$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ZNgInzhkvmaBXOPUFzNULR62ZiY.roa File: ZNgInzhkvmaBXOPUFzNULR62ZiY.roa (raw, json) Hash identifier: KOI3Grq1S9cydc+G2AvjCluAFzKYnlWuKDObaCN+ooY= Subject key identifier: 64:D8:08:9F:38:64:BE:66:81:5C:E3:D4:17:33:54:2D:1E:B6:66:26 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0CDC Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ZNgInzhkvmaBXOPUFzNULR62ZiY.roa Signing time: Mon 26 Aug 2024 05:25:22 +0000 ROA not before: Mon 26 Aug 2024 05:25:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9676 IP address blocks: 61.63.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3292 (0xcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 26 05:25:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=64D8089F3864BE66815CE3D41733542D1EB66626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:17:a6:77:49:43:00:09:35:48:3f:37:d3: df:d7:c1:99:91:36:2c:1a:ca:6c:63:3a:ff:b2:37: 0b:79:ae:cd:2f:8b:d6:0e:d1:f5:dd:3c:75:80:87: b3:6a:6d:c6:76:0b:ce:46:5f:02:2f:7b:e2:6e:f8: 60:4f:89:7c:8c:93:52:ea:c9:26:0c:ae:d3:af:5d: 42:f9:bc:39:cb:36:db:9c:c2:cf:4d:fe:05:0a:1f: 77:a2:87:0d:59:4f:f4:23:cb:5e:06:24:2d:9a:ed: 3c:32:ed:69:0e:fb:fd:0a:00:92:88:9f:6c:86:d7: 34:2c:ee:fc:be:bb:f1:da:2b:8a:1d:c9:bf:1c:e9: 0b:c6:cd:97:89:60:b0:5d:e3:6e:db:1f:8c:d4:21: e4:1b:08:81:d0:db:0c:14:e6:02:6b:e3:15:38:05: 98:2d:8c:fd:7d:ce:c9:63:69:ae:d2:d4:80:47:da: b1:93:be:f2:6c:d0:a0:a6:4d:d3:4d:6a:d2:c2:10: 81:c3:92:0d:03:03:5c:37:62:57:47:ca:a6:09:d0: f9:aa:42:0a:29:9b:23:41:49:2f:1e:66:5f:82:ae: cb:33:9e:ac:9d:3e:1c:1a:c8:07:cb:58:85:ae:9f: 7e:37:78:53:83:cf:4e:ee:f2:ba:08:03:d9:0c:53: 4e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D8:08:9F:38:64:BE:66:81:5C:E3:D4:17:33:54:2D:1E:B6:66:26 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ZNgInzhkvmaBXOPUFzNULR62ZiY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.63.160.0/19 Signature Algorithm: sha256WithRSAEncryption 2c:1d:40:ed:38:27:d1:a1:b3:b7:2e:86:bf:67:0f:dc:3d:97: ee:b1:25:8a:a4:1b:5d:95:00:18:43:19:03:4b:93:52:a4:24: 1b:e5:ce:46:ae:bd:c4:11:cc:82:71:2c:c9:9c:d5:b7:46:a8: 5c:e1:50:23:30:a4:d3:8c:ef:f3:2d:1d:6a:81:8f:44:d2:65: 7b:0e:b2:5b:36:4a:e8:f5:eb:14:fb:2d:ae:18:fd:75:49:71: 2f:99:70:4b:0a:95:4c:dd:11:cf:8a:49:0b:67:a9:ad:40:16: 28:1a:9d:24:13:54:3c:91:b0:74:53:db:ba:f0:99:3a:f7:1f: fa:43:fd:13:44:5d:25:23:ff:6d:86:37:c9:c6:cc:28:d6:da: 5f:54:6e:c7:9e:ff:5c:4c:7f:1f:b4:df:bf:3b:3d:dc:1f:60: a2:3e:8d:ee:c1:ae:d8:94:90:b8:c9:ad:7e:75:5f:c9:e4:e0: 3a:e5:fd:c9:5c:48:eb:4b:8a:61:e2:7d:5f:32:6d:a3:68:be: b0:2f:7d:c9:2d:64:af:99:73:18:4e:fd:10:7c:cc:fd:2f:dc: a8:82:4c:52:26:f6:f4:a4:19:8e:2b:3a:79:ab:2e:b4:ff:31: ac:38:e6:3d:b8:c5:25:4c:e3:ef:6c:82:4f:73:67:7e:55:4d: d2:1f:34:5d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNDA4MjYw NTI1MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0RDgwODlGMzg2NEJF NjY4MTVDRTNENDE3MzM1NDJEMUVCNjY2MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFxxemd0lDAAk1SD8309/XwZmRNiwaymxjOv+yNwt5rs0vi9YO 0fXdPHWAh7NqbcZ2C85GXwIve+Ju+GBPiXyMk1LqySYMrtOvXUL5vDnLNtucws9N /gUKH3eihw1ZT/Qjy14GJC2a7Twy7WkO+/0KAJKIn2yG1zQs7vy+u/HaK4odyb8c 6QvGzZeJYLBd427bH4zUIeQbCIHQ2wwU5gJr4xU4BZgtjP19zsljaa7S1IBH2rGT vvJs0KCmTdNNatLCEIHDkg0DA1w3YldHyqYJ0PmqQgopmyNBSS8eZl+Crssznqyd PhwayAfLWIWun343eFODz07u8roIA9kMU05HAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUZNgInzhkvmaBXOPUFzNULR62ZiYwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vWk5nSW56aGt2bWFCWE9Q VUZ6TlVMUjYyWmlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BT0/oDANBgkqhkiG9w0BAQsFAAOCAQEALB1A7Tgn0aGzty6Gv2cP3D2X7rEliqQb XZUAGEMZA0uTUqQkG+XORq69xBHMgnEsyZzVt0aoXOFQIzCk04zv8y0daoGPRNJl ew6yWzZK6PXrFPstrhj9dUlxL5lwSwqVTN0Rz4pJC2eprUAWKBqdJBNUPJGwdFPb uvCZOvcf+kP9E0RdJSP/bYY3ycbMKNbaX1Rux57/XEx/H7Tfvzs93B9goj6N7sGu 2JSQuMmtfnVfyeTgOuX9yVxI60uKYeJ9XzJto2i+sC99yS1kr5lzGE79EHzM/S/c qIJMUib29KQZjis6easutP8xrDjmPbjFJUzj72yCT3NnflVN0h80XQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org