$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/kAYsCGHHapeWyRdB0_jPwzmQLrY.roa File: kAYsCGHHapeWyRdB0_jPwzmQLrY.roa (raw, json) Hash identifier: e2lpkolZKjE9NM4M8R/1yj50nSph0tqGdIs65nZCfxU= Subject key identifier: 90:06:2C:08:61:C7:6A:97:96:C9:17:41:D3:F8:CF:C3:39:90:2E:B6 Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0E61 Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/kAYsCGHHapeWyRdB0_jPwzmQLrY.roa Signing time: Fri 22 Aug 2025 08:44:35 +0000 ROA not before: Fri 22 Aug 2025 08:44:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9676 IP address blocks: 61.63.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3681 (0xe61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Aug 22 08:44:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=90062C0861C76A9796C91741D3F8CFC339902EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:f6:05:4d:fb:8e:9d:bc:67:1b:60:51:cf: c9:02:d5:32:92:c4:68:0a:fa:8e:32:47:61:b5:8a: 77:bd:c2:61:cc:dc:62:65:0b:30:2b:c3:64:0e:1b: 98:bc:ac:be:38:15:ad:53:e7:0a:26:68:98:11:e0: 1f:81:59:2e:2c:ef:19:86:5d:86:b4:94:ce:e0:21: a5:9c:a2:ac:c3:d6:3e:80:97:59:67:db:73:e1:06: 1d:0d:fc:08:d0:7f:cf:db:dd:74:cc:02:64:4a:e8: 27:d7:9b:6f:ad:3b:8c:63:76:ed:3f:1f:2b:65:d7: 13:ad:ce:25:27:21:f8:5f:1a:72:ec:4d:83:3a:87: 8a:b1:9e:0d:22:f5:b1:7c:08:24:ff:00:f8:17:c1: 53:26:94:0d:48:e5:ee:a6:c0:33:d0:ae:cc:dc:d4: c1:76:57:0e:7a:65:c4:03:3a:17:6c:b3:3c:b5:23: f4:3d:8f:fb:ce:d5:55:bf:f7:10:0b:86:c1:88:1d: eb:61:49:d1:1c:0a:58:05:28:7f:7f:d4:3e:e0:21: 8b:71:f3:57:71:59:be:21:ef:96:a0:ef:10:64:f3: 7e:ad:ae:c6:ff:6e:2f:2f:5c:88:1c:d8:c7:da:01: 89:3f:89:f8:c2:40:8b:cb:82:fa:e4:ed:d6:e1:85: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:06:2C:08:61:C7:6A:97:96:C9:17:41:D3:F8:CF:C3:39:90:2E:B6 X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/kAYsCGHHapeWyRdB0_jPwzmQLrY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.63.160.0/19 Signature Algorithm: sha256WithRSAEncryption 50:34:ac:1f:1a:4a:75:2b:54:0d:f1:e7:ad:c9:76:7c:2e:bc: 22:ed:8e:32:ea:32:56:41:cf:28:47:0e:ff:20:55:59:c1:81: 4d:10:e8:72:dd:32:74:16:d0:a0:2b:7b:71:ea:be:90:f1:34: bc:ca:1f:ec:b8:8b:99:32:e0:a0:4e:a7:36:0b:02:a7:14:47: bd:07:79:2a:f5:0b:5e:d4:20:92:07:4c:7f:99:72:3d:34:a7: 09:29:34:54:88:4f:b6:44:c9:d0:07:fd:e8:a7:5d:a2:ad:f6: 29:7c:05:0e:06:46:ed:cd:7a:45:6e:66:e1:46:ff:3d:d1:93: b5:d9:7a:ad:32:c4:be:72:13:21:57:35:bf:0c:c9:c6:9d:85: a4:c9:62:fe:f0:de:c7:25:bf:35:e4:c9:67:65:b3:0f:32:0c: aa:22:77:dc:9d:74:f2:d1:42:2c:db:b2:da:b7:ba:0e:ae:6b: 7a:14:27:18:60:87:1f:28:5a:3b:00:82:bb:6f:fd:8c:d2:03: eb:34:a9:1a:94:33:16:ac:8f:b5:36:48:dd:a6:0a:13:bf:18: d6:22:fe:aa:43:cf:7d:57:a1:76:64:da:5c:9e:db:a0:af:91: c3:27:e9:ef:d3:78:7d:02:f6:53:54:2f:77:ad:a8:82:0f:0f: 79:cf:61:d0 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNTA4MjIw ODQ0MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkwMDYyQzA4NjFDNzZB OTc5NkM5MTc0MUQzRjhDRkMzMzk5MDJFQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq7fYFTfuOnbxnG2BRz8kC1TKSxGgK+o4yR2G1ine9wmHM3GJl CzArw2QOG5i8rL44Fa1T5womaJgR4B+BWS4s7xmGXYa0lM7gIaWcoqzD1j6Al1ln 23PhBh0N/AjQf8/b3XTMAmRK6CfXm2+tO4xjdu0/Hytl1xOtziUnIfhfGnLsTYM6 h4qxng0i9bF8CCT/APgXwVMmlA1I5e6mwDPQrszc1MF2Vw56ZcQDOhdsszy1I/Q9 j/vO1VW/9xALhsGIHethSdEcClgFKH9/1D7gIYtx81dxWb4h75ag7xBk836trsb/ bi8vXIgc2MfaAYk/ifjCQIvLgvrk7dbhhZvHAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUkAYsCGHHapeWyRdB0/jPwzmQLrYwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00va0FZc0NHSEhhcGVXeVJk QjBfalB3em1RTHJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BT0/oDANBgkqhkiG9w0BAQsFAAOCAQEAUDSsHxpKdStUDfHnrcl2fC68Iu2OMuoy VkHPKEcO/yBVWcGBTRDoct0ydBbQoCt7ceq+kPE0vMof7LiLmTLgoE6nNgsCpxRH vQd5KvULXtQgkgdMf5lyPTSnCSk0VIhPtkTJ0Af96Kddoq32KXwFDgZG7c16RW5m 4Ub/PdGTtdl6rTLEvnITIVc1vwzJxp2FpMli/vDexyW/NeTJZ2WzDzIMqiJ33J10 8tFCLNuy2re6Dq5rehQnGGCHHyhaOwCCu2/9jNID6zSpGpQzFqyPtTZI3aYKE78Y 1iL+qkPPfVehdmTaXJ7boK+Rwyfp79N4fQL2U1Qvd62ogg8Pec9h0A== -----END CERTIFICATE-----Generated at Sun Aug 24 09:42:25 2025 by rpki-client