$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tsDZLm-_FilFIZdsEU9j793pm9g.roa File: tsDZLm-_FilFIZdsEU9j793pm9g.roa (raw, json) Hash identifier: 33dgUCEScIEHc+6B+vwT7ea1bXq68kXkGLmYN5PnT3A= Subject key identifier: B6:C0:D9:2E:6F:BF:16:29:45:21:97:6C:11:4F:63:EF:DD:E9:9B:D8 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D70 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tsDZLm-_FilFIZdsEU9j793pm9g.roa Signing time: Mon 10 Feb 2025 13:58:42 +0000 ROA not before: Mon 10 Feb 2025 13:58:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24158 IP address blocks: 123.99.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 19:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Feb 10 13:58:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B6C0D92E6FBF16294521976C114F63EFDDE99BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:a8:81:8b:7a:d8:98:50:f9:c2:4c:21:68: 8c:41:3e:95:e1:93:b2:f7:65:4e:6e:31:63:3c:72: 7c:a5:d7:ae:20:ec:10:ee:9d:51:66:d7:43:c8:78: 21:08:3e:c4:b0:65:98:96:a4:f1:3d:f4:65:bb:66: d9:8d:0c:6e:6d:cc:7c:c8:c6:91:98:91:b1:1f:80: db:cf:c3:d3:37:97:1f:4d:df:4a:b1:a9:ee:92:37: 7f:7c:fd:70:c1:7d:90:81:96:d2:b7:fb:46:4b:45: fb:26:6f:3e:40:de:33:7b:95:3f:75:31:43:84:7b: bb:cb:54:60:8b:ce:2d:56:73:26:e4:d2:38:1b:ac: ef:82:13:6b:cd:81:99:c4:6b:4c:81:79:dc:34:e3: f1:aa:1d:a4:2b:4a:b7:e5:be:59:24:cd:cf:e7:f5: 57:aa:c2:09:1e:a6:03:d7:9f:79:87:76:90:8b:14: c2:b6:a3:4c:f8:d2:da:a5:10:08:1b:bb:d6:85:84: cd:2b:b7:78:77:9a:66:a0:8b:af:a3:30:04:c4:1b: 29:a4:87:be:0d:3c:dd:f9:9f:18:fc:d9:a2:0c:58: a6:2a:ab:77:09:a4:c2:88:4c:bc:51:46:7a:b9:73: 6b:6d:5f:73:45:67:7e:71:a5:bd:24:06:bf:50:08: 50:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C0:D9:2E:6F:BF:16:29:45:21:97:6C:11:4F:63:EF:DD:E9:9B:D8 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tsDZLm-_FilFIZdsEU9j793pm9g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.99.0.0/19 Signature Algorithm: sha256WithRSAEncryption 0e:d3:43:c8:b8:83:23:ce:47:8e:57:9c:7f:c8:2d:12:fe:af: 46:c6:8a:9f:29:63:4b:94:82:73:a7:51:d6:b7:8c:0f:60:2b: 15:c6:5d:2b:1b:12:50:ef:00:b9:05:71:f9:d5:ee:ad:4d:4b: 1a:9e:d2:59:8c:0b:19:1a:f3:b5:2d:bb:36:02:9d:70:80:b4: 5f:89:84:0e:c4:0b:7d:c3:1c:45:33:40:1a:31:f7:6d:4d:a8: 3c:5b:74:cb:54:47:7f:98:c6:d9:2f:48:77:e4:5e:71:84:5c: fe:99:7b:23:da:a1:93:50:d9:ac:f2:f8:c5:26:09:a7:fd:a0: 92:db:b5:56:e9:df:b9:38:c3:e9:11:0b:09:f2:9b:c2:ba:9e: d4:f8:8c:f9:29:c2:71:d2:2f:cf:40:e9:aa:e9:1d:83:df:59: 30:9b:cb:1f:15:51:8b:d1:b5:c1:d9:d3:80:7b:ff:30:6f:bb: 2b:aa:32:b8:4c:a8:19:e0:07:62:e4:1d:28:75:df:62:cf:9e: 7f:50:47:c5:0d:f5:d0:41:8e:fd:a6:3f:cd:f8:64:de:9b:ff: 5b:0b:90:9c:db:e1:da:e1:7c:e0:67:ec:0f:db:aa:04:ba:50: 27:b4:f9:2e:a4:a1:69:ae:ac:f5:aa:b8:08:5a:12:5c:0f:e3: ac:51:b7:7a -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTAyMTAx MzU4NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI2QzBEOTJFNkZCRjE2 Mjk0NTIxOTc2QzExNEY2M0VGRERFOTlCRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDf6iBi3rYmFD5wkwhaIxBPpXhk7L3ZU5uMWM8cnyl164g7BDu nVFm10PIeCEIPsSwZZiWpPE99GW7ZtmNDG5tzHzIxpGYkbEfgNvPw9M3lx9N30qx qe6SN398/XDBfZCBltK3+0ZLRfsmbz5A3jN7lT91MUOEe7vLVGCLzi1Wcybk0jgb rO+CE2vNgZnEa0yBedw04/GqHaQrSrflvlkkzc/n9VeqwgkepgPXn3mHdpCLFMK2 o0z40tqlEAgbu9aFhM0rt3h3mmagi6+jMATEGymkh74NPN35nxj82aIMWKYqq3cJ pMKITLxRRnq5c2ttX3NFZ35xpb0kBr9QCFDPAgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQUtsDZLm+/FilFIZdsEU9j793pm9gwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL3RzRFpM bS1fRmlsRklaZHNFVTlqNzkzcG05Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAV7YwAwDQYJKoZIhvcNAQELBQADggEBAA7TQ8i4gyPOR45XnH/I LRL+r0bGip8pY0uUgnOnUda3jA9gKxXGXSsbElDvALkFcfnV7q1NSxqe0lmMCxka 87UtuzYCnXCAtF+JhA7EC33DHEUzQBox921NqDxbdMtUR3+YxtkvSHfkXnGEXP6Z eyPaoZNQ2azy+MUmCaf9oJLbtVbp37k4w+kRCwnym8K6ntT4jPkpwnHSL89A6arp HYPfWTCbyx8VUYvRtcHZ04B7/zBvuyuqMrhMqBngB2LkHSh132LPnn9QR8UN9dBB jv2mP834ZN6b/1sLkJzb4drhfOBn7A/bqgS6UCe0+S6koWmurPWquAhaElwP46xR t3o= -----END CERTIFICATE-----Generated at Wed Apr 16 18:12:11 2025 by rpki-client