$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/dNByJ1gDcljGDf4-CC_O78f7Tac.roa File: dNByJ1gDcljGDf4-CC_O78f7Tac.roa (raw, json) Hash identifier: GdYTNSax0090gPKsJ/QL6xnUpNh4YsTBQSDiexQCmlw= Subject key identifier: 74:D0:72:27:58:03:72:58:C6:0D:FE:3E:08:2F:CE:EF:C7:FB:4D:A7 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D72 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/dNByJ1gDcljGDf4-CC_O78f7Tac.roa Signing time: Mon 10 Feb 2025 13:58:42 +0000 ROA not before: Mon 10 Feb 2025 13:58:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24158 IP address blocks: 115.80.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 19:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3442 (0xd72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=74D0722758037258C60DFE3E082FCEEFC7FB4DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:86:69:34:11:7e:ce:45:7d:db:fd:37:d2:8c: 42:2c:c4:0e:3b:5d:45:12:fa:6f:cb:ff:38:88:a5: 6a:29:2a:63:f9:84:a4:7a:a4:c0:c9:d6:7c:87:7c: b6:73:1d:ab:8e:c0:84:31:b3:33:ee:a5:e1:87:cd: ef:7e:51:ae:97:ab:16:9c:5b:0e:da:c3:da:1c:69: 16:7d:8b:ae:41:84:94:6d:7e:8c:e4:90:fe:97:f0: 13:2f:c5:4e:bd:a0:df:66:ae:84:a4:96:7c:94:8f: b3:8b:10:af:bf:64:c7:96:eb:c7:37:23:23:76:4e: 46:8b:86:d0:cb:ec:02:57:c7:22:2d:80:14:2c:c0: 7f:c7:8a:60:22:66:3a:0c:da:06:f5:c1:45:92:f3: 98:d4:67:9d:72:cc:87:f7:b0:04:f4:e4:69:d7:63: 62:fe:4e:74:1a:f2:a3:3a:cb:1e:2b:bf:88:50:3c: ca:56:9a:4a:7b:8c:67:c5:54:96:e0:cb:54:ab:91: 6e:c5:1f:40:dc:80:bb:32:96:e9:6e:ce:7d:03:f6: 6e:f1:3a:c7:ec:08:0e:26:ae:45:ac:e6:45:4d:fa: f5:0c:f7:d1:a1:52:e7:b6:9f:f2:b1:d4:f8:69:d9: 77:c0:62:2f:6d:00:82:a7:23:9d:31:55:40:b2:09: 2e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D0:72:27:58:03:72:58:C6:0D:FE:3E:08:2F:CE:EF:C7:FB:4D:A7 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/dNByJ1gDcljGDf4-CC_O78f7Tac.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.80.0.0/14 Signature Algorithm: sha256WithRSAEncryption cf:2e:4d:02:f8:03:f6:f9:dc:09:48:22:eb:21:64:e8:11:c3: f6:b1:92:82:67:9e:19:97:a4:59:06:ae:4f:f8:c4:de:32:2d: 4b:9b:3a:47:23:37:24:56:2d:85:91:2c:5c:b4:68:3c:1d:3c: a8:94:08:01:0a:fb:6e:67:51:05:80:5e:6c:70:9f:9b:08:de: b6:b1:6a:73:ac:53:35:c8:e6:67:52:d5:d8:b9:37:bc:18:3c: 6d:cc:f8:e4:a0:4b:7b:fe:51:dc:bd:fe:25:7d:46:7e:04:8e: 82:39:90:75:e1:e1:6b:e9:4e:9a:65:11:b5:c2:cc:99:f1:46: 8d:89:05:f4:bd:92:05:d3:30:fa:ea:92:0b:af:88:c5:fe:4d: c5:5b:41:46:ca:73:4f:45:9b:35:dd:d9:58:3e:08:19:0d:c0: 62:b6:da:03:26:a2:e8:e7:d5:50:20:d5:24:71:0a:61:23:0f: 37:a7:f6:7d:c2:a7:27:c5:8d:57:b2:1e:7d:86:6a:d8:90:fd: 83:f9:3a:20:6d:a0:7a:f6:4e:f8:07:f0:6a:ab:4e:1a:e2:65: e9:f8:c1:35:25:25:24:ad:60:99:bf:1b:06:b0:38:a7:97:f4: 0a:ab:76:55:fa:11:48:cd:9b:d3:37:19:13:27:5a:bc:97:bd: 28:3e:e3:9b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICDXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc0RDA3MjI3NTgwMzcy NThDNjBERkUzRTA4MkZDRUVGQzdGQjREQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmhmk0EX7ORX3b/TfSjEIsxA47XUUS+m/L/ziIpWopKmP5hKR6 pMDJ1nyHfLZzHauOwIQxszPupeGHze9+Ua6XqxacWw7aw9ocaRZ9i65BhJRtfozk kP6X8BMvxU69oN9mroSklnyUj7OLEK+/ZMeW68c3IyN2TkaLhtDL7AJXxyItgBQs wH/HimAiZjoM2gb1wUWS85jUZ51yzIf3sAT05GnXY2L+TnQa8qM6yx4rv4hQPMpW mkp7jGfFVJbgy1SrkW7FH0DcgLsyluluzn0D9m7xOsfsCA4mrkWs5kVN+vUM99Gh Uue2n/Kx1Php2XfAYi9tAIKnI50xVUCyCS7tAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUdNByJ1gDcljGDf4+CC/O78f7TacwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL2ROQnlK MWdEY2xqR0RmNC1DQ19PNzhmN1RhYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzAN MAsEAgABMAUDAwJzUDANBgkqhkiG9w0BAQsFAAOCAQEAzy5NAvgD9vncCUgi6yFk 6BHD9rGSgmeeGZekWQauT/jE3jItS5s6RyM3JFYthZEsXLRoPB08qJQIAQr7bmdR BYBebHCfmwjetrFqc6xTNcjmZ1LV2Lk3vBg8bcz45KBLe/5R3L3+JX1GfgSOgjmQ deHha+lOmmURtcLMmfFGjYkF9L2SBdMw+uqSC6+Ixf5NxVtBRspzT0WbNd3ZWD4I GQ3AYrbaAyai6OfVUCDVJHEKYSMPN6f2fcKnJ8WNV7IefYZq2JD9g/k6IG2gevZO +AfwaqtOGuJl6fjBNSUlJK1gmb8bBrA4p5f0Cqt2VfoRSM2b0zcZEydavJe9KD7j mw== -----END CERTIFICATE-----Generated at Wed Apr 16 18:12:12 2025 by rpki-client