$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/1NgrNLb25TniLdKz8nUBbMVIxbk.roa File: 1NgrNLb25TniLdKz8nUBbMVIxbk.roa (raw, json) Hash identifier: OgSmizwgUBumZd9dtF4SQbAm4VHJeFo5hL18wcpDClc= Subject key identifier: D4:D8:2B:34:B6:F6:E5:39:E2:2D:D2:B3:F2:75:01:6C:C5:48:C5:B9 Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2 Certificate serial: 0CD9 Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/1NgrNLb25TniLdKz8nUBbMVIxbk.roa Signing time: Mon 10 Feb 2025 14:02:56 +0000 ROA not before: Mon 10 Feb 2025 14:02:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131593 IP address blocks: 103.42.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2 Validity Not Before: Feb 10 14:02:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D4D82B34B6F6E539E22DD2B3F275016CC548C5B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:07:37:6c:3f:5c:9d:40:b3:f9:1b:b4:4c:28: 83:1c:51:41:8c:5b:63:4f:29:eb:a4:ab:a7:e9:2f: ff:7d:c8:91:45:6d:33:c3:72:49:32:ea:df:73:9b: 11:4c:ad:27:a0:d8:cd:5f:b5:a0:68:9c:98:24:df: 04:51:92:d1:34:d9:00:ac:d0:23:80:03:6e:b1:85: 08:e5:56:d1:22:dc:21:2a:72:5b:14:dd:94:ad:48: 72:d3:74:df:b3:bd:f7:cb:fa:cd:6c:85:57:92:2e: 4b:6e:5f:0c:b7:3a:05:ec:10:ea:ae:2a:e9:54:b1: be:5a:86:9e:e3:ec:d1:cf:47:a7:db:f3:bf:62:81: 0a:46:ba:ab:f5:12:b6:b9:34:94:74:8b:a9:fe:a3: cf:7c:0f:7b:ac:0f:aa:5b:87:bf:3c:3c:c1:76:0a: d0:f7:32:a3:71:07:07:fd:b9:d9:d9:53:b0:90:9d: 44:93:83:b6:b5:0e:2b:8d:51:12:69:7b:02:e3:86: b5:5e:f2:05:bb:02:42:09:14:11:ca:6c:1f:83:2c: 06:ba:4d:8d:2b:b2:5b:29:52:95:7f:7c:8d:1b:26: 08:c9:49:38:96:7c:d1:3b:06:9c:1e:02:23:d1:5c: 19:54:04:4b:d5:90:b8:25:ec:9c:2b:82:60:6c:30: a3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D8:2B:34:B6:F6:E5:39:E2:2D:D2:B3:F2:75:01:6C:C5:48:C5:B9 X509v3 Authority Key Identifier: keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/1NgrNLb25TniLdKz8nUBbMVIxbk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.42.148.0/24 Signature Algorithm: sha256WithRSAEncryption 70:d6:e1:42:9d:3b:c5:c9:8c:99:16:b9:a1:5e:79:17:6e:93: 77:c1:1a:16:54:5c:39:eb:da:33:c3:e4:a9:83:f7:c0:53:fc: e9:59:60:52:1a:ed:ec:d0:b3:19:4e:69:c0:5d:11:59:fb:4c: 7a:8b:d3:83:ab:87:44:0c:d9:21:d1:e0:5a:3c:b7:91:a9:8e: 38:57:bb:ba:30:88:ad:36:af:ac:9d:e2:96:06:0b:f9:79:2c: 39:c0:bb:e6:34:ac:33:d2:42:e5:eb:d1:47:a1:61:09:43:4a: 61:47:c5:41:64:ee:b5:97:88:de:b1:90:ac:ed:a5:96:39:39: 9d:42:d0:c1:15:5f:12:ed:5d:22:8e:f5:b4:1b:8a:14:3f:7f: 3c:eb:af:7b:f2:e6:35:e7:7b:ac:5b:c2:a4:cd:e9:1a:08:0a: 35:17:31:2e:30:01:45:10:db:e7:8e:a7:f4:ec:f1:bf:21:95: 0a:50:89:6a:46:20:db:75:b3:e3:00:c6:6f:bb:87:0c:46:5b: d5:ec:75:d2:c6:d3:92:5d:43:ba:53:61:87:2a:88:78:28:38: 98:da:d7:8c:e4:16:7a:7e:41:7f:93:84:26:58:1a:e0:16:cb: 07:a4:2b:98:b9:2a:aa:81:10:a1:6e:5f:f8:18:11:df:69:d2: 48:5b:5d:3f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yNTAyMTAx NDAyNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ0RDgyQjM0QjZGNkU1 MzlFMjJERDJCM0YyNzUwMTZDQzU0OEM1QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvBzdsP1ydQLP5G7RMKIMcUUGMW2NPKeukq6fpL/99yJFFbTPD ckky6t9zmxFMrSeg2M1ftaBonJgk3wRRktE02QCs0COAA26xhQjlVtEi3CEqclsU 3ZStSHLTdN+zvffL+s1shVeSLktuXwy3OgXsEOquKulUsb5ahp7j7NHPR6fb879i gQpGuqv1Era5NJR0i6n+o898D3usD6pbh788PMF2CtD3MqNxBwf9udnZU7CQnUST g7a1DiuNURJpewLjhrVe8gW7AkIJFBHKbB+DLAa6TY0rslspUpV/fI0bJgjJSTiW fNE7BpweAiPRXBlUBEvVkLgl7JwrgmBsMKNpAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU1NgrNLb25TniLdKz8nUBbMVIxbkwHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi8xTmdyTkxiMjVUbmlM ZEt6OG5VQmJNVkl4Ymsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZyqUMA0GCSqGSIb3DQEBCwUAA4IBAQBw1uFCnTvFyYyZFrmhXnkXbpN3wRoW VFw569ozw+Spg/fAU/zpWWBSGu3s0LMZTmnAXRFZ+0x6i9ODq4dEDNkh0eBaPLeR qY44V7u6MIitNq+sneKWBgv5eSw5wLvmNKwz0kLl69FHoWEJQ0phR8VBZO61l4je sZCs7aWWOTmdQtDBFV8S7V0ijvW0G4oUP38866978uY153usW8KkzekaCAo1FzEu MAFFENvnjqf07PG/IZUKUIlqRiDbdbPjAMZvu4cMRlvV7HXSxtOSXUO6U2GHKoh4 KDiY2teM5BZ6fkF/k4QmWBrgFssHpCuYuSqqgRChbl/4GBHfadJIW10/ -----END CERTIFICATE-----Generated at Fri Apr 18 23:50:46 2025 by rpki-client