$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/_DTCmYdWvkfI4YLFtaWsKZEopF0.roa File: _DTCmYdWvkfI4YLFtaWsKZEopF0.roa (raw, json) Hash identifier: FwWyn4y1N1d2MR06Lif1qOEfcyPUKsg2DMQoGUwcgks= Subject key identifier: FC:34:C2:99:87:56:BE:47:C8:E1:82:C5:B5:A5:AC:29:91:28:A4:5D Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D6E Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/_DTCmYdWvkfI4YLFtaWsKZEopF0.roa Signing time: Mon 10 Feb 2025 13:58:41 +0000 ROA not before: Mon 10 Feb 2025 13:58:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24157 IP address blocks: 2401:7080::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FC34C2998756BE47C8E182C5B5A5AC299128A45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:35:e1:d3:c0:49:da:2c:9b:07:f2:5b:61: 4f:80:20:ce:f5:82:3d:b8:e7:d2:fe:ef:85:28:96: 97:8e:28:66:22:9c:3a:a3:e8:01:ff:d0:03:1a:af: 09:07:b5:da:11:a3:6b:ee:3c:c1:e0:b5:78:b0:0a: 81:0b:45:5c:79:f8:6f:da:10:2a:ae:ab:90:a7:4d: ad:4b:1f:4a:d5:1c:d9:19:14:18:a9:9c:a5:d7:fb: 2b:c8:14:7d:16:ce:23:d8:e4:17:9e:91:ef:a7:f2: 94:a2:d5:1d:5a:e4:1d:e2:f2:5b:56:d5:52:15:b7: 91:20:77:a3:f0:0f:fc:98:b6:52:1a:d4:97:ae:7e: 63:3b:56:57:d4:c5:8f:04:5e:85:b8:50:bc:54:cc: 47:1c:95:03:7b:bf:bd:3d:0e:1a:7b:b1:84:a4:ac: 28:c2:c1:89:82:17:95:da:fc:f7:13:56:ce:d3:8c: ca:50:36:29:2d:f0:94:5a:22:6a:c2:1c:f0:fc:9f: c6:b7:41:cb:00:c6:c0:d1:cc:99:85:8b:ad:38:73: b1:b1:79:ab:33:5b:3e:71:2e:ae:f5:a1:9b:ca:c4: 8c:40:40:1d:ef:61:95:c9:d0:e8:e0:5f:13:d1:9a: 29:d0:23:8e:af:51:4d:b5:83:6a:67:ab:6c:0a:51: 19:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:34:C2:99:87:56:BE:47:C8:E1:82:C5:B5:A5:AC:29:91:28:A4:5D X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/_DTCmYdWvkfI4YLFtaWsKZEopF0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:7080::/32 Signature Algorithm: sha256WithRSAEncryption 05:ad:ee:35:84:73:53:ba:59:97:ac:e7:8b:de:79:61:63:8b: 2b:7c:67:25:2c:61:5c:94:5f:02:dd:72:35:f6:ce:27:66:02: 8d:1a:52:7d:06:3a:95:09:31:bb:7a:59:e6:92:77:e7:10:af: 50:8c:dd:07:e6:ae:21:be:3d:ee:93:10:8c:ee:5e:98:e1:2c: a4:cb:a7:f6:ae:65:70:ee:3c:cc:df:11:66:94:f9:ac:a4:d7: de:4b:65:1b:00:36:f3:bf:8a:fc:f1:ea:7e:96:8d:e1:92:1f: a7:96:64:28:b9:47:d2:f2:b7:a3:6c:51:8f:cb:84:99:58:f0: be:e6:2e:b2:7f:6b:7a:3a:ba:2c:d5:ff:0c:83:3e:2d:c9:eb: 09:56:29:0d:3f:ee:f6:db:4e:7a:4b:8a:70:58:f7:b7:96:33: 73:1a:fd:9f:56:56:3b:19:45:81:9a:b0:88:35:3f:7f:9e:13: 17:05:31:d7:3b:26:20:f6:e4:ca:c3:3f:a8:b1:69:af:c0:d5: 6e:f8:d2:a0:a5:b9:fd:f9:58:60:78:a4:0b:04:70:07:09:21: d3:a5:33:dd:6d:a9:b1:bd:c3:65:93:45:e9:23:83:89:d0:88: 1b:38:af:fa:5e:c1:dc:0a:51:06:35:4b:b9:bb:44:2c:12:71: 11:10:a3:cc -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDMzRDMjk5ODc1NkJF NDdDOEUxODJDNUI1QTVBQzI5OTEyOEE0NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8HjXh08BJ2iybB/JbYU+AIM71gj2459L+74UolpeOKGYinDqj 6AH/0AMarwkHtdoRo2vuPMHgtXiwCoELRVx5+G/aECquq5CnTa1LH0rVHNkZFBip nKXX+yvIFH0WziPY5Beeke+n8pSi1R1a5B3i8ltW1VIVt5Egd6PwD/yYtlIa1Jeu fmM7VlfUxY8EXoW4ULxUzEcclQN7v709Dhp7sYSkrCjCwYmCF5Xa/PcTVs7TjMpQ Nikt8JRaImrCHPD8n8a3QcsAxsDRzJmFi604c7GxeaszWz5xLq71oZvKxIxAQB3v YZXJ0OjgXxPRminQI46vUU21g2pnq2wKURnLAgMBAAGjggH7MIIB9zAdBgNVHQ4E FgQU/DTCmYdWvkfI4YLFtaWsKZEopF0wHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL19EVENt WWRXdmtmSTRZTEZ0YVdzS1pFb3BGMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkAXCAMA0GCSqGSIb3DQEBCwUAA4IBAQAFre41hHNTulmXrOeL 3nlhY4srfGclLGFclF8C3XI19s4nZgKNGlJ9BjqVCTG7elnmknfnEK9QjN0H5q4h vj3ukxCM7l6Y4Syky6f2rmVw7jzM3xFmlPmspNfeS2UbADbzv4r88ep+lo3hkh+n lmQouUfS8rejbFGPy4SZWPC+5i6yf2t6Oros1f8Mgz4tyesJVikNP+722056S4pw WPe3ljNzGv2fVlY7GUWBmrCINT9/nhMXBTHXOyYg9uTKwz+osWmvwNVu+NKgpbn9 +VhgeKQLBHAHCSHTpTPdbamxvcNlk0XpI4OJ0IgbOK/6XsHcClEGNUu5u0QsEnER EKPM -----END CERTIFICATE-----Generated at Fri Apr 18 23:00:09 2025 by rpki-client