$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/gwNZwfrkPf-IuUvPddwZY67wpyU.roa File: gwNZwfrkPf-IuUvPddwZY67wpyU.roa (raw, json) Hash identifier: xwGKFoYQ5EN5two/GgcamvULZfKRaGeZ+mXGV6HGgAs= Subject key identifier: 83:03:59:C1:FA:E4:3D:FF:88:B9:4B:CF:75:DC:19:63:AE:F0:A7:25 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0BC0 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/gwNZwfrkPf-IuUvPddwZY67wpyU.roa Signing time: Fri 01 Sep 2023 09:40:37 +0000 ROA not before: Fri 01 Sep 2023 09:40:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9676 IP address blocks: 118.99.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3008 (0xbc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Sep 1 09:40:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=830359C1FAE43DFF88B94BCF75DC1963AEF0A725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:94:db:98:9a:11:5c:bd:f4:1c:8b:d0:b4: 38:37:07:06:2d:09:11:90:30:3f:0a:1d:8c:4c:40: c6:24:17:2c:32:ef:07:9b:9a:c2:94:41:2f:f5:15: 13:2b:de:42:b7:d6:31:99:ac:b0:53:60:7b:a1:82: 68:de:8c:6e:ba:68:c4:46:d6:0b:35:7b:03:64:f8: 35:36:bd:2c:1f:6f:6c:38:6c:89:49:99:58:ee:a4: 94:54:f3:ec:18:eb:8a:d4:f9:48:22:29:80:86:03: cb:3d:81:e7:e5:f5:0a:3d:26:cb:09:47:2a:db:48: 4f:1c:49:02:ef:ae:8a:50:18:79:3f:95:39:c1:a2: a1:21:6e:e8:6c:c0:f1:fb:23:9e:7a:62:da:30:b4: c3:0b:25:35:8c:41:1c:94:40:a5:4b:99:1c:e4:e7: 88:89:0b:d3:cc:d5:34:ae:f1:89:08:a6:93:1d:b7: 64:24:7f:2d:69:db:dc:34:38:9d:5f:c9:32:4b:8c: 3a:f3:01:a8:33:1a:88:2f:d8:ec:19:e5:44:e4:f3: 79:ac:bc:eb:2a:0d:a5:9b:53:aa:5e:aa:1b:40:38: f1:ff:cc:94:17:6a:22:4e:20:e1:9e:26:74:19:da: 78:fd:76:d0:d6:e9:b3:76:fa:ff:50:6d:81:0a:dd: 51:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:03:59:C1:FA:E4:3D:FF:88:B9:4B:CF:75:DC:19:63:AE:F0:A7:25 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/gwNZwfrkPf-IuUvPddwZY67wpyU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.99.128.0/17 Signature Algorithm: sha256WithRSAEncryption c8:b9:71:24:f5:0c:a0:d4:35:4a:fe:cb:7f:cc:32:f6:13:8d: f8:99:5b:80:a3:74:d7:d8:a8:27:33:6b:68:c3:72:35:00:f0: 7e:ed:2f:e1:89:06:73:c6:3c:58:4d:d2:6e:02:a6:4d:c2:b6: 4b:86:2f:9e:91:ed:8d:5b:37:39:16:30:4a:43:41:0c:0b:f9: a4:df:ec:d6:f5:80:9e:37:8c:0a:33:cf:5f:cc:f5:59:81:1b: 08:95:d8:ec:a7:eb:4f:0f:78:42:4d:85:d3:64:93:7f:05:28: 25:de:14:78:bb:02:42:9e:3e:01:f6:23:75:13:88:87:b9:f2: 83:f0:e3:9b:bb:3a:f5:de:53:a3:67:51:f8:c0:93:b7:57:7f: 8d:ec:64:19:24:09:fb:2d:96:91:b2:3b:c7:9b:6c:a0:af:93: 32:f6:9c:bb:46:5a:d0:7c:79:3a:f2:b8:61:6c:ef:88:58:9f: 1d:ad:07:dd:b2:9e:76:ff:3c:09:2f:e4:b6:8b:b5:f1:c9:03: 60:1f:e0:eb:b2:f4:1d:b5:fa:a0:cc:39:75:29:4b:ff:e0:34: 77:3a:88:5b:97:11:34:b6:cf:38:b0:53:c6:ae:47:2f:b5:ea: b3:b5:30:b4:f0:d9:fd:00:7a:b9:ec:e8:9e:d8:b7:5b:d9:07: a4:f5:6a:71 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICC8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yMzA5MDEw OTQwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgzMDM1OUMxRkFFNDNE RkY4OEI5NEJDRjc1REMxOTYzQUVGMEE3MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQIZTbmJoRXL30HIvQtDg3BwYtCRGQMD8KHYxMQMYkFywy7web msKUQS/1FRMr3kK31jGZrLBTYHuhgmjejG66aMRG1gs1ewNk+DU2vSwfb2w4bIlJ mVjupJRU8+wY64rU+UgiKYCGA8s9gefl9Qo9JssJRyrbSE8cSQLvropQGHk/lTnB oqEhbuhswPH7I556YtowtMMLJTWMQRyUQKVLmRzk54iJC9PM1TSu8YkIppMdt2Qk fy1p29w0OJ1fyTJLjDrzAagzGogv2OwZ5UTk83msvOsqDaWbU6peqhtAOPH/zJQX aiJOIOGeJnQZ2nj9dtDW6bN2+v9QbYEK3VFrAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUgwNZwfrkPf+IuUvPddwZY67wpyUwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vZ3dOWndmcmtQZi1JdVV2 UGRkd1pZNjd3cHlVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME B3ZjgDANBgkqhkiG9w0BAQsFAAOCAQEAyLlxJPUMoNQ1Sv7Lf8wy9hON+JlbgKN0 19ioJzNraMNyNQDwfu0v4YkGc8Y8WE3SbgKmTcK2S4YvnpHtjVs3ORYwSkNBDAv5 pN/s1vWAnjeMCjPPX8z1WYEbCJXY7KfrTw94Qk2F02STfwUoJd4UeLsCQp4+AfYj dROIh7nyg/Djm7s69d5To2dR+MCTt1d/jexkGSQJ+y2WkbI7x5tsoK+TMvacu0Za 0Hx5OvK4YWzviFifHa0H3bKedv88CS/ktou18ckDYB/g67L0HbX6oMw5dSlL/+A0 dzqIW5cRNLbPOLBTxq5HL7Xqs7UwtPDZ/QB6uezonti3W9kHpPVqcQ== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:43 2024 by rpki-client on console-fra.rpki-client.org