$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/yIQ7kMQbcVnm6nePKFz1046Ymsw.roa File: yIQ7kMQbcVnm6nePKFz1046Ymsw.roa (raw, json) Hash identifier: oFv2zzFhM2bVWBgoz27gEaCUyTkhDQ1DEeI1nSdqtTE= Subject key identifier: C8:84:3B:90:C4:1B:71:59:E6:EA:77:8F:28:5C:F5:D3:8E:98:9A:CC Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0BC6 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/yIQ7kMQbcVnm6nePKFz1046Ymsw.roa Signing time: Fri 01 Sep 2023 09:40:39 +0000 ROA not before: Fri 01 Sep 2023 09:40:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9676 IP address blocks: 61.63.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3014 (0xbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Sep 1 09:40:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C8843B90C41B7159E6EA778F285CF5D38E989ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c9:31:13:da:dc:33:56:06:16:61:e6:50:12: 9e:ec:8a:76:b8:dc:0a:83:89:a3:94:72:98:39:7f: a5:d6:7c:21:f6:32:da:5e:a3:b5:02:a3:1f:e7:20: e4:e5:9a:4b:79:48:60:c8:0f:64:6b:43:b8:63:5b: 4c:46:58:f6:3a:14:61:b1:1a:76:6a:7f:de:89:62: ec:3a:8a:ac:28:22:c4:7b:e7:45:ca:8f:e6:1d:81: 1e:e3:00:95:ca:d3:53:d0:53:7e:e8:31:75:c3:22: 70:71:ad:a7:48:2b:8e:4b:51:40:b5:5f:94:dd:63: 48:fb:70:32:6a:20:98:98:4a:36:74:3d:2c:a7:af: d5:7e:9d:7e:33:ab:98:1a:68:ab:6a:57:48:fd:38: 2f:d6:32:9f:ea:68:0c:97:fc:ea:8f:c2:9d:15:ea: 01:59:8b:08:c1:a3:6a:81:f5:ee:52:fa:f2:11:e7: 1f:70:ee:a2:b7:16:0f:6c:3e:bf:2b:9e:d6:4b:fb: 51:c8:47:2f:41:7b:ec:8e:34:14:de:e8:7d:ce:65: ab:2a:81:79:72:8b:15:a9:af:24:df:a2:a9:7c:51: a7:95:54:e0:48:1b:6f:2c:4f:68:3e:cd:61:94:3b: 7e:f4:08:5b:59:f8:ce:81:78:c2:84:77:f7:91:4a: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:84:3B:90:C4:1B:71:59:E6:EA:77:8F:28:5C:F5:D3:8E:98:9A:CC X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/yIQ7kMQbcVnm6nePKFz1046Ymsw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.63.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9c:ea:a0:e1:3e:7e:d7:26:6a:53:53:b5:53:bb:89:75:3c:2d: 2a:06:e9:4f:05:c3:7c:15:e9:eb:02:11:51:d8:56:db:50:1e: 5a:bf:69:b6:01:66:62:cf:7e:d2:d7:9f:c1:a9:f1:a6:ad:52: a8:64:ac:98:8a:e3:76:2b:7f:a9:3a:9b:c3:4c:b0:15:9e:4f: 58:29:74:55:71:79:b0:d4:8d:48:45:54:d1:1c:7a:77:bb:83: 58:82:ce:61:a7:c8:eb:74:a1:90:aa:e1:a9:88:a1:42:9f:db: ca:3d:32:73:7f:2b:d1:87:5e:ad:bb:7f:01:54:26:9e:53:e4: 6b:a7:49:a8:42:be:c9:1a:8a:d0:de:16:00:72:8f:47:88:1b: 98:8a:96:70:3f:ba:8b:ca:02:19:86:dd:3a:ab:eb:97:90:3e: d5:c7:98:95:23:84:da:1e:89:72:e3:33:2e:b9:c2:cd:0c:39: 8a:f1:c6:8b:13:14:19:76:df:14:56:7f:1a:d5:3d:31:55:7d: cc:a7:dd:17:55:33:7c:77:83:c6:c2:98:26:ef:f9:97:85:c7: 0a:ed:64:c9:f0:c3:fe:9d:dd:02:ee:7b:4e:66:1d:80:82:bc: 42:ff:6e:79:22:2c:a7:8d:38:b8:f2:6b:2a:6b:a4:48:62:02: 81:4c:5b:68 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yMzA5MDEw OTQwMzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM4ODQzQjkwQzQxQjcx NTlFNkVBNzc4RjI4NUNGNUQzOEU5ODlBQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjyTET2twzVgYWYeZQEp7sina43AqDiaOUcpg5f6XWfCH2Mtpe o7UCox/nIOTlmkt5SGDID2RrQ7hjW0xGWPY6FGGxGnZqf96JYuw6iqwoIsR750XK j+YdgR7jAJXK01PQU37oMXXDInBxradIK45LUUC1X5TdY0j7cDJqIJiYSjZ0PSyn r9V+nX4zq5gaaKtqV0j9OC/WMp/qaAyX/OqPwp0V6gFZiwjBo2qB9e5S+vIR5x9w 7qK3Fg9sPr8rntZL+1HIRy9Be+yONBTe6H3OZasqgXlyixWpryTfoql8UaeVVOBI G28sT2g+zWGUO370CFtZ+M6BeMKEd/eRSgpzAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUyIQ7kMQbcVnm6nePKFz1046YmswwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00veUlRN2tNUWJjVm5tNm5l UEtGejEwNDZZbXN3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Bj0/wDANBgkqhkiG9w0BAQsFAAOCAQEAnOqg4T5+1yZqU1O1U7uJdTwtKgbpTwXD fBXp6wIRUdhW21AeWr9ptgFmYs9+0tefwanxpq1SqGSsmIrjdit/qTqbw0ywFZ5P WCl0VXF5sNSNSEVU0Rx6d7uDWILOYafI63ShkKrhqYihQp/byj0yc38r0Yderbt/ AVQmnlPka6dJqEK+yRqK0N4WAHKPR4gbmIqWcD+6i8oCGYbdOqvrl5A+1ceYlSOE 2h6JcuMzLrnCzQw5ivHGixMUGXbfFFZ/GtU9MVV9zKfdF1UzfHeDxsKYJu/5l4XH Cu1kyfDD/p3dAu57TmYdgIK8Qv9ueSIsp404uPJrKmukSGICgUxbaA== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:52 2024 by rpki-client on console-ams.rpki-client.org