$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tGiYgXZ9UJKXxgcWpty7h8WTTsQ.roa File: tGiYgXZ9UJKXxgcWpty7h8WTTsQ.roa (raw, json) Hash identifier: AotJSyq7KH6uLWjHzpDsVMYx5uY7+QDy2140TrlWqfM= Subject key identifier: B4:68:98:81:76:7D:50:92:97:C6:07:16:A6:DC:BB:87:C5:93:4E:C4 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D69 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tGiYgXZ9UJKXxgcWpty7h8WTTsQ.roa Signing time: Mon 10 Feb 2025 13:58:40 +0000 ROA not before: Mon 10 Feb 2025 13:58:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24157 IP address blocks: 43.255.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3433 (0xd69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B4689881767D509297C60716A6DCBB87C5934EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:13:42:aa:5c:10:84:66:e5:25:d3:42:90:26: 1f:ff:29:a4:09:f0:3c:21:32:51:f2:0e:4b:86:f9: 90:27:31:14:48:ee:fd:25:10:7b:89:59:16:84:a8: 4c:a1:38:25:93:c7:46:c3:2e:7a:9d:47:19:61:37: a7:e0:00:fd:8d:67:55:7a:2b:6c:54:4d:a9:be:bc: 1f:5f:63:ca:3e:92:14:66:64:68:e4:f8:3d:4a:1c: f5:38:5b:b6:11:4e:d9:16:4e:f7:70:bf:16:c5:29: a5:29:69:9f:39:a3:19:13:25:f8:4a:6e:47:d4:d1: 75:81:3a:78:00:6c:21:bf:42:a3:ca:fa:e0:26:ae: 92:89:dc:5c:a5:e0:50:71:1c:a7:a5:21:5a:a1:3a: b8:cc:c2:27:65:e7:72:94:2f:4f:f0:80:a9:28:ad: 4f:a9:e0:d1:57:75:bb:db:3c:24:a5:16:12:44:49: cf:5b:cb:ec:78:df:6a:46:3e:42:a4:7a:b6:01:ac: 3b:e4:41:d4:7c:2d:04:32:68:2e:ba:4d:41:5a:a3: c7:86:9d:7a:5f:c2:57:30:dd:e4:b9:13:f6:06:e2: 71:aa:eb:4d:02:dd:70:d9:f2:5e:66:fb:76:88:c3: 81:d7:04:a6:a6:45:13:f7:e7:e0:8e:e7:6f:fd:1b: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:68:98:81:76:7D:50:92:97:C6:07:16:A6:DC:BB:87:C5:93:4E:C4 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tGiYgXZ9UJKXxgcWpty7h8WTTsQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.255.88.0/22 Signature Algorithm: sha256WithRSAEncryption d0:03:b3:cd:3e:e5:1d:b7:49:41:a8:31:aa:6f:10:88:6b:2e: f0:38:1a:a3:d6:0d:19:a3:7c:a1:cc:e8:ea:6e:81:8a:9b:64: f3:22:5e:f4:74:ed:e3:b1:96:4e:f3:ec:49:5d:ec:a7:a1:a7: 38:35:fb:e9:d0:57:b5:45:02:54:89:51:59:86:67:d1:d2:4a: 4a:d7:73:be:5a:43:ab:a9:4c:25:f2:11:d6:4e:a9:39:c8:7e: 35:71:e3:62:ba:b5:71:0e:fa:43:cd:de:4e:35:3f:55:4a:c0: 7c:5f:e6:57:d1:ac:9f:6a:1a:03:af:8b:4e:fa:67:a3:1e:1d: 12:5d:69:5a:4a:01:c7:85:0d:e3:97:fb:3f:12:f0:dd:6f:f9: b1:9e:15:c7:d6:2e:e4:24:68:da:01:f3:3b:cc:30:a9:5b:61: 5c:b8:d4:d6:d5:5a:4f:71:cc:e6:5f:b4:3b:25:25:e5:3b:7b: 69:aa:5a:04:a4:48:28:92:f9:d1:df:93:37:e8:ce:28:e3:48: 3e:62:36:d2:c2:35:57:a5:b1:22:02:e0:23:91:df:fe:ab:bd: 74:8c:9e:b6:2c:93:82:18:a7:76:03:16:91:29:98:c2:62:dd: 8b:1d:2c:b6:6f:ec:e7:13:a8:57:2e:4d:53:0f:71:30:09:c8: 45:e1:47:04 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI0Njg5ODgxNzY3RDUw OTI5N0M2MDcxNkE2RENCQjg3QzU5MzRFQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfE0KqXBCEZuUl00KQJh//KaQJ8DwhMlHyDkuG+ZAnMRRI7v0l EHuJWRaEqEyhOCWTx0bDLnqdRxlhN6fgAP2NZ1V6K2xUTam+vB9fY8o+khRmZGjk +D1KHPU4W7YRTtkWTvdwvxbFKaUpaZ85oxkTJfhKbkfU0XWBOngAbCG/QqPK+uAm rpKJ3Fyl4FBxHKelIVqhOrjMwidl53KUL0/wgKkorU+p4NFXdbvbPCSlFhJESc9b y+x432pGPkKkerYBrDvkQdR8LQQyaC66TUFao8eGnXpfwlcw3eS5E/YG4nGq600C 3XDZ8l5m+3aIw4HXBKamRRP35+CO52/9G6gNAgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQUtGiYgXZ9UJKXxgcWpty7h8WTTsQwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL3RHaVln WFo5VUpLWHhnY1dwdHk3aDhXVFRzUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAIr/1gwDQYJKoZIhvcNAQELBQADggEBANADs80+5R23SUGoMapv EIhrLvA4GqPWDRmjfKHM6OpugYqbZPMiXvR07eOxlk7z7Eld7Kehpzg1++nQV7VF AlSJUVmGZ9HSSkrXc75aQ6upTCXyEdZOqTnIfjVx42K6tXEO+kPN3k41P1VKwHxf 5lfRrJ9qGgOvi076Z6MeHRJdaVpKAceFDeOX+z8S8N1v+bGeFcfWLuQkaNoB8zvM MKlbYVy41NbVWk9xzOZftDslJeU7e2mqWgSkSCiS+dHfkzfozijjSD5iNtLCNVel sSIC4COR3/6rvXSMnrYsk4IYp3YDFpEpmMJi3YsdLLZv7OcTqFcuTVMPcTAJyEXh RwQ= -----END CERTIFICATE-----Generated at Wed Apr 23 00:36:32 2025 by rpki-client