$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/oVYf3SYw6tbSMXsr-9FnwQovN30.roa File: oVYf3SYw6tbSMXsr-9FnwQovN30.roa (raw, json) Hash identifier: jupyTuVrpCS27gbFzTs9nIlblq2pST+Ooz+Me5rRB6A= Subject key identifier: A1:56:1F:DD:26:30:EA:D6:D2:31:7B:2B:FB:D1:67:C1:0A:2F:37:7D Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D5F Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/oVYf3SYw6tbSMXsr-9FnwQovN30.roa Signing time: Mon 10 Feb 2025 13:58:38 +0000 ROA not before: Mon 10 Feb 2025 13:58:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24157 IP address blocks: 110.50.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3423 (0xd5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A1561FDD2630EAD6D2317B2BFBD167C10A2F377D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a5:4d:8e:b9:30:6c:fb:bd:19:52:a2:ca:2e: 31:49:80:3f:cb:93:85:06:5c:3f:5d:d2:50:8c:09: ab:8e:50:1f:39:a5:9a:e8:b7:97:68:c5:47:4b:76: a3:d6:c9:8a:0b:de:ba:7d:31:58:50:24:58:db:cb: e7:da:87:2e:54:0f:9e:b3:c9:1a:e9:b2:ff:87:28: 70:3e:c8:4b:27:be:23:74:c0:4b:5c:3e:95:9c:aa: 9a:5d:62:ac:82:b9:ad:c9:9e:f8:9b:8e:77:a9:2b: 7b:22:06:eb:35:1b:61:8a:82:bd:bd:7d:21:3e:69: f2:9f:f0:26:f7:1d:68:5d:ec:29:79:5c:fb:a7:1e: ce:0a:12:54:55:76:55:e9:97:6c:41:a0:d4:fd:79: 7b:7b:d7:66:a8:96:d4:0e:c7:00:8f:ef:f7:14:29: d7:80:69:9d:8a:e6:3e:b6:47:87:3a:b2:d5:6a:1d: 47:ce:7a:5a:39:e1:b3:60:5c:5a:bc:05:81:b4:13: 03:2b:ae:75:38:4a:6c:fe:45:d4:9c:39:6a:85:f1: 98:a9:7c:44:5e:ab:f2:55:85:a5:78:ff:09:e5:e5: bb:55:46:dd:fd:13:ce:63:ca:90:7d:83:26:83:99: 29:24:68:98:b0:bc:30:eb:6d:36:57:b1:6b:af:90: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:1F:DD:26:30:EA:D6:D2:31:7B:2B:FB:D1:67:C1:0A:2F:37:7D X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/oVYf3SYw6tbSMXsr-9FnwQovN30.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.50.128.0/18 Signature Algorithm: sha256WithRSAEncryption 72:6f:20:29:8e:de:07:b6:0a:e4:16:31:87:33:52:ee:db:67: 93:3d:f7:2b:87:0a:06:df:41:f2:96:6d:cd:46:95:1b:f8:08: 57:49:82:8c:46:9b:af:da:6a:c2:4e:6e:1f:57:b4:fd:a4:24: eb:0a:7c:9a:10:e2:ca:6e:4c:35:5d:51:7b:5c:a0:a8:ef:32: 92:d3:0b:5c:94:26:17:61:34:6c:08:d2:fa:98:e6:ca:ae:5c: 73:66:bf:aa:9d:6f:43:4d:0a:ef:5f:91:bb:fb:64:0e:8b:2d: 81:e7:93:5b:7e:3f:b4:af:7c:e7:63:46:cb:9c:b1:21:7f:7d: 38:f4:95:86:2b:89:19:55:76:cd:e6:08:7e:6d:21:25:53:2b: ca:54:19:5c:35:74:36:b4:38:21:b1:01:26:13:ad:1f:cf:08: b9:9f:7f:81:ea:c9:6c:20:3c:48:81:92:cd:02:83:c6:02:40: 7c:eb:ab:c7:b4:01:79:81:e3:2b:06:04:95:68:b3:59:23:7e: 6d:b2:4f:5c:e0:c0:da:a0:f9:e2:69:1f:e9:52:15:56:c1:e0: be:02:64:62:54:af:44:19:16:91:26:60:af:99:db:a1:fc:2c: cf:6f:de:8f:15:c7:4a:ec:87:af:e1:6b:3a:ca:8c:18:70:5f: d5:fa:cd:c7 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEExNTYxRkREMjYzMEVB RDZEMjMxN0IyQkZCRDE2N0MxMEEyRjM3N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDupU2OuTBs+70ZUqLKLjFJgD/Lk4UGXD9d0lCMCauOUB85pZro t5doxUdLdqPWyYoL3rp9MVhQJFjby+fahy5UD56zyRrpsv+HKHA+yEsnviN0wEtc PpWcqppdYqyCua3JnvibjnepK3siBus1G2GKgr29fSE+afKf8Cb3HWhd7Cl5XPun Hs4KElRVdlXpl2xBoNT9eXt712aoltQOxwCP7/cUKdeAaZ2K5j62R4c6stVqHUfO elo54bNgXFq8BYG0EwMrrnU4Smz+RdScOWqF8ZipfEReq/JVhaV4/wnl5btVRt39 E85jypB9gyaDmSkkaJiwvDDrbTZXsWuvkNx9AgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQUoVYf3SYw6tbSMXsr+9FnwQovN30wHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL29WWWYz U1l3NnRiU01Yc3ItOUZud1Fvdk4zMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAZuMoAwDQYJKoZIhvcNAQELBQADggEBAHJvICmO3ge2CuQWMYcz Uu7bZ5M99yuHCgbfQfKWbc1GlRv4CFdJgoxGm6/aasJObh9XtP2kJOsKfJoQ4spu TDVdUXtcoKjvMpLTC1yUJhdhNGwI0vqY5squXHNmv6qdb0NNCu9fkbv7ZA6LLYHn k1t+P7SvfOdjRsucsSF/fTj0lYYriRlVds3mCH5tISVTK8pUGVw1dDa0OCGxASYT rR/PCLmff4HqyWwgPEiBks0Cg8YCQHzrq8e0AXmB4ysGBJVos1kjfm2yT1zgwNqg +eJpH+lSFVbB4L4CZGJUr0QZFpEmYK+Z26H8LM9v3o8Vx0rsh6/hazrKjBhwX9X6 zcc= -----END CERTIFICATE-----Generated at Fri Apr 18 23:10:41 2025 by rpki-client