrELhctBxt8YyhsMBiaIpYUrS3L 3HvHOtT2nJ9xxv9mWak0LDzgt8kd+XaRSVefxT73ipGPR36cHdhWk98sI7pwNfl6 /ZUFatWCvxXjoGjcLxlekCkuF9b9tkX09ZUG3LaFOLlFDa6rVQkMEQ7eYV3ejSMc d4D6ZC0ylDl7621StMLPRWjr6xJLd0x16moNRA5KIVuCvAD0XsZEijBdoaihEJIV DtYbonWqZM+BoJV1aHQ1UJu96WAKmebQIBJnAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUSurxeuMdlskjuu3oYAuFe+LzI8MwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vU3VyeGV1TWRsc2tqdXUz b1lBdUZlLUx6SThNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Bjz1ADANBgkqhkiG9w0BAQsFAAOCAQEAYQ8Ofq4vZ8o/dcvvp91gV8fP2LFGRAHx lzshC5hxPLgVlS+A5D5YiKVLaL7EOUUcmhisfRsmQmKv09Ehx5jfT3AvHzdWCgPm RQVVUxrdIAsepu5Nf7a9zUGAOfxPOw3e4frevCZMeFHzBzvrpWCcoFOM76Yq7QTD z1znSPdfbfPFai3dgRI/3bUBl8ld64usfrRMmwEfsvfIrbp+SnI3DN7J42ffQDA5 18EbGbM3grW+ONE8PWw1o8vT6TQePhyIIFA7c7BMe2gQV/saorWIN2wp0M8LMStt NPhy9yTMnxSPwwiFxzpH/fL0WqTqKsZtvjlZSxTefOSInhcCiu4GeA== -----END CERTIFICATE-----Generated at Wed Oct 29 08:32:25 2025 by rpki-client