$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/Iz5tKcDQZYWT7RYRtjtU31bpn1U.roa File: Iz5tKcDQZYWT7RYRtjtU31bpn1U.roa (raw, json) Hash identifier: UdokJe6o3UAr2iwc7KOVDMq9BMQTJLTIBPmYAE3iizM= Subject key identifier: 23:3E:6D:29:C0:D0:65:85:93:ED:16:11:B6:3B:54:DF:56:E9:9F:55 Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2 Certificate serial: 0DCD Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/Iz5tKcDQZYWT7RYRtjtU31bpn1U.roa Signing time: Fri 22 Aug 2025 08:51:43 +0000 ROA not before: Fri 22 Aug 2025 08:51:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131593 IP address blocks: 43.251.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3533 (0xdcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2 Validity Not Before: Aug 22 08:51:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=233E6D29C0D0658593ED1611B63B54DF56E99F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:56:b2:fb:c0:85:33:7b:79:b2:4a:66:6b: 07:ee:62:7b:e3:2a:f7:df:ac:b6:6a:4c:f0:7a:53: f3:27:1a:14:65:f2:1a:4c:f6:5f:58:35:38:1c:49: ad:0c:b7:c2:59:1f:07:0b:f2:92:74:81:4f:5c:fa: 67:fe:dc:15:e0:4a:e3:db:42:0d:ee:16:3b:a0:fe: 96:96:23:70:fa:94:ee:04:f5:89:6b:1a:a8:b3:3e: ce:fe:bf:17:91:44:af:7a:3d:af:33:78:d6:8a:ae: 6e:84:63:f8:e8:5b:65:ea:33:10:8e:d8:f0:12:1e: f0:6e:fd:81:3a:3b:4e:7c:c3:6a:74:af:73:08:d3: e6:be:ad:b0:de:c8:33:0c:11:7e:4d:3b:38:a7:53: 37:da:93:e1:e8:b3:c0:cd:44:ef:30:da:a1:e8:20: f7:64:a2:a3:54:48:1f:ca:90:c2:d1:c2:e2:1f:5f: 0b:55:c6:0b:3e:e1:ca:3d:7e:1e:64:a0:e1:be:0c: 33:2a:d6:34:6b:a1:d2:1f:a6:bd:16:1b:46:82:11: ba:2f:c9:94:7d:18:b5:dc:9b:db:a3:09:dc:51:c3: f7:84:af:6f:70:c3:6c:32:49:c8:a7:b3:66:dd:1e: d5:b5:b1:f3:12:d5:65:aa:9d:67:99:43:50:ee:07: 47:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3E:6D:29:C0:D0:65:85:93:ED:16:11:B6:3B:54:DF:56:E9:9F:55 X509v3 Authority Key Identifier: keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/Iz5tKcDQZYWT7RYRtjtU31bpn1U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.251.62.0/24 Signature Algorithm: sha256WithRSAEncryption 47:86:97:f8:89:ea:87:bf:81:f2:2c:4e:7d:50:29:75:24:f9: 93:28:4c:07:8f:19:31:00:37:68:e8:9c:be:06:f7:97:d2:a5: e9:b2:d1:d3:1f:7a:a8:4a:b7:e8:ca:46:32:b8:fd:61:3a:8b: 99:ad:3d:82:0e:7d:86:8b:70:e6:d5:18:23:dd:c2:f5:1d:7b: d0:1d:95:dd:0f:1b:12:ab:97:f3:0c:88:a0:ba:7f:70:f8:38: 29:77:2a:7d:aa:fe:ed:c7:c5:b8:c8:4c:c2:61:69:34:84:fd: 97:2d:30:66:ac:29:4f:ba:f5:65:7a:59:b2:a5:d4:13:e5:08: f1:fb:27:fb:2a:33:da:80:fc:44:08:75:d9:48:12:e9:16:fe: 74:1b:88:68:0f:57:b4:36:5e:30:5a:58:dc:9c:ab:7b:2d:e0: f9:72:eb:82:95:fc:e4:f3:6a:f9:dd:cd:ef:69:ce:c2:0b:43: 68:16:9c:f5:35:48:1f:0b:0b:00:42:bf:00:83:43:a9:2f:97: b5:9f:a3:6d:10:9d:a5:ae:2e:7c:2f:9e:9d:0f:37:62:68:25: 65:63:10:98:77:d2:f9:14:cf:eb:7a:d7:ee:b7:d9:42:4c:8b: 09:d6:95:b0:2d:76:97:b7:5d:68:55:5f:ed:5d:ce:2d:1f:4f: e2:dc:70:08 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yNTA4MjIw ODUxNDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIzM0U2RDI5QzBEMDY1 ODU5M0VEMTYxMUI2M0I1NERGNTZFOTlGNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG2lay+8CFM3t5skpmawfuYnvjKvffrLZqTPB6U/MnGhRl8hpM 9l9YNTgcSa0Mt8JZHwcL8pJ0gU9c+mf+3BXgSuPbQg3uFjug/paWI3D6lO4E9Ylr GqizPs7+vxeRRK96Pa8zeNaKrm6EY/joW2XqMxCO2PASHvBu/YE6O058w2p0r3MI 0+a+rbDeyDMMEX5NOzinUzfak+Hos8DNRO8w2qHoIPdkoqNUSB/KkMLRwuIfXwtV xgs+4co9fh5koOG+DDMq1jRrodIfpr0WG0aCEbovyZR9GLXcm9ujCdxRw/eEr29w w2wyScins2bdHtW1sfMS1WWqnWeZQ1DuB0dXAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUIz5tKcDQZYWT7RYRtjtU31bpn1UwHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi9JejV0S2NEUVpZV1Q3 UllSdGp0VTMxYnBuMVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAK/s+MA0GCSqGSIb3DQEBCwUAA4IBAQBHhpf4ieqHv4HyLE59UCl1JPmTKEwH jxkxADdo6Jy+BveX0qXpstHTH3qoSrfoykYyuP1hOouZrT2CDn2Gi3Dm1Rgj3cL1 HXvQHZXdDxsSq5fzDIigun9w+Dgpdyp9qv7tx8W4yEzCYWk0hP2XLTBmrClPuvVl elmypdQT5Qjx+yf7KjPagPxECHXZSBLpFv50G4hoD1e0Nl4wWljcnKt7LeD5cuuC lfzk82r53c3vac7CC0NoFpz1NUgfCwsAQr8Ag0OpL5e1n6NtEJ2lri58L56dDzdi aCVlYxCYd9L5FM/retfut9lCTIsJ1pWwLXaXt11oVV/tXc4tH0/i3HAI -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:12 2025 by rpki-client