$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/tflV6q0sI8Wgl06RPPDcwUEK7kY.roa File: tflV6q0sI8Wgl06RPPDcwUEK7kY.roa (raw, json) Hash identifier: 6fhLzowVSonVSKTRKCPIPyA1O0AO8OaJw5O+uq706Rg= Subject key identifier: B5:F9:55:EA:AD:2C:23:C5:A0:97:4E:91:3C:F0:DC:C1:41:0A:EE:46 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0CDE Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/tflV6q0sI8Wgl06RPPDcwUEK7kY.roa Signing time: Mon 26 Aug 2024 05:25:22 +0000 ROA not before: Mon 26 Aug 2024 05:25:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9676 IP address blocks: 210.62.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3294 (0xcde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 26 05:25:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B5F955EAAD2C23C5A0974E913CF0DCC1410AEE46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:4f:bc:f9:6e:c2:80:c1:4f:58:98:04:f0: d4:23:4e:18:ed:6f:76:43:f7:dc:34:81:66:b8:78: 1e:19:f3:a9:8e:ae:37:bd:b2:a9:43:10:af:e9:ea: ac:9f:aa:8a:63:0b:ae:1a:ce:50:d2:84:4d:96:e7: 87:67:e2:5b:25:2f:e9:fa:53:5a:3f:e3:cc:5b:7b: eb:a3:d9:3c:33:ad:c1:ca:8d:02:18:72:de:f6:48: 03:7e:4f:81:ed:57:55:53:fe:6f:aa:82:2b:6b:54: 0c:b3:75:0e:13:48:69:c8:e8:c5:cf:34:74:47:40: d3:3c:60:1d:4f:78:c0:c0:69:ab:72:45:b9:43:ea: 06:5b:ae:a8:94:d8:02:8d:72:75:f1:fa:99:9a:05: 42:25:bf:d8:3e:13:10:fc:99:52:8b:dd:dc:a7:7a: 55:88:2a:3a:ef:da:0f:2a:95:2c:04:74:2b:33:cc: 9a:2d:9a:89:6d:b4:16:b0:87:6f:19:b6:3b:2a:c7: ee:b1:23:a4:8b:15:a7:77:36:d7:97:a4:67:68:ad: 62:b7:d2:75:e6:e0:43:30:3f:90:af:5a:90:27:59: 15:bd:92:dc:aa:19:cf:b9:08:7e:96:75:74:cd:3d: 62:7e:2a:c8:a0:a9:b7:1a:79:aa:07:eb:51:e4:01: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F9:55:EA:AD:2C:23:C5:A0:97:4E:91:3C:F0:DC:C1:41:0A:EE:46 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/tflV6q0sI8Wgl06RPPDcwUEK7kY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.176.0/20 Signature Algorithm: sha256WithRSAEncryption 83:fa:7e:35:42:eb:ac:cc:0c:26:38:f6:64:f0:c0:ce:4e:51: 23:24:eb:f5:9e:aa:21:ae:73:39:c8:28:23:f7:71:f1:2e:40: 4d:29:e5:ca:be:97:8d:1c:13:6a:96:5a:c1:03:b8:26:87:aa: 11:02:86:63:04:d3:bc:32:01:ba:1f:c8:7a:44:3b:de:ef:dc: 2d:f5:ba:65:dc:31:93:2d:16:d3:a7:8b:8e:00:ef:ef:7a:5a: 15:ce:33:c9:e6:9a:ae:01:ca:99:da:93:2f:23:f2:1d:9e:30: 75:8f:b0:eb:0c:b5:8a:50:97:21:29:69:fd:00:ec:81:e7:65: a5:f6:ac:55:84:45:15:64:1c:cd:1f:4a:c1:cd:f4:97:a2:9f: 82:6e:74:60:71:16:12:e7:54:a4:39:c3:4d:c9:bf:d3:8d:ed: 11:f4:39:b4:5f:44:4e:aa:87:21:b6:c5:94:bb:e3:47:64:49: 72:b3:07:5c:07:37:42:cd:65:f3:12:9a:b9:23:8b:8f:41:b7: 91:96:9e:92:e3:3e:bc:99:4a:c0:4d:50:f6:cd:75:8b:ab:0f: 25:07:56:06:cb:f7:89:70:62:8e:57:74:b1:8c:88:8d:5c:b3: 0e:d0:41:2d:bd:2e:8d:78:39:78:af:91:7f:ed:e8:3d:02:50: 70:5b:66:8d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNDA4MjYw NTI1MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI1Rjk1NUVBQUQyQzIz QzVBMDk3NEU5MTNDRjBEQ0MxNDEwQUVFNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOSE+8+W7CgMFPWJgE8NQjThjtb3ZD99w0gWa4eB4Z86mOrje9 sqlDEK/p6qyfqopjC64azlDShE2W54dn4lslL+n6U1o/48xbe+uj2TwzrcHKjQIY ct72SAN+T4HtV1VT/m+qgitrVAyzdQ4TSGnI6MXPNHRHQNM8YB1PeMDAaatyRblD 6gZbrqiU2AKNcnXx+pmaBUIlv9g+ExD8mVKL3dynelWIKjrv2g8qlSwEdCszzJot molttBawh28Ztjsqx+6xI6SLFad3NteXpGdorWK30nXm4EMwP5CvWpAnWRW9ktyq Gc+5CH6WdXTNPWJ+KsigqbcaeaoH61HkAcuTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUtflV6q0sI8Wgl06RPPDcwUEK7kYwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vdGZsVjZxMHNJOFdnbDA2 UlBQRGN3VUVLN2tZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BNI+sDANBgkqhkiG9w0BAQsFAAOCAQEAg/p+NULrrMwMJjj2ZPDAzk5RIyTr9Z6q Ia5zOcgoI/dx8S5ATSnlyr6XjRwTapZawQO4JoeqEQKGYwTTvDIBuh/IekQ73u/c LfW6Zdwxky0W06eLjgDv73paFc4zyeaargHKmdqTLyPyHZ4wdY+w6wy1ilCXISlp /QDsgedlpfasVYRFFWQczR9Kwc30l6Kfgm50YHEWEudUpDnDTcm/043tEfQ5tF9E TqqHIbbFlLvjR2RJcrMHXAc3Qs1l8xKauSOLj0G3kZaekuM+vJlKwE1Q9s11i6sP JQdWBsv3iXBijld0sYyIjVyzDtBBLb0ujXg5eK+Rf+3oPQJQcFtmjQ== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:13 2024 by rpki-client on console-ams.rpki-client.org