$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/FA4wD27U2NjsICFIb1jlUS5tEE0.roa File: FA4wD27U2NjsICFIb1jlUS5tEE0.roa (raw, json) Hash identifier: H8UI47mCjAfOW4sZqmay66E/NU4nxPz9DDQw9DSHhKE= Subject key identifier: 14:0E:30:0F:6E:D4:D8:D8:EC:20:21:48:6F:58:E5:51:2E:6D:10:4D Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D6A Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/FA4wD27U2NjsICFIb1jlUS5tEE0.roa Signing time: Mon 10 Feb 2025 13:58:41 +0000 ROA not before: Mon 10 Feb 2025 13:58:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24158 IP address blocks: 180.204.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 19:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3434 (0xd6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=140E300F6ED4D8D8EC2021486F58E5512E6D104D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:c7:65:3b:ac:50:84:f0:09:83:6b:87:60: 17:da:b9:d1:3a:91:4c:31:c8:f5:6a:60:d1:15:a6: 14:73:34:23:d3:da:9d:09:d2:cc:c6:56:0c:72:3b: 9e:45:76:25:ac:ea:26:15:86:45:05:94:fa:eb:f1: 13:6b:52:78:2f:7b:fe:10:a0:a4:62:4d:a9:0c:9b: fc:41:e4:15:8c:8a:20:c2:6c:b9:b1:a1:85:0e:5a: 21:c1:17:85:75:c5:0e:55:6a:2c:49:64:57:31:17: 77:b8:2c:ef:c5:1b:b4:45:8d:38:b3:8f:cc:d9:04: 84:81:a8:08:c7:7b:38:b6:73:60:16:15:07:4d:98: 52:65:d7:9a:04:f2:41:a0:d1:b2:f9:63:2e:77:b2: 75:97:c8:1c:20:fb:f3:09:b4:40:20:01:33:46:12: 8d:9e:17:14:de:0e:75:af:73:10:b6:7c:05:0a:54: e9:aa:08:7a:8a:b0:c6:e5:eb:80:7f:c9:bd:70:83: 75:0d:e2:aa:03:8c:1e:3b:06:5a:79:ee:fe:c9:fe: 94:f9:64:61:63:c8:af:28:48:1b:d6:fa:d4:67:28: 44:cf:14:fc:67:7b:3d:0c:92:89:96:0f:a5:f3:a9: 95:af:4f:0b:a4:c7:ec:d4:f2:37:de:dd:bf:08:72: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0E:30:0F:6E:D4:D8:D8:EC:20:21:48:6F:58:E5:51:2E:6D:10:4D X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/FA4wD27U2NjsICFIb1jlUS5tEE0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.204.0.0/14 Signature Algorithm: sha256WithRSAEncryption d0:88:2a:ac:93:6a:0f:a1:17:4a:1c:53:a7:b4:3f:63:ca:ae: b8:61:0c:91:74:3a:13:be:0d:c8:92:8c:16:36:0f:fe:68:a0: b9:97:10:a4:56:89:c3:0d:91:d7:23:82:66:e4:2d:14:dd:e7: 74:6f:6f:6e:ea:bc:73:0f:50:d6:84:db:0e:a1:77:45:c9:56: 09:81:8e:31:99:d3:a8:33:76:cf:49:fd:e0:50:90:24:5a:f0: ad:36:2f:d0:a5:5a:04:4b:b9:80:99:d0:a6:4a:21:d4:9a:cf: 60:4d:9f:fc:84:cf:81:82:65:f8:d8:5d:f4:93:b8:fe:1d:50: 5a:9e:fa:66:f1:60:3b:25:76:c1:12:52:3c:ad:30:aa:09:bb: 24:16:75:33:bb:c7:c0:84:48:90:d0:54:13:7e:71:e3:08:3c: 88:ff:84:a3:72:8f:69:40:bc:b2:d1:7a:ef:8f:b7:dc:a4:8c: 82:37:3b:c1:02:4f:6d:db:5b:10:76:0c:ca:3c:02:e8:07:1a: f0:c8:7b:ec:a4:fd:2d:5c:1b:11:a0:05:71:c1:5b:97:73:f6: 59:06:ab:f3:39:a7:fb:7f:b6:f9:1c:57:a2:23:03:87:b4:42: e7:a4:fb:e1:8e:ff:be:7a:17:7a:5a:73:a5:38:f0:94:a6:3f: eb:1f:46:65 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICDWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0MEUzMDBGNkVENEQ4 RDhFQzIwMjE0ODZGNThFNTUxMkU2RDEwNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPsMdlO6xQhPAJg2uHYBfaudE6kUwxyPVqYNEVphRzNCPT2p0J 0szGVgxyO55FdiWs6iYVhkUFlPrr8RNrUngve/4QoKRiTakMm/xB5BWMiiDCbLmx oYUOWiHBF4V1xQ5VaixJZFcxF3e4LO/FG7RFjTizj8zZBISBqAjHezi2c2AWFQdN mFJl15oE8kGg0bL5Yy53snWXyBwg+/MJtEAgATNGEo2eFxTeDnWvcxC2fAUKVOmq CHqKsMbl64B/yb1wg3UN4qoDjB47Blp57v7J/pT5ZGFjyK8oSBvW+tRnKETPFPxn ez0MkomWD6XzqZWvTwukx+zU8jfe3b8IcuyrAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUFA4wD27U2NjsICFIb1jlUS5tEE0wHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL0ZBNHdE MjdVMk5qc0lDRkliMWpsVVM1dEVFMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzAN MAsEAgABMAUDAwK0zDANBgkqhkiG9w0BAQsFAAOCAQEA0IgqrJNqD6EXShxTp7Q/ Y8quuGEMkXQ6E74NyJKMFjYP/miguZcQpFaJww2R1yOCZuQtFN3ndG9vbuq8cw9Q 1oTbDqF3RclWCYGOMZnTqDN2z0n94FCQJFrwrTYv0KVaBEu5gJnQpkoh1JrPYE2f /ITPgYJl+Nhd9JO4/h1QWp76ZvFgOyV2wRJSPK0wqgm7JBZ1M7vHwIRIkNBUE35x 4wg8iP+Eo3KPaUC8stF674+33KSMgjc7wQJPbdtbEHYMyjwC6Aca8Mh77KT9LVwb EaAFccFbl3P2WQar8zmn+3+2+RxXoiMDh7RC56T74Y7/vnoXelpzpTjwlKY/6x9G ZQ== -----END CERTIFICATE-----Generated at Wed Apr 16 18:14:31 2025 by rpki-client