$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/-Fo1rP2JH21VDlMd3cO6QkahYCE.roa File: -Fo1rP2JH21VDlMd3cO6QkahYCE.roa (raw, json) Hash identifier: 4NvsmNGg0Kq/ug8amawwlL75bKqhWL9BAkYEjnmRdVY= Subject key identifier: F8:5A:35:AC:FD:89:1F:6D:55:0E:53:1D:DD:C3:BA:42:46:A1:60:21 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D61 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/-Fo1rP2JH21VDlMd3cO6QkahYCE.roa Signing time: Mon 10 Feb 2025 13:58:39 +0000 ROA not before: Mon 10 Feb 2025 13:58:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24158 IP address blocks: 2402:7500:faff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 19:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3425 (0xd61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F85A35ACFD891F6D550E531DDDC3BA4246A16021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:b9:df:be:21:0c:5e:13:38:90:80:9f:30: 8d:88:7c:53:9e:66:03:e6:57:eb:34:14:80:dd:73: 96:bc:06:b7:7c:01:74:93:28:58:61:ca:34:e6:01: 39:09:40:94:fe:32:4e:20:b4:34:dd:5a:34:25:b1: 17:14:22:40:65:40:42:03:2d:21:c6:2e:9e:fe:b7: 62:6e:25:8a:82:e5:7d:0b:4f:5c:6e:62:8c:b5:46: 7c:0c:b5:08:ab:f4:24:db:31:1a:09:63:94:3c:a7: b9:79:b1:e8:8c:df:ca:ca:bf:f1:95:76:60:1f:55: b1:5d:a5:01:75:29:fe:ce:25:08:eb:81:d8:5e:b9: 7e:a3:38:8d:90:46:ad:2e:07:c2:39:af:5e:fb:02: 4a:2f:b3:2d:28:38:09:63:16:48:85:18:53:44:06: a2:bf:35:81:7b:86:a5:93:52:38:b6:13:1c:74:ce: 00:89:01:49:e5:48:35:b6:48:0e:70:a6:bb:e4:05: ff:85:2a:87:d3:47:4e:17:b6:d8:96:ed:7a:ae:2b: c4:0e:e0:4b:38:e1:7d:0b:e6:16:ce:b4:29:19:fd: 9e:0f:cd:58:f0:5f:0c:24:6a:70:98:74:67:8f:a2: ed:bd:77:9d:7e:ff:8d:bf:cb:2e:41:07:b9:45:bb: dc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5A:35:AC:FD:89:1F:6D:55:0E:53:1D:DD:C3:BA:42:46:A1:60:21 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/-Fo1rP2JH21VDlMd3cO6QkahYCE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7500:faff::/48 Signature Algorithm: sha256WithRSAEncryption ab:92:68:de:22:8b:64:86:42:55:c2:e0:0a:be:d1:42:4a:8b: 44:32:9f:c3:22:4c:28:7a:d7:cf:bc:02:43:3c:20:93:30:53: c5:0c:55:74:5e:85:bc:f8:7c:f4:ec:27:82:b0:05:2f:9a:75: 4e:bb:e8:e1:fb:56:8f:4c:21:fa:50:c2:f3:47:1a:26:0a:41: 1c:7b:06:3a:ff:d3:21:de:8e:e1:c9:9a:9e:26:f2:e7:2e:16: a2:bd:db:09:1a:62:7f:bf:91:e5:e5:e3:b2:05:dd:03:fb:a1: 24:e3:61:89:e8:e7:e2:c8:13:29:f1:d7:7e:c2:15:c0:ab:79: 72:25:ba:5e:ba:bb:04:5a:34:89:e7:fb:be:97:cb:92:e5:5f: 3e:85:18:a2:81:7f:e6:50:f4:5e:a1:79:6a:79:8b:9f:a3:05: b2:7e:42:fb:d0:76:ce:02:6c:c2:b6:cb:05:88:1b:36:8c:53: 1e:e3:b8:f6:04:45:26:3b:c8:35:b1:3b:8e:fa:d7:7b:52:d4: a6:52:91:4f:fd:45:44:a5:ab:8c:e6:c3:56:ab:d5:9d:c4:fe: 68:46:5f:30:21:d8:13:51:cf:8b:a0:70:cd:cc:e8:46:9f:d5: 2b:f6:6c:62:36:f4:f7:e9:30:04:05:06:c6:cd:d3:9c:1a:fe: 2a:56:ff:69 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY4NUEzNUFDRkQ4OTFG NkQ1NTBFNTMxREREQzNCQTQyNDZBMTYwMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC3bnfviEMXhM4kICfMI2IfFOeZgPmV+s0FIDdc5a8Brd8AXST KFhhyjTmATkJQJT+Mk4gtDTdWjQlsRcUIkBlQEIDLSHGLp7+t2JuJYqC5X0LT1xu Yoy1RnwMtQir9CTbMRoJY5Q8p7l5seiM38rKv/GVdmAfVbFdpQF1Kf7OJQjrgdhe uX6jOI2QRq0uB8I5r177Akovsy0oOAljFkiFGFNEBqK/NYF7hqWTUji2Exx0zgCJ AUnlSDW2SA5wprvkBf+FKofTR04XttiW7XquK8QO4Es44X0L5hbOtCkZ/Z4PzVjw XwwkanCYdGePou29d51+/42/yy5BB7lFu9zZAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQU+Fo1rP2JH21VDlMd3cO6QkahYCEwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFLy1GbzFy UDJKSDIxVkRsTWQzY082UWthaFlDRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAkAnUA+v8wDQYJKoZIhvcNAQELBQADggEBAKuSaN4ii2SGQlXC 4Aq+0UJKi0Qyn8MiTCh618+8AkM8IJMwU8UMVXRehbz4fPTsJ4KwBS+adU676OH7 Vo9MIfpQwvNHGiYKQRx7Bjr/0yHejuHJmp4m8ucuFqK92wkaYn+/keXl47IF3QP7 oSTjYYno5+LIEynx137CFcCreXIlul66uwRaNInn+76Xy5LlXz6FGKKBf+ZQ9F6h eWp5i5+jBbJ+QvvQds4CbMK2ywWIGzaMUx7juPYERSY7yDWxO47613tS1KZSkU/9 RUSlq4zmw1ar1Z3E/mhGXzAh2BNRz4ugcM3M6Eaf1Sv2bGI29PfpMAQFBsbN05wa /ipW/2k= -----END CERTIFICATE-----Generated at Wed Apr 16 18:14:30 2025 by rpki-client