$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/H3kfxgzGXWemURJGTdQh92-s6uY.roa File: H3kfxgzGXWemURJGTdQh92-s6uY.roa (raw, json) Hash identifier: KCi4efj9UjM2n3uL+ImhoP0NUr9p4Iui11E53shdEvo= Subject key identifier: 1F:79:1F:C6:0C:C6:5D:67:A6:51:12:46:4D:D4:21:F7:6F:AC:EA:E6 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D73 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/H3kfxgzGXWemURJGTdQh92-s6uY.roa Signing time: Mon 10 Feb 2025 13:58:43 +0000 ROA not before: Mon 10 Feb 2025 13:58:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24157 IP address blocks: 103.239.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1F791FC60CC65D67A65112464DD421F76FACEAE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:a6:09:0e:94:8d:43:36:92:85:d0:c4:ad: 86:cb:99:44:f1:f4:88:26:7e:3f:d6:c9:83:41:c9: b7:d2:9b:70:ab:30:39:ad:e8:dd:1a:8a:c2:a7:bc: 02:ca:a4:81:f5:64:f1:b0:12:ea:e6:e8:62:e4:45: a3:79:bf:6a:cd:75:e2:9d:ce:3e:9e:fe:c0:51:de: af:3e:a2:8a:ea:86:a1:eb:44:6e:bc:35:ef:3f:35: ac:2d:3a:81:38:db:8c:a2:b8:8b:d2:31:60:c2:be: 3c:36:eb:1c:c8:77:43:7f:91:9c:f2:47:c5:35:47: 3f:3b:b7:b6:c0:ed:0a:43:f0:07:8c:06:d0:bf:1a: 82:e4:ce:a7:6e:e2:d1:7d:68:a4:c4:c0:44:e6:40: 69:98:47:dc:cc:79:eb:4b:96:e9:e5:33:77:e8:34: a5:0e:85:6e:27:b2:a8:1a:4b:f7:e2:ba:70:9d:83: b8:9d:ac:83:c9:5f:e5:c7:f1:52:f8:7e:c5:0b:ef: 77:70:91:c9:73:e8:d0:53:14:eb:33:4b:3b:27:e0: 1b:51:98:c9:2c:3b:d4:11:b2:13:67:3f:1e:f3:82: 95:bb:3e:1f:6c:67:3e:41:31:3e:bf:ce:99:90:87: 77:35:c7:b9:c4:86:78:eb:64:6e:ba:d9:72:2a:3e: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:79:1F:C6:0C:C6:5D:67:A6:51:12:46:4D:D4:21:F7:6F:AC:EA:E6 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/H3kfxgzGXWemURJGTdQh92-s6uY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.239.60.0/22 Signature Algorithm: sha256WithRSAEncryption 66:68:ee:a4:f9:4e:e4:0d:56:03:67:a9:ec:b1:b0:92:cc:ea: 6f:88:0d:e4:49:a3:f9:f5:d0:98:e9:aa:4d:41:a1:69:5c:06: 9d:6d:b3:5c:32:34:7a:21:3d:e1:5d:40:b0:58:6a:92:90:89: c9:4c:ba:41:8d:21:ae:0a:61:fe:eb:74:b1:1d:c0:59:41:1c: ea:38:76:bd:44:17:51:b6:f1:a7:52:e7:71:19:65:5b:70:93: 93:01:e3:6c:5a:80:f9:a7:4b:e3:74:30:a7:79:a5:2e:4c:98: 92:1c:50:cd:cc:ce:ab:22:ee:94:2b:79:11:bf:4c:81:74:60: 6a:1c:2f:7c:05:f1:94:79:d1:08:26:2f:f5:50:1d:27:9d:4b: 2c:a1:55:22:8a:a8:94:8d:ec:39:ec:65:42:17:73:65:9c:29: 24:ce:2f:6f:4a:77:7a:5f:86:9b:79:82:dd:8f:2c:b4:c6:b0: 5b:8e:82:b4:c1:db:f1:aa:b9:27:f9:a0:3c:ef:b4:a7:64:ba: 59:11:49:f9:ff:03:f1:ae:18:18:bf:d0:b8:b2:71:84:a8:e2: 48:88:32:20:7e:36:7e:2b:ad:c7:b5:74:c5:67:65:b6:7d:be: f5:0e:a2:6d:d1:bc:c9:f2:2b:70:ba:c4:35:47:e4:8a:60:c5: 2c:24:1d:3b -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGNzkxRkM2MENDNjVE NjdBNjUxMTI0NjRERDQyMUY3NkZBQ0VBRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFSaYJDpSNQzaShdDErYbLmUTx9Igmfj/WyYNBybfSm3CrMDmt 6N0aisKnvALKpIH1ZPGwEurm6GLkRaN5v2rNdeKdzj6e/sBR3q8+oorqhqHrRG68 Ne8/NawtOoE424yiuIvSMWDCvjw26xzId0N/kZzyR8U1Rz87t7bA7QpD8AeMBtC/ GoLkzqdu4tF9aKTEwETmQGmYR9zMeetLlunlM3foNKUOhW4nsqgaS/fiunCdg7id rIPJX+XH8VL4fsUL73dwkclz6NBTFOszSzsn4BtRmMksO9QRshNnPx7zgpW7Ph9s Zz5BMT6/zpmQh3c1x7nEhnjrZG662XIqPnYZAgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQUH3kfxgzGXWemURJGTdQh92+s6uYwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL0gza2Z4 Z3pHWFdlbVVSSkdUZFFoOTItczZ1WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAJn7zwwDQYJKoZIhvcNAQELBQADggEBAGZo7qT5TuQNVgNnqeyx sJLM6m+IDeRJo/n10Jjpqk1BoWlcBp1ts1wyNHohPeFdQLBYapKQiclMukGNIa4K Yf7rdLEdwFlBHOo4dr1EF1G28adS53EZZVtwk5MB42xagPmnS+N0MKd5pS5MmJIc UM3Mzqsi7pQreRG/TIF0YGocL3wF8ZR50QgmL/VQHSedSyyhVSKKqJSN7DnsZUIX c2WcKSTOL29Kd3pfhpt5gt2PLLTGsFuOgrTB2/GquSf5oDzvtKdkulkRSfn/A/Gu GBi/0LiycYSo4kiIMiB+Nn4rrce1dMVnZbZ9vvUOom3RvMnyK3C6xDVH5IpgxSwk HTs= -----END CERTIFICATE-----Generated at Fri Apr 18 23:22:41 2025 by rpki-client