$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/3eG-dLnP7KTeCu211rWTfeIY9cg.roa File: 3eG-dLnP7KTeCu211rWTfeIY9cg.roa (raw, json) Hash identifier: P2MTwOkPA5QWDpaXZhZlRS3yja8sciVbxNChs2ovWSA= Subject key identifier: DD:E1:BE:74:B9:CF:EC:A4:DE:0A:ED:B5:D6:B5:93:7D:E2:18:F5:C8 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D75 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/3eG-dLnP7KTeCu211rWTfeIY9cg.roa Signing time: Mon 10 Feb 2025 13:58:43 +0000 ROA not before: Mon 10 Feb 2025 13:58:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24157 IP address blocks: 1.200.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3445 (0xd75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DDE1BE74B9CFECA4DE0AEDB5D6B5937DE218F5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:cd:c3:62:73:36:8a:d4:3c:28:69:7d:29: c0:3b:c6:50:63:6b:0b:3b:ba:2f:72:ca:be:c4:20: 83:32:de:9a:66:c9:7d:66:98:74:cc:a3:00:97:0a: 85:0c:67:97:5d:ca:62:0b:44:b8:dd:98:1c:f0:2d: 42:e3:9f:fe:a8:bd:cc:b7:68:71:2a:61:01:35:7a: bd:bf:48:d4:eb:12:c4:e8:68:7c:36:9f:c5:ff:f4: f5:52:a3:83:9b:26:60:3d:86:a4:52:d4:9b:69:8a: 1c:59:83:6d:1f:26:f5:84:af:bf:ba:18:a4:44:80: 36:37:28:e0:fe:36:e5:6f:c5:dc:90:09:7d:f0:ba: 9a:de:80:d2:2f:b0:ae:8d:19:d3:52:4a:bb:42:a1: 70:94:75:a8:05:d5:90:15:09:51:1d:e4:40:8d:b5: fb:70:62:17:6b:e7:31:73:db:3b:54:37:30:25:7f: 08:c2:97:03:a5:e6:a6:7e:56:8a:d4:49:33:fc:77: 3c:13:da:96:d2:e1:e7:63:82:21:16:36:ca:7b:d7: 87:36:bd:d2:3a:aa:3b:02:bc:26:3f:b6:2f:41:0a: 5a:d3:71:66:8a:91:38:2c:73:8d:f5:d3:d5:7a:3b: de:b8:5e:95:c4:52:a7:a6:7f:a7:b0:f6:38:22:1e: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:BE:74:B9:CF:EC:A4:DE:0A:ED:B5:D6:B5:93:7D:E2:18:F5:C8 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/3eG-dLnP7KTeCu211rWTfeIY9cg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 1.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:1a:40:c3:34:ea:03:09:52:db:01:35:68:0d:c1:2b:55:90: be:34:91:33:ca:c2:af:d8:b3:42:58:c6:e1:11:7c:e0:b1:73: 5a:e7:ef:8d:3d:13:2e:8b:d5:6e:0e:1f:41:1b:a5:b4:79:2e: 04:b8:0a:9e:4a:08:6a:69:f3:1e:c7:78:b4:0c:09:ce:6e:d9: 7e:81:77:a8:5b:3b:95:21:af:30:84:ff:e2:5e:b5:62:f4:6d: 39:2a:5c:b8:eb:4e:64:35:86:76:d6:92:92:dd:22:a4:61:67: de:10:eb:0b:af:f7:2b:e5:e1:32:f9:da:98:cb:4a:a9:18:38: 37:b4:5c:ee:ba:b3:4f:48:a2:76:02:21:b5:79:8c:d8:dd:8c: 11:bb:18:99:c4:3f:84:0c:11:52:e3:16:76:9a:61:ae:08:9e: da:f3:8d:99:9b:37:67:83:c6:96:d8:95:66:69:d3:6c:86:0c: bf:eb:81:9a:16:a5:a4:fc:7e:ae:b7:f9:1c:27:e7:6e:5e:69: bc:a3:b3:3a:db:a2:f5:e6:e3:e7:c8:bd:04:21:31:b3:20:8a: 79:a7:cd:2b:5d:1a:41:c7:23:a9:64:20:b5:89:23:9e:d8:ae: 7a:06:8e:5b:b9:ff:55:06:a2:4c:48:44:19:68:2c:84:80:c2: 4a:0f:a8:ca -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICDXUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERERTFCRTc0QjlDRkVD QTRERTBBRURCNUQ2QjU5MzdERTIxOEY1QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzUM3DYnM2itQ8KGl9KcA7xlBjaws7ui9yyr7EIIMy3ppmyX1m mHTMowCXCoUMZ5ddymILRLjdmBzwLULjn/6ovcy3aHEqYQE1er2/SNTrEsToaHw2 n8X/9PVSo4ObJmA9hqRS1JtpihxZg20fJvWEr7+6GKREgDY3KOD+NuVvxdyQCX3w upregNIvsK6NGdNSSrtCoXCUdagF1ZAVCVEd5ECNtftwYhdr5zFz2ztUNzAlfwjC lwOl5qZ+VorUSTP8dzwT2pbS4edjgiEWNsp714c2vdI6qjsCvCY/ti9BClrTcWaK kTgsc43109V6O964XpXEUqemf6ew9jgiHrsBAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQU3eG+dLnP7KTeCu211rWTfeIY9cgwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFLzNlRy1k TG5QN0tUZUN1MjExcldUZmVJWTljZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzAN MAsEAgABMAUDAwAByDANBgkqhkiG9w0BAQsFAAOCAQEACxpAwzTqAwlS2wE1aA3B K1WQvjSRM8rCr9izQljG4RF84LFzWufvjT0TLovVbg4fQRultHkuBLgKnkoIamnz Hsd4tAwJzm7ZfoF3qFs7lSGvMIT/4l61YvRtOSpcuOtOZDWGdtaSkt0ipGFn3hDr C6/3K+XhMvnamMtKqRg4N7Rc7rqzT0iidgIhtXmM2N2MEbsYmcQ/hAwRUuMWdpph rgie2vONmZs3Z4PGltiVZmnTbIYMv+uBmhalpPx+rrf5HCfnbl5pvKOzOtui9ebj 58i9BCExsyCKeafNK10aQccjqWQgtYkjntiuegaOW7n/VQaiTEhEGWgshIDCSg+o yg== -----END CERTIFICATE-----Generated at Fri Apr 18 23:11:01 2025 by rpki-client