$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/hzi6lvh2qeXl4Wws_taOTxPBGrE.roa File: hzi6lvh2qeXl4Wws_taOTxPBGrE.roa (raw, json) Hash identifier: SIhNx+ld6XwdtcW2AoyUTT/DF1cf5jKlC35Cut1K1JE= Subject key identifier: 87:38:BA:96:F8:76:A9:E5:E5:E1:6C:2C:FE:D6:8E:4F:13:C1:1A:B1 Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2 Certificate serial: 0CD7 Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/hzi6lvh2qeXl4Wws_taOTxPBGrE.roa Signing time: Mon 10 Feb 2025 14:02:55 +0000 ROA not before: Mon 10 Feb 2025 14:02:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131593 IP address blocks: 103.42.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2 Validity Not Before: Feb 10 14:02:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8738BA96F876A9E5E5E16C2CFED68E4F13C11AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:a2:eb:03:e8:1b:54:44:b5:d0:16:3a:c3: 04:74:06:52:57:34:6a:fa:fa:18:0a:19:b0:dc:77: 53:89:cd:b3:b1:61:e0:48:ce:8a:0e:8b:52:2a:14: dd:19:f1:7b:b7:47:59:f9:74:67:86:05:00:22:f9: ad:e9:41:c9:57:41:d7:b1:55:7d:68:db:0e:3a:c5: 3b:76:73:01:26:43:c0:1c:87:88:86:ac:7f:f1:c6: a5:74:42:c5:9a:1d:b3:99:5e:72:ee:74:39:8f:9f: 42:77:8e:1a:39:8c:bd:91:a7:21:21:e3:57:a2:70: 51:74:73:dd:2d:b0:0b:03:2d:39:3b:67:de:24:e1: be:44:f2:81:18:f4:6e:d8:a6:73:82:6f:0a:a8:81: 42:d2:92:36:62:79:6c:e8:5f:5c:15:73:86:84:6a: 02:bb:17:94:ff:1f:d4:ef:7d:3a:90:40:e0:fd:44: 02:2d:a5:8f:4c:e2:89:5a:23:b3:04:b3:e0:dd:85: c2:6e:77:b7:34:c1:cf:45:ac:14:c7:5b:cb:99:b2: 1e:ab:19:75:94:3e:cf:1b:07:9d:e4:d2:23:b1:2a: f5:5f:65:e1:ed:2b:c1:01:ad:fc:c9:1b:9c:a7:67: 76:af:c2:68:4b:b8:c3:95:f3:46:9e:e6:89:36:54: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:38:BA:96:F8:76:A9:E5:E5:E1:6C:2C:FE:D6:8E:4F:13:C1:1A:B1 X509v3 Authority Key Identifier: keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/hzi6lvh2qeXl4Wws_taOTxPBGrE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.42.148.0/22 Signature Algorithm: sha256WithRSAEncryption 06:aa:df:77:7a:89:d9:da:da:84:44:02:05:f3:7d:f1:3e:2d: d6:4d:08:ff:e7:4d:55:c7:13:76:8b:b2:47:99:04:df:79:de: 1a:30:a0:aa:cd:37:bb:f4:bc:db:71:79:bb:e9:21:d4:c8:61: 0e:74:db:6b:0b:e2:9e:2d:3f:b2:38:05:8f:0c:ed:17:7a:a8: 83:5f:b6:ed:dd:f2:ee:5e:2f:de:48:73:24:03:17:66:4c:75: 90:fa:ef:76:9d:7f:7a:dc:fa:86:8c:c4:1d:08:14:0c:24:07: 0d:85:09:fc:e3:0b:7f:90:bb:4d:d6:68:d1:67:6a:38:cf:d9: 7f:75:86:3a:42:6f:8e:bf:55:8f:5b:14:8a:82:b1:64:c0:f5: 06:37:4d:f2:29:3d:af:2d:4c:dd:eb:9a:15:83:fb:bd:d4:e8: dd:05:32:60:a9:73:a3:f8:74:e4:e4:d4:f2:d6:dd:17:e4:9a: c7:dd:e7:9d:bc:f9:32:c9:56:10:44:3f:62:70:8a:8c:18:8c: c0:d7:be:a3:a9:2d:92:2e:c7:91:2c:52:00:e1:d9:80:e3:b9: be:bd:5e:42:41:a3:61:14:ce:d6:19:c4:83:88:14:ca:66:9c: 96:7d:a1:96:ab:55:92:f5:f6:02:ba:dd:55:44:fd:b9:81:55: c1:04:6b:de -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yNTAyMTAx NDAyNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg3MzhCQTk2Rjg3NkE5 RTVFNUUxNkMyQ0ZFRDY4RTRGMTNDMTFBQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfDqLrA+gbVES10BY6wwR0BlJXNGr6+hgKGbDcd1OJzbOxYeBI zooOi1IqFN0Z8Xu3R1n5dGeGBQAi+a3pQclXQdexVX1o2w46xTt2cwEmQ8Ach4iG rH/xxqV0QsWaHbOZXnLudDmPn0J3jho5jL2RpyEh41eicFF0c90tsAsDLTk7Z94k 4b5E8oEY9G7YpnOCbwqogULSkjZieWzoX1wVc4aEagK7F5T/H9TvfTqQQOD9RAIt pY9M4olaI7MEs+DdhcJud7c0wc9FrBTHW8uZsh6rGXWUPs8bB53k0iOxKvVfZeHt K8EBrfzJG5ynZ3avwmhLuMOV80ae5ok2VL9XAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUhzi6lvh2qeXl4Wws/taOTxPBGrEwHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi9oemk2bHZoMnFlWGw0 V3dzX3RhT1R4UEJHckUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZyqUMA0GCSqGSIb3DQEBCwUAA4IBAQAGqt93eonZ2tqERAIF833xPi3WTQj/ 501VxxN2i7JHmQTfed4aMKCqzTe79LzbcXm76SHUyGEOdNtrC+KeLT+yOAWPDO0X eqiDX7bt3fLuXi/eSHMkAxdmTHWQ+u92nX963PqGjMQdCBQMJAcNhQn84wt/kLtN 1mjRZ2o4z9l/dYY6Qm+Ov1WPWxSKgrFkwPUGN03yKT2vLUzd65oVg/u91OjdBTJg qXOj+HTk5NTy1t0X5JrH3eedvPkyyVYQRD9icIqMGIzA176jqS2SLseRLFIA4dmA 47m+vV5CQaNhFM7WGcSDiBTKZpyWfaGWq1WS9fYCut1VRP25gVXBBGve -----END CERTIFICATE-----Generated at Fri Apr 18 23:56:35 2025 by rpki-client