$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/OcMZVyVloZZySYmNU42uJMFrw00.roa File: OcMZVyVloZZySYmNU42uJMFrw00.roa (raw, json) Hash identifier: qo2SMPpbHqGeIkozGrC/IhsMjcA3oPz0SbjIugJKUvI= Subject key identifier: 39:C3:19:57:25:65:A1:96:72:49:89:8D:53:8D:AE:24:C1:6B:C3:4D Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0E65 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/OcMZVyVloZZySYmNU42uJMFrw00.roa Signing time: Fri 22 Aug 2025 08:44:37 +0000 ROA not before: Fri 22 Aug 2025 08:44:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9676 IP address blocks: 61.60.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3685 (0xe65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 22 08:44:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=39C319572565A1967249898D538DAE24C16BC34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:46:be:c3:63:77:18:9b:e7:07:bd:61:7c: 90:80:97:b0:86:be:5f:36:3b:67:ae:00:01:2a:1a: fc:92:34:23:be:c2:97:47:16:e8:fb:b4:ae:cb:0b: 9a:e9:dc:ad:cf:49:52:5d:da:93:79:4d:be:5d:12: fe:65:2a:af:4b:18:14:ad:ba:b6:54:19:0e:5e:e9: 14:df:19:68:0a:fc:16:07:1b:73:24:bf:8e:8a:ff: e9:0a:53:6c:6d:37:26:54:44:eb:25:95:4b:8e:a7: b9:7e:b6:bf:35:fc:4c:b1:98:34:89:e4:15:64:12: 37:dc:68:1e:d8:e1:12:e5:35:67:d9:4c:95:b0:d1: 3b:1e:ef:dc:bc:68:0e:b1:7a:9c:01:88:d1:96:ef: 12:9b:93:1b:43:b2:98:c2:1d:9c:2c:ef:c4:14:de: 02:94:14:1c:86:11:7f:62:16:26:16:1d:35:a1:e2: 19:2a:5f:ef:14:9b:0b:f4:5e:ad:20:50:75:10:f4: bd:ff:dc:08:24:64:c5:07:87:43:ed:59:44:3c:64: 11:74:fd:f6:9b:96:0c:7b:af:f3:d7:89:b7:d6:24: bc:de:41:30:51:9f:a0:b1:be:17:2a:6b:c6:0c:f1: 18:c8:44:62:39:b4:f2:bb:39:1c:38:d2:bc:1e:52: a6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:19:57:25:65:A1:96:72:49:89:8D:53:8D:AE:24:C1:6B:C3:4D X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/OcMZVyVloZZySYmNU42uJMFrw00.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.128.0/19 Signature Algorithm: sha256WithRSAEncryption a8:bf:c1:96:77:b4:d3:74:a2:46:53:63:3e:85:77:23:37:eb: 8f:b3:46:6b:04:26:a4:79:ec:3f:2f:46:58:12:7a:a0:67:b0: 7d:ae:28:25:db:cb:b9:78:85:39:b0:66:69:cc:8f:ae:36:a8: 84:9e:f9:5b:7d:d3:eb:8f:05:c0:c3:7f:42:61:eb:95:26:e6: 06:66:65:82:6e:1e:66:70:7f:7c:c5:a5:80:9f:91:c0:d2:70: d1:7d:ec:fd:63:a5:42:51:d6:b2:c2:7a:2f:dc:ad:01:17:b2: 09:ae:7c:0c:dc:2f:25:35:2e:51:23:fb:c6:5c:25:c2:6f:7c: 04:2c:e0:a3:d7:c9:f0:31:1c:7a:63:92:2b:4b:c6:16:b3:53: 4b:f4:d1:a6:8f:68:04:37:9b:d8:45:4f:2f:4c:5d:d2:42:6a: 00:e3:d0:f3:a7:dd:c7:eb:5e:8a:36:ce:9e:78:a2:c7:e8:87: 06:07:ab:1b:72:22:c6:a6:79:ac:f0:d0:ea:d4:dc:c3:8d:25: 30:48:80:3b:07:cd:f5:e0:04:e2:ca:e0:af:db:3d:59:0b:30: 85:b7:11:c2:96:fd:76:ae:6c:66:a8:cb:5a:25:21:d4:ca:43: 54:75:57:3f:11:21:41:48:87:07:75:38:e7:62:35:05:5e:e6: 10:9a:ca:d7 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNTA4MjIw ODQ0MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM5QzMxOTU3MjU2NUEx OTY3MjQ5ODk4RDUzOERBRTI0QzE2QkMzNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9O0a+w2N3GJvnB71hfJCAl7CGvl82O2euAAEqGvySNCO+wpdH Fuj7tK7LC5rp3K3PSVJd2pN5Tb5dEv5lKq9LGBSturZUGQ5e6RTfGWgK/BYHG3Mk v46K/+kKU2xtNyZUROsllUuOp7l+tr81/EyxmDSJ5BVkEjfcaB7Y4RLlNWfZTJWw 0Tse79y8aA6xepwBiNGW7xKbkxtDspjCHZws78QU3gKUFByGEX9iFiYWHTWh4hkq X+8Umwv0Xq0gUHUQ9L3/3AgkZMUHh0PtWUQ8ZBF0/fablgx7r/PXibfWJLzeQTBR n6Cxvhcqa8YM8RjIRGI5tPK7ORw40rweUqaLAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUOcMZVyVloZZySYmNU42uJMFrw00wHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vT2NNWlZ5VmxvWlp5U1lt TlU0MnVKTUZydzAwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BT08gDANBgkqhkiG9w0BAQsFAAOCAQEAqL/Blne003SiRlNjPoV3Izfrj7NGawQm pHnsPy9GWBJ6oGewfa4oJdvLuXiFObBmacyPrjaohJ75W33T648FwMN/QmHrlSbm BmZlgm4eZnB/fMWlgJ+RwNJw0X3s/WOlQlHWssJ6L9ytAReyCa58DNwvJTUuUSP7 xlwlwm98BCzgo9fJ8DEcemOSK0vGFrNTS/TRpo9oBDeb2EVPL0xd0kJqAOPQ86fd x+teijbOnniix+iHBgerG3IixqZ5rPDQ6tTcw40lMEiAOwfN9eAE4srgr9s9WQsw hbcRwpb9dq5sZqjLWiUh1MpDVHVXPxEhQUiHB3U452I1BV7mEJrK1w== -----END CERTIFICATE-----Generated at Sun Aug 24 09:42:12 2025 by rpki-client