$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/w8xdOGZrEKe1FTioerEbgxzTB3U.roa File: w8xdOGZrEKe1FTioerEbgxzTB3U.roa (raw, json) Hash identifier: zE5XUS07FBghHN5BNLpoQkPKn/e6zvgcoUP9xmgZc1o= Subject key identifier: C3:CC:5D:38:66:6B:10:A7:B5:15:38:A8:7A:B1:1B:83:1C:D3:07:75 Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2 Certificate serial: 0CDB Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/w8xdOGZrEKe1FTioerEbgxzTB3U.roa Signing time: Mon 10 Feb 2025 14:02:56 +0000 ROA not before: Mon 10 Feb 2025 14:02:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131593 IP address blocks: 43.251.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2 Validity Not Before: Feb 10 14:02:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C3CC5D38666B10A7B51538A87AB11B831CD30775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:6b:94:50:2d:c2:2d:ee:b3:05:ad:de:2a: de:24:2e:b4:2b:de:68:98:fb:92:5d:6e:c3:7b:41: f4:b4:ac:f0:d5:35:26:16:ab:30:82:f4:eb:5d:7d: db:5e:04:80:c9:8c:7c:7f:ca:60:fd:f9:bb:5a:3f: 75:a1:5b:c5:bc:80:c9:d1:db:68:81:69:cd:ad:74: 18:ff:74:a8:c4:43:61:09:c4:f9:1f:de:db:14:66: 9e:cf:67:a7:22:ec:e5:78:57:2b:b9:87:7a:6d:d8: 12:20:a1:26:d4:d1:43:f6:bf:2d:4f:5d:85:2a:75: b8:f8:c2:c8:05:bf:ec:05:58:9f:f8:42:85:9d:70: 57:94:c9:b6:2d:88:29:35:c3:cb:f0:9c:e6:8e:83: 52:d5:1f:60:47:f1:8a:e9:8b:65:f9:05:11:36:40: af:8f:eb:4e:07:5d:8e:bb:79:65:10:a4:5f:4d:df: 0b:8d:41:b6:69:d3:45:8e:c1:1d:f9:15:2a:fc:a2: 13:fb:ef:da:63:d6:96:fa:fe:94:77:22:38:7c:5c: 2b:a8:b9:a2:f3:77:01:b0:a7:a4:d7:ca:ab:c8:62: ed:11:14:66:c4:ac:64:25:3a:6c:a6:83:b3:fb:36: 05:53:7e:1c:7a:f3:1e:27:46:22:42:ff:0a:f6:83: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CC:5D:38:66:6B:10:A7:B5:15:38:A8:7A:B1:1B:83:1C:D3:07:75 X509v3 Authority Key Identifier: keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/w8xdOGZrEKe1FTioerEbgxzTB3U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.251.63.0/24 Signature Algorithm: sha256WithRSAEncryption 68:4e:48:e1:94:d4:81:f9:99:04:51:5d:a3:42:f2:a1:47:76: 9f:48:8f:1b:54:8d:4f:60:ba:41:f7:88:80:b6:87:40:3b:3c: 2b:63:17:be:f8:8b:32:95:57:c7:37:e9:9d:7c:3c:31:ac:37: 2a:70:eb:bd:ad:a1:aa:11:a4:57:38:e2:83:ff:2f:59:b3:16: c4:7e:13:38:c6:07:c1:6d:98:6d:13:10:26:2b:76:c7:86:e9: f4:9f:56:e0:e0:02:00:3b:ab:57:75:ca:0e:7c:c7:0c:96:bb: 5f:31:ee:2a:a6:2a:85:67:ab:dc:0a:ab:95:c5:b0:35:be:c5: bf:ef:8c:aa:0d:86:4f:d5:48:5d:e9:0c:31:99:49:e6:64:b1: da:67:a7:02:a4:e3:e3:26:23:ae:51:7b:f9:63:81:d0:77:2a: f6:bb:21:84:52:11:92:6d:d4:4f:05:c4:08:2c:a7:ba:56:e8: 80:39:7b:c7:07:7e:27:93:bc:4d:1a:e4:d0:f3:2e:d1:f4:e7: 5e:05:f9:4d:3c:ae:89:33:8f:63:74:f4:0f:70:59:4e:25:74: 6a:44:29:95:69:69:6e:77:b3:d2:8a:47:9e:7f:0a:e4:e5:df: 70:49:92:e4:43:88:0b:e0:01:7f:fb:78:e9:7f:63:39:fa:be: 9b:b3:ba:42 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDNswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yNTAyMTAx NDAyNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMzQ0M1RDM4NjY2QjEw QTdCNTE1MzhBODdBQjExQjgzMUNEMzA3NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmHGuUUC3CLe6zBa3eKt4kLrQr3miY+5JdbsN7QfS0rPDVNSYW qzCC9OtdfdteBIDJjHx/ymD9+btaP3WhW8W8gMnR22iBac2tdBj/dKjEQ2EJxPkf 3tsUZp7PZ6ci7OV4Vyu5h3pt2BIgoSbU0UP2vy1PXYUqdbj4wsgFv+wFWJ/4QoWd cFeUybYtiCk1w8vwnOaOg1LVH2BH8Yrpi2X5BRE2QK+P604HXY67eWUQpF9N3wuN QbZp00WOwR35FSr8ohP779pj1pb6/pR3Ijh8XCuouaLzdwGwp6TXyqvIYu0RFGbE rGQlOmymg7P7NgVTfhx68x4nRiJC/wr2g5JjAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUw8xdOGZrEKe1FTioerEbgxzTB3UwHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi93OHhkT0dackVLZTFG VGlvZXJFYmd4elRCM1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAK/s/MA0GCSqGSIb3DQEBCwUAA4IBAQBoTkjhlNSB+ZkEUV2jQvKhR3afSI8b VI1PYLpB94iAtodAOzwrYxe++IsylVfHN+mdfDwxrDcqcOu9raGqEaRXOOKD/y9Z sxbEfhM4xgfBbZhtExAmK3bHhun0n1bg4AIAO6tXdcoOfMcMlrtfMe4qpiqFZ6vc CquVxbA1vsW/74yqDYZP1Uhd6QwxmUnmZLHaZ6cCpOPjJiOuUXv5Y4HQdyr2uyGE UhGSbdRPBcQILKe6VuiAOXvHB34nk7xNGuTQ8y7R9OdeBflNPK6JM49jdPQPcFlO JXRqRCmVaWlud7PSikeefwrk5d9wSZLkQ4gL4AF/+3jpf2M5+r6bs7pC -----END CERTIFICATE-----Generated at Fri Apr 18 23:58:44 2025 by rpki-client