$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/AIS3MqJ-wUnRWM7ghnTAY9TpNSk.roa File: AIS3MqJ-wUnRWM7ghnTAY9TpNSk.roa (raw, json) Hash identifier: Irvd12XNP2lBmVEdKTPkZvBpCpB+QzEHd5B1/7IfF0U= Subject key identifier: 00:84:B7:32:A2:7E:C1:49:D1:58:CE:E0:86:74:C0:63:D4:E9:35:29 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D71 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/AIS3MqJ-wUnRWM7ghnTAY9TpNSk.roa Signing time: Mon 10 Feb 2025 13:58:42 +0000 ROA not before: Mon 10 Feb 2025 13:58:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24158 IP address blocks: 123.99.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 19:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3441 (0xd71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0084B732A27EC149D158CEE08674C063D4E93529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:41:27:c6:b5:51:12:e1:13:b2:7a:85:1b: 2f:18:26:0f:61:b1:0b:a3:f3:8d:7d:05:c4:cc:7b: ce:8d:f1:1f:fc:84:b0:db:cf:a8:bd:d4:42:11:d1: c1:c6:ab:ef:f2:39:c6:82:38:4f:cf:bd:65:79:d9: 84:54:01:7a:d3:6f:85:d9:b7:24:53:8f:5b:cd:1b: b3:07:2b:8c:b4:c1:8f:56:ef:0b:ef:99:bf:e1:77: 9d:f4:e2:92:5c:5e:a1:d5:48:18:f6:d3:37:fb:b5: 72:3f:9a:94:c9:11:3d:0f:f0:cf:13:65:ed:53:15: c3:16:66:9c:78:94:aa:55:93:92:0a:6c:31:4f:e7: de:59:87:e2:0d:02:53:25:40:70:69:37:cc:01:d3: 68:b5:c9:5d:c5:99:95:c8:fd:9b:64:36:d6:d3:9e: 99:6b:f1:2a:d6:5e:1a:22:9c:d1:86:9c:42:3b:d8: 89:2f:7e:58:6a:b6:ea:ee:de:bb:f5:a3:44:3a:49: e0:de:fc:83:84:8e:05:81:84:5c:57:19:5f:61:9f: ac:7b:90:6c:f4:ac:b2:37:05:83:e5:a4:d6:02:de: 6f:ac:13:61:72:53:e0:f8:3f:ad:40:9d:ba:29:c3: e2:8b:9b:dc:0e:67:88:29:36:04:7e:d4:9d:ff:81: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:84:B7:32:A2:7E:C1:49:D1:58:CE:E0:86:74:C0:63:D4:E9:35:29 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/AIS3MqJ-wUnRWM7ghnTAY9TpNSk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.99.0.0/18 Signature Algorithm: sha256WithRSAEncryption c7:92:05:94:2e:25:cc:67:e6:57:3a:0d:2f:f9:e6:24:34:b1: a8:65:a1:57:41:a9:e5:87:aa:89:30:3d:b7:2b:9a:53:e7:3e: 70:e8:b0:34:a9:a2:64:ca:e0:21:6a:e5:32:5f:0f:f1:a9:dc: 21:5b:26:47:00:9f:1a:32:53:c0:e4:d5:83:8e:eb:d1:20:18: fa:68:fe:82:33:2c:a5:c8:86:7e:fc:42:38:78:02:97:ad:65: 6a:c1:a0:07:2e:e3:11:ee:ae:0d:1f:35:56:5d:69:32:01:3c: 6d:ec:57:14:a0:82:52:2b:db:75:eb:9a:61:3e:61:f1:a4:a9: 0c:61:5a:cc:ea:53:25:b6:82:f5:59:60:46:44:7c:92:d8:00: c9:bd:f2:63:1a:fa:02:56:41:68:74:b7:ff:44:1d:f8:bc:c3: 93:48:56:5f:87:53:a1:7c:97:94:c0:64:34:91:93:77:db:51: 20:9f:20:43:a1:f0:d2:83:79:32:11:3d:41:01:b6:79:4c:25: 07:2c:f9:de:cd:63:d2:1c:e3:24:39:f1:46:d5:2a:86:cd:35: 1f:20:20:bd:57:ac:91:b4:5b:8b:f2:51:2a:0d:e9:46:63:01: 98:a6:19:93:40:bc:49:74:26:1d:72:65:23:88:2f:11:b2:e1: 14:ae:a0:6b -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAwODRCNzMyQTI3RUMx NDlEMTU4Q0VFMDg2NzRDMDYzRDRFOTM1MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpwEEnxrVREuETsnqFGy8YJg9hsQuj8419BcTMe86N8R/8hLDb z6i91EIR0cHGq+/yOcaCOE/PvWV52YRUAXrTb4XZtyRTj1vNG7MHK4y0wY9W7wvv mb/hd5304pJcXqHVSBj20zf7tXI/mpTJET0P8M8TZe1TFcMWZpx4lKpVk5IKbDFP 595Zh+INAlMlQHBpN8wB02i1yV3FmZXI/ZtkNtbTnplr8SrWXhoinNGGnEI72Ikv flhqturu3rv1o0Q6SeDe/IOEjgWBhFxXGV9hn6x7kGz0rLI3BYPlpNYC3m+sE2Fy U+D4P61Anbopw+KLm9wOZ4gpNgR+1J3/gUevAgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQUAIS3MqJ+wUnRWM7ghnTAY9TpNSkwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL0FJUzNN cUotd1VuUldNN2doblRBWTlUcE5Tay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAZ7YwAwDQYJKoZIhvcNAQELBQADggEBAMeSBZQuJcxn5lc6DS/5 5iQ0sahloVdBqeWHqokwPbcrmlPnPnDosDSpomTK4CFq5TJfD/Gp3CFbJkcAnxoy U8Dk1YOO69EgGPpo/oIzLKXIhn78Qjh4ApetZWrBoAcu4xHurg0fNVZdaTIBPG3s VxSgglIr23XrmmE+YfGkqQxhWszqUyW2gvVZYEZEfJLYAMm98mMa+gJWQWh0t/9E Hfi8w5NIVl+HU6F8l5TAZDSRk3fbUSCfIEOh8NKDeTIRPUEBtnlMJQcs+d7NY9Ic 4yQ58UbVKobNNR8gIL1XrJG0W4vyUSoN6UZjAZimGZNAvEl0Jh1yZSOILxGy4RSu oGs= -----END CERTIFICATE-----Generated at Wed Apr 16 18:14:31 2025 by rpki-client