$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/PIlcTQZrpvftHuYPzYmAoT4S0cQ.roa File: PIlcTQZrpvftHuYPzYmAoT4S0cQ.roa (raw, json) Hash identifier: SXntXgH0acpRvlPCfZVJqJXoChgJnNU9aOCeQqJCwOE= Subject key identifier: 3C:89:5C:4D:06:6B:A6:F7:ED:1E:E6:0F:CD:89:80:A1:3E:12:D1:C4 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D66 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/PIlcTQZrpvftHuYPzYmAoT4S0cQ.roa Signing time: Mon 10 Feb 2025 13:58:40 +0000 ROA not before: Mon 10 Feb 2025 13:58:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24157 IP address blocks: 202.144.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3430 (0xd66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3C895C4D066BA6F7ED1EE60FCD8980A13E12D1C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8a:73:72:a4:9c:1c:74:df:3b:d5:2a:d3:0c: 88:34:f6:a5:c7:28:f4:74:32:20:d9:6d:02:4d:32: e1:28:e7:13:88:fa:3e:c2:ce:11:e7:ad:4b:27:c5: f0:3f:6e:d4:ce:1f:6b:33:fb:6a:e2:25:eb:97:06: 9a:d9:83:5d:56:93:27:5c:55:e5:75:a5:17:8f:ba: 30:a5:a3:f8:1d:be:17:39:8b:79:70:89:c5:18:14: 08:d0:b7:55:62:16:a6:d8:47:57:da:ea:10:83:df: 1c:ce:1d:16:a8:ba:b8:51:3c:0a:ef:3f:b6:98:9f: 87:93:ba:a5:bb:07:15:61:0d:87:89:0b:85:5d:a6: ce:88:ff:2b:47:ff:8e:c4:50:98:66:11:4c:13:1a: c2:6a:4c:d4:7a:09:c8:5c:8e:64:39:63:fe:42:2f: 92:a3:f4:a2:1a:ee:5a:28:74:7c:28:7c:cb:65:cb: cc:c0:4b:57:ef:f4:4f:88:10:27:98:d4:4a:dd:ab: 8c:2d:f5:b5:fb:45:f8:9a:cd:81:1b:dc:46:4d:20: 41:26:ab:a4:4b:ab:3a:6c:00:a1:a9:37:d7:3a:f2: 7b:1c:9d:cc:0e:f5:33:5f:cd:4e:9d:36:9f:d6:cb: af:6b:de:8c:74:0c:52:11:ed:d6:ab:81:a6:04:c0: 35:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:89:5C:4D:06:6B:A6:F7:ED:1E:E6:0F:CD:89:80:A1:3E:12:D1:C4 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/PIlcTQZrpvftHuYPzYmAoT4S0cQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.144.208.0/20 Signature Algorithm: sha256WithRSAEncryption 59:a9:7a:d0:64:bb:bf:d4:97:8e:c6:b2:2a:96:f5:65:cd:b2: f8:4e:b6:3f:42:ed:cc:b4:1e:52:5e:48:0c:c1:4f:62:4a:70: 2e:dd:f3:bf:b6:55:d2:e2:4e:2c:cf:e1:77:ce:c4:e8:b9:0f: 9b:b1:76:5f:59:b9:57:a9:4b:94:4f:5d:e6:af:76:d9:bf:33: 4e:70:8c:12:67:a2:8a:ff:45:95:e6:8b:26:5b:f5:d6:5d:ef: 1c:26:52:6f:13:ff:a9:74:42:b9:a6:19:c2:7c:64:64:51:e3: d5:f9:c1:4c:f4:d5:81:24:c5:c2:8f:96:db:57:69:c3:f8:40: 2f:19:46:81:08:74:83:e6:72:d7:54:85:45:87:00:3c:19:f9: 47:49:14:45:da:4f:a4:64:93:f0:e4:0d:07:d3:af:d8:4a:5f: ba:60:f5:b2:00:6f:45:78:b7:56:ab:f2:8a:28:28:08:0f:8d: f4:06:dc:62:be:a0:55:6a:3c:bb:3d:dc:d2:95:fe:d8:a8:e0: 38:4b:34:b2:f8:8d:f7:21:88:87:69:ff:2c:ac:1d:e7:f1:6b: 1e:e5:03:f0:c3:d9:d1:c9:0a:02:4e:d3:49:2c:1a:35:a7:c9: 11:65:23:4c:83:7d:73:50:ed:f3:41:26:b0:4d:25:15:f0:22: 4f:bf:01:77 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDODk1QzREMDY2QkE2 RjdFRDFFRTYwRkNEODk4MEExM0UxMkQxQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeinNypJwcdN871SrTDIg09qXHKPR0MiDZbQJNMuEo5xOI+j7C zhHnrUsnxfA/btTOH2sz+2riJeuXBprZg11WkydcVeV1pRePujClo/gdvhc5i3lw icUYFAjQt1ViFqbYR1fa6hCD3xzOHRaourhRPArvP7aYn4eTuqW7BxVhDYeJC4Vd ps6I/ytH/47EUJhmEUwTGsJqTNR6CchcjmQ5Y/5CL5Kj9KIa7loodHwofMtly8zA S1fv9E+IECeY1Erdq4wt9bX7RfiazYEb3EZNIEEmq6RLqzpsAKGpN9c68nscncwO 9TNfzU6dNp/Wy69r3ox0DFIR7dargaYEwDVjAgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQUPIlcTQZrpvftHuYPzYmAoT4S0cQwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL1BJbGNU UVpycHZmdEh1WVB6WW1Bb1Q0UzBjUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBATKkNAwDQYJKoZIhvcNAQELBQADggEBAFmpetBku7/Ul47GsiqW 9WXNsvhOtj9C7cy0HlJeSAzBT2JKcC7d87+2VdLiTizP4XfOxOi5D5uxdl9ZuVep S5RPXeavdtm/M05wjBJnoor/RZXmiyZb9dZd7xwmUm8T/6l0QrmmGcJ8ZGRR49X5 wUz01YEkxcKPlttXacP4QC8ZRoEIdIPmctdUhUWHADwZ+UdJFEXaT6Rkk/DkDQfT r9hKX7pg9bIAb0V4t1ar8oooKAgPjfQG3GK+oFVqPLs93NKV/tio4DhLNLL4jfch iIdp/yysHefxax7lA/DD2dHJCgJO00ksGjWnyRFlI0yDfXNQ7fNBJrBNJRXwIk+/ AXc= -----END CERTIFICATE-----Generated at Fri Apr 18 22:47:23 2025 by rpki-client