$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/a_pyADRsH9jr2FSYHf5WhnhnniA.roa File: a_pyADRsH9jr2FSYHf5WhnhnniA.roa (raw, json) Hash identifier: IxxjBrRTg9+O7KHj6xF9JLkCSUpc4MRlRa0AsaoKMzI= Subject key identifier: 6B:FA:72:00:34:6C:1F:D8:EB:D8:54:98:1D:FE:56:86:78:67:9E:20 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 11D7 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/a_pyADRsH9jr2FSYHf5WhnhnniA.roa Signing time: Mon 26 Aug 2024 05:17:59 +0000 ROA not before: Mon 26 Aug 2024 05:17:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 43.255.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4567 (0x11d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6BFA7200346C1FD8EBD854981DFE568678679E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:29:21:0a:ff:9e:75:c6:6e:3f:37:3b:5c: 9a:e3:4c:96:87:6e:e6:80:48:2f:b5:0e:e0:69:44: 68:ab:83:45:7e:44:68:9e:cb:07:5d:73:b3:3a:3e: f9:3e:15:31:71:2e:14:84:13:ae:b0:3d:69:ea:4e: 51:d5:af:31:59:b8:10:7c:31:af:09:71:0f:20:60: b5:56:74:e0:52:8a:eb:25:9f:fb:cb:4d:f3:20:f6: 94:81:da:09:6b:36:73:e8:35:b9:c4:08:43:46:e1: 4c:d1:2d:97:a3:b4:3b:89:c2:48:95:5f:ef:1e:57: c3:b2:e8:76:87:70:82:55:c9:43:fe:1a:cb:88:ff: 4f:49:d1:37:bd:5e:8e:7c:c5:2b:bb:32:c9:fb:a0: 07:0f:7c:5c:2e:1b:39:e4:52:f5:81:fb:65:29:a8: 8c:cc:3e:a6:a0:65:d2:f9:62:f1:cc:98:27:e2:69: e8:b2:37:03:48:87:43:50:e1:82:5c:92:6a:17:43: 92:ad:c6:66:56:38:c6:80:2f:04:9f:ea:a0:07:54: dc:fa:c3:18:f6:c1:ba:5d:69:d5:3c:9b:a2:f7:82: 7a:af:6a:db:75:c5:48:31:c1:90:7d:d0:c3:71:68: d7:3c:57:69:7e:45:c3:fb:4a:4d:a8:f3:33:19:75: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FA:72:00:34:6C:1F:D8:EB:D8:54:98:1D:FE:56:86:78:67:9E:20 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/a_pyADRsH9jr2FSYHf5WhnhnniA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.255.92.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:3f:af:2e:33:fd:f4:fe:8f:44:a2:d1:4d:41:6a:b2:d2:5a: 70:38:51:12:f3:27:a2:52:b5:13:81:b3:40:c5:d8:e0:16:30: 77:cc:2d:f9:c6:00:d2:dd:60:77:08:0c:8a:7d:77:b5:cd:6d: 93:b1:5f:48:65:77:ea:ae:eb:cd:b0:2e:3d:45:38:de:3d:1b: b9:d9:02:08:14:7b:d0:ae:55:32:6d:92:c7:0e:c5:d1:b5:f2: e7:fd:a7:f2:2c:d8:a7:92:f5:1e:76:0a:c7:9f:cb:fe:5e:9a: a1:ff:4c:eb:63:d9:34:d1:b3:97:6b:ab:32:40:0b:d0:3e:36: 02:8c:f4:2b:21:cf:db:a3:77:b3:a1:78:4d:89:7d:42:d5:28: 2c:46:a8:b7:16:de:6e:9a:22:30:db:c1:d2:60:55:19:be:85: bc:bc:80:b2:98:f3:5a:96:66:a3:a6:7e:2e:b8:50:da:58:62: 03:13:0c:98:39:a8:3b:7f:fd:e7:15:68:0e:ff:ff:fb:70:cd: db:59:04:77:67:87:7d:3d:11:c6:52:8d:e0:24:ee:68:b1:33: 44:a4:4a:f8:33:c7:ce:64:2c:41:1d:af:fa:49:ef:b1:fb:78: c7:80:1d:ce:11:5f:5f:3a:a5:e6:59:ec:63:19:79:83:20:44: bd:1e:da:33 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCRkE3MjAwMzQ2QzFG RDhFQkQ4NTQ5ODFERkU1Njg2Nzg2NzlFMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/GikhCv+edcZuPzc7XJrjTJaHbuaASC+1DuBpRGirg0V+RGie ywddc7M6Pvk+FTFxLhSEE66wPWnqTlHVrzFZuBB8Ma8JcQ8gYLVWdOBSiusln/vL TfMg9pSB2glrNnPoNbnECENG4UzRLZejtDuJwkiVX+8eV8Oy6HaHcIJVyUP+GsuI /09J0Te9Xo58xSu7Msn7oAcPfFwuGznkUvWB+2UpqIzMPqagZdL5YvHMmCfiaeiy NwNIh0NQ4YJckmoXQ5KtxmZWOMaALwSf6qAHVNz6wxj2wbpdadU8m6L3gnqvatt1 xUgxwZB90MNxaNc8V2l+RcP7Sk2o8zMZdb/fAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUa/pyADRsH9jr2FSYHf5WhnhnniAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9hX3B5QURSc0g5anIyRlNZSGY1 V2huaG5uaUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCK/9c MA0GCSqGSIb3DQEBCwUAA4IBAQBeP68uM/30/o9EotFNQWqy0lpwOFES8yeiUrUT gbNAxdjgFjB3zC35xgDS3WB3CAyKfXe1zW2TsV9IZXfqruvNsC49RTjePRu52QII FHvQrlUybZLHDsXRtfLn/afyLNinkvUedgrHn8v+Xpqh/0zrY9k00bOXa6syQAvQ PjYCjPQrIc/bo3ezoXhNiX1C1SgsRqi3Ft5umiIw28HSYFUZvoW8vICymPNalmaj pn4uuFDaWGIDEwyYOag7f/3nFWgO///7cM3bWQR3Z4d9PRHGUo3gJO5osTNEpEr4 M8fOZCxBHa/6Se+x+3jHgB3OEV9fOqXmWexjGXmDIES9Htoz -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:07 2024 by rpki-client on console-ams.rpki-client.org