$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/CdOVCzduR0gmGYzvxQs2Cqf69Dc.roa File: CdOVCzduR0gmGYzvxQs2Cqf69Dc.roa (raw, json) Hash identifier: yqrkCfnpVK9X6UHB0YFH/n78K7fMnkWm0gzjeR97b7E= Subject key identifier: 09:D3:95:0B:37:6E:47:48:26:19:8C:EF:C5:0B:36:0A:A7:FA:F4:37 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0E67 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/CdOVCzduR0gmGYzvxQs2Cqf69Dc.roa Signing time: Fri 22 Aug 2025 08:44:37 +0000 ROA not before: Fri 22 Aug 2025 08:44:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9676 IP address blocks: 211.73.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3687 (0xe67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 22 08:44:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=09D3950B376E474826198CEFC50B360AA7FAF437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:41:47:d3:9d:8d:9b:4c:7c:ea:60:9e:1f: 4e:80:65:36:3e:46:09:e0:f6:78:fb:9a:87:0d:3f: 56:e9:ff:f3:d2:60:af:8e:c8:7d:e3:76:85:fd:d6: c3:bc:bf:2e:f0:85:14:21:67:e6:dc:47:db:a3:83: 54:68:34:8d:08:29:86:66:b6:34:ee:f7:7d:1a:da: 45:02:48:7b:42:e2:57:c6:06:3e:f8:56:7c:61:ec: 04:ee:7d:ac:f5:f9:ef:cc:57:93:6b:24:2b:59:85: cf:93:a9:c3:76:54:10:86:3f:6c:f5:43:04:3d:5b: 9f:06:e0:b1:e9:d9:1b:2e:d8:b3:ad:98:5d:40:9a: 6f:b8:67:71:97:67:88:55:1e:2c:2d:0f:4f:49:d2: 18:b2:fa:e6:5b:41:88:f5:b9:5d:ec:08:34:25:e2: 35:5d:55:ef:b1:16:fc:bb:23:34:79:0c:7e:5c:bb: e7:51:38:39:84:5a:39:3f:49:66:92:e9:a7:90:d3: ad:22:b3:e9:b9:b1:7a:ba:df:e6:fd:aa:1a:24:fa: fe:c3:98:65:7c:43:dc:fc:19:a3:60:9b:3d:84:25: a6:cc:c6:b6:b0:49:02:fe:78:5b:3c:db:a1:79:b6: 45:dc:63:b7:0a:04:29:78:53:30:03:c9:71:36:38: 6f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D3:95:0B:37:6E:47:48:26:19:8C:EF:C5:0B:36:0A:A7:FA:F4:37 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/CdOVCzduR0gmGYzvxQs2Cqf69Dc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.73.0.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:c0:ac:ca:0b:94:66:1f:c3:00:55:31:e4:6d:5b:f2:23:23: eb:17:eb:61:d1:84:54:eb:ae:fd:19:d0:e7:ea:e1:92:6d:49: dd:dc:ba:f1:34:6c:83:9c:79:0f:34:16:71:ed:6f:72:94:fa: e2:7c:72:17:e6:76:1a:17:68:9c:56:af:73:78:6e:79:ab:9b: 0a:8a:ab:5d:63:9a:2f:24:2c:79:d6:e8:90:15:99:33:d4:3e: 1b:59:47:22:0b:f5:c5:5e:26:1e:17:64:ea:34:f7:25:1f:3b: 42:20:e1:3e:5e:8c:19:cf:a1:07:34:57:46:6b:79:a1:84:da: 1b:2d:2d:05:1e:cc:ad:c1:13:cb:47:12:df:24:3b:0e:46:be: 26:34:ac:44:cc:7e:a2:42:49:ca:34:4e:a8:c8:8b:23:33:05: 8f:b5:ee:5d:59:c9:b0:a1:0d:c6:6f:e6:2a:34:5c:10:d2:52: 89:f9:a9:f6:af:aa:50:07:50:cb:dc:65:82:f2:08:c3:51:05: 92:96:5c:89:87:ab:6b:f8:5b:8d:a1:eb:19:b9:58:2e:f3:6d: f6:fa:d4:b1:e8:f2:97:82:4d:41:c5:c3:dd:4a:31:49:15:a6: b2:52:a1:14:99:c1:b5:a1:ec:09:ea:e4:ba:bc:ee:7d:bd:f5: 1d:a1:f4:07 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDmcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNTA4MjIw ODQ0MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA5RDM5NTBCMzc2RTQ3 NDgyNjE5OENFRkM1MEIzNjBBQTdGQUY0MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCMUFH052Nm0x86mCeH06AZTY+Rgng9nj7mocNP1bp//PSYK+O yH3jdoX91sO8vy7whRQhZ+bcR9ujg1RoNI0IKYZmtjTu930a2kUCSHtC4lfGBj74 Vnxh7ATufaz1+e/MV5NrJCtZhc+TqcN2VBCGP2z1QwQ9W58G4LHp2Rsu2LOtmF1A mm+4Z3GXZ4hVHiwtD09J0hiy+uZbQYj1uV3sCDQl4jVdVe+xFvy7IzR5DH5cu+dR ODmEWjk/SWaS6aeQ060is+m5sXq63+b9qhok+v7DmGV8Q9z8GaNgmz2EJabMxraw SQL+eFs826F5tkXcY7cKBCl4UzADyXE2OG9/AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUCdOVCzduR0gmGYzvxQs2Cqf69DcwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vQ2RPVkN6ZHVSMGdtR1l6 dnhRczJDcWY2OURjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdNJADANBgkqhkiG9w0BAQsFAAOCAQEALcCsyguUZh/DAFUx5G1b8iMj6xfrYdGE VOuu/RnQ5+rhkm1J3dy68TRsg5x5DzQWce1vcpT64nxyF+Z2GhdonFavc3hueaub CoqrXWOaLyQsedbokBWZM9Q+G1lHIgv1xV4mHhdk6jT3JR87QiDhPl6MGc+hBzRX Rmt5oYTaGy0tBR7MrcETy0cS3yQ7Dka+JjSsRMx+okJJyjROqMiLIzMFj7XuXVnJ sKENxm/mKjRcENJSifmp9q+qUAdQy9xlgvIIw1EFkpZciYera/hbjaHrGblYLvNt 9vrUsejyl4JNQcXD3UoxSRWmslKhFJnBtaHsCerkurzufb31HaH0Bw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:42:29 2025 by rpki-client