$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/en2bXo9QIS80om6Pw8cCntWZTrE.roa File: en2bXo9QIS80om6Pw8cCntWZTrE.roa (raw, json) Hash identifier: cSaMWlfnQ/FMpPK9UKqd0bpBoGY6zmKnFn+KaRlTYhM= Subject key identifier: 7A:7D:9B:5E:8F:50:21:2F:34:A2:6E:8F:C3:C7:02:9E:D5:99:4E:B1 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D74 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/en2bXo9QIS80om6Pw8cCntWZTrE.roa Signing time: Mon 10 Feb 2025 13:58:43 +0000 ROA not before: Mon 10 Feb 2025 13:58:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24157 IP address blocks: 103.5.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3444 (0xd74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7A7D9B5E8F50212F34A26E8FC3C7029ED5994EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:36:3f:8f:63:49:cf:c2:17:d3:6d:55:3c: aa:54:76:9a:9d:53:9c:3c:83:81:6f:e8:c6:6e:95: 19:33:1e:3f:f6:df:3d:70:03:a5:13:ce:13:b7:38: 94:b4:68:bb:8a:b1:19:5c:26:f3:dd:35:77:88:b2: f5:58:3c:e2:33:c5:1a:c9:66:28:13:13:76:30:82: 5b:c8:19:85:44:74:58:c5:ec:c1:9f:b8:2c:26:07: 53:13:e1:cb:85:c7:38:51:89:12:8e:e3:0f:42:c6: 01:9d:05:1b:ca:53:07:3f:a5:44:e3:4a:d1:7f:ac: 66:56:58:86:9e:fd:c5:bd:c3:da:1e:32:74:0a:dc: 09:14:47:99:f1:53:f5:28:d0:f9:b1:ce:51:e5:1e: d0:71:a4:5f:1e:25:d7:ac:2d:63:24:a5:54:4d:0b: a7:1f:5d:8f:5f:2d:8a:3a:c8:75:2d:9f:81:9f:ce: 37:01:6a:bd:97:74:88:e1:a7:4c:76:09:e3:2c:17: b3:4b:dc:e4:ba:2a:38:67:4e:2c:0d:a8:47:75:85: 04:3e:0d:7b:ef:d5:da:b2:75:33:0f:61:81:54:c6: 64:8c:2b:45:a8:1e:0d:3f:1f:a3:b1:ed:d6:56:0e: ac:f4:5d:ea:10:62:97:54:39:a5:f9:73:6d:79:04: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7D:9B:5E:8F:50:21:2F:34:A2:6E:8F:C3:C7:02:9E:D5:99:4E:B1 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/en2bXo9QIS80om6Pw8cCntWZTrE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.5.32.0/22 Signature Algorithm: sha256WithRSAEncryption 73:28:c3:ee:2e:ac:2c:14:0a:5b:13:22:e1:57:07:78:c6:8c: ed:87:5d:b4:95:61:35:f1:08:3b:d1:81:22:ad:f2:29:30:ae: 7d:0b:c7:a9:be:de:a2:cf:df:88:74:41:2f:75:d3:89:85:16: 96:9d:da:19:f1:0d:5f:34:76:81:af:fc:9b:3d:10:12:68:1b: 91:97:66:d4:a5:42:05:6c:17:0b:09:30:89:7b:ee:be:45:ae: 0b:fd:27:75:c5:03:05:61:2f:ff:2a:a7:7f:fe:8d:40:5f:ff: 8e:c6:d7:fe:39:bd:23:3a:c8:c1:26:a8:98:1d:fd:69:78:11: 8a:1b:90:36:59:99:b7:4b:c9:45:6f:ea:fc:ee:42:6b:b1:37: ef:dc:79:68:71:2b:24:2a:7d:2e:3d:bb:7b:bb:07:56:11:ef: 4d:a4:80:40:84:96:54:a0:aa:95:43:70:c0:e8:e9:d9:e2:ea: 03:e7:74:27:86:89:66:71:7a:b7:98:80:69:9c:4b:0e:28:63: 32:8c:4b:f7:75:f8:6a:18:1b:e6:a9:d9:08:30:f2:ce:1d:80: ae:8a:ef:34:71:58:f2:79:95:4f:c2:56:88:e5:4a:93:ec:e5: 2e:ab:a5:1d:11:6f:8e:57:b4:c2:27:88:51:af:ca:2e:69:84: 07:30:67:51 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdBN0Q5QjVFOEY1MDIx MkYzNEEyNkU4RkMzQzcwMjlFRDU5OTRFQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf8zY/j2NJz8IX021VPKpUdpqdU5w8g4Fv6MZulRkzHj/23z1w A6UTzhO3OJS0aLuKsRlcJvPdNXeIsvVYPOIzxRrJZigTE3YwglvIGYVEdFjF7MGf uCwmB1MT4cuFxzhRiRKO4w9CxgGdBRvKUwc/pUTjStF/rGZWWIae/cW9w9oeMnQK 3AkUR5nxU/Uo0PmxzlHlHtBxpF8eJdesLWMkpVRNC6cfXY9fLYo6yHUtn4GfzjcB ar2XdIjhp0x2CeMsF7NL3OS6KjhnTiwNqEd1hQQ+DXvv1dqydTMPYYFUxmSMK0Wo Hg0/H6Ox7dZWDqz0XeoQYpdUOaX5c215BKAXAgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQUen2bXo9QIS80om6Pw8cCntWZTrEwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL2VuMmJY bzlRSVM4MG9tNlB3OGNDbnRXWlRyRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAJnBSAwDQYJKoZIhvcNAQELBQADggEBAHMow+4urCwUClsTIuFX B3jGjO2HXbSVYTXxCDvRgSKt8ikwrn0Lx6m+3qLP34h0QS9104mFFpad2hnxDV80 doGv/Js9EBJoG5GXZtSlQgVsFwsJMIl77r5Frgv9J3XFAwVhL/8qp3/+jUBf/47G 1/45vSM6yMEmqJgd/Wl4EYobkDZZmbdLyUVv6vzuQmuxN+/ceWhxKyQqfS49u3u7 B1YR702kgECEllSgqpVDcMDo6dni6gPndCeGiWZxereYgGmcSw4oYzKMS/d1+GoY G+ap2Qgw8s4dgK6K7zRxWPJ5lU/CVojlSpPs5S6rpR0Rb45XtMIniFGvyi5phAcw Z1E= -----END CERTIFICATE-----Generated at Wed Apr 23 00:23:32 2025 by rpki-client