$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/CerbrUz9DQlhB2mUg7P7rP7N_oA.roa File: CerbrUz9DQlhB2mUg7P7rP7N_oA.roa (raw, json) Hash identifier: XLUyWCvONjB94AnwVgqN/gjvEkz02Ok3Yq0QrSH1pUE= Subject key identifier: 09:EA:DB:AD:4C:FD:0D:09:61:07:69:94:83:B3:FB:AC:FE:CD:FE:80 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0CDF Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/CerbrUz9DQlhB2mUg7P7rP7N_oA.roa Signing time: Mon 26 Aug 2024 05:27:04 +0000 ROA not before: Mon 26 Aug 2024 05:27:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24158 IP address blocks: 2402:7500:800::/40 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 26 05:27:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=09EADBAD4CFD0D096107699483B3FBACFECDFE80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:fa:a9:47:70:32:43:13:53:5b:cd:c6:cc: 9a:7e:84:56:15:df:ba:4e:00:fd:27:fd:6a:15:af: 9e:63:fa:a5:ad:62:3b:26:21:b0:e4:b0:cb:d0:42: 9e:4f:e3:10:25:8c:92:fd:ef:57:8c:07:84:42:58: 9f:e4:75:fe:37:07:0d:0d:cb:25:94:fa:ab:d7:91: cf:8f:16:11:0d:b7:5c:14:d7:ac:24:f2:8e:68:3e: 4a:60:2d:98:26:01:5a:bd:b0:2a:67:9f:f8:e2:ad: d9:e4:b9:0b:2d:66:c4:8d:09:0f:2e:f3:0a:b1:0b: 45:06:d2:e4:8c:3f:a4:63:89:79:c5:c2:81:2b:67: 64:33:fe:bb:9f:95:4d:05:1a:f8:51:39:87:87:a5: 61:1e:29:91:1a:cf:b0:72:f5:7f:64:f4:e1:aa:a1: 0e:52:16:78:63:03:05:e3:60:73:bb:f4:86:01:39: ab:16:1e:64:78:64:d1:61:ab:c5:aa:1a:6c:22:fb: e6:eb:35:0d:2a:4d:13:db:af:d1:3a:0c:5e:b1:1c: a0:8b:9d:2f:28:4d:2c:43:6b:11:f5:fa:2f:d6:22: ff:fa:2a:8a:4b:75:94:f8:e7:ce:84:03:5f:58:a3: 1d:ba:96:ff:d4:4e:89:5a:ff:18:5b:83:cc:9a:e2: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EA:DB:AD:4C:FD:0D:09:61:07:69:94:83:B3:FB:AC:FE:CD:FE:80 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/CerbrUz9DQlhB2mUg7P7rP7N_oA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7500:800::/40 Signature Algorithm: sha256WithRSAEncryption 17:80:65:1b:60:26:0f:07:35:01:72:ba:3d:02:3f:af:af:7d: 89:3e:05:0b:e3:0e:b9:5d:dd:9a:2b:d0:fb:8b:ce:71:76:f7: 3c:39:56:2f:52:34:04:b9:9c:f9:31:7c:51:6f:53:b2:f9:d4: 87:e8:b0:f0:7d:89:3b:fa:ae:ea:10:6a:59:b6:ab:7a:38:8d: d6:f5:72:b7:9c:05:d4:b5:75:69:65:26:03:03:aa:a3:f1:46: 20:dd:6c:e4:a7:3a:1e:6a:24:30:12:79:10:e4:6a:ae:56:db: a0:77:03:b9:ee:ab:f0:8b:35:20:50:36:0a:04:aa:97:3a:bb: 19:b6:ef:6d:36:f4:c6:8b:c5:e7:86:dc:e1:f3:42:f8:ed:e9: e8:4c:bd:38:d3:e7:af:90:82:2c:f9:6a:3a:7c:67:47:f0:18: 6b:fc:8f:06:4b:3b:ac:c4:31:d9:14:b2:f9:fb:5e:d1:9a:f9: 74:37:b9:0f:f2:c4:db:e6:60:11:43:f3:55:76:a3:c7:7c:ba: 2f:64:a0:0f:8d:36:26:c3:5a:6d:41:91:ba:b9:ae:07:ca:83: cf:77:8d:99:cc:4d:83:27:e1:e6:2a:f3:0f:36:59:9a:17:07: 78:5c:c6:0e:c0:cb:06:4d:88:e4:9d:0e:f6:37:6b:a8:92:94: 1b:53:d0:03 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNDA4MjYw NTI3MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5RUFEQkFENENGRDBE MDk2MTA3Njk5NDgzQjNGQkFDRkVDREZFODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJMvqpR3AyQxNTW83GzJp+hFYV37pOAP0n/WoVr55j+qWtYjsm IbDksMvQQp5P4xAljJL971eMB4RCWJ/kdf43Bw0NyyWU+qvXkc+PFhENt1wU16wk 8o5oPkpgLZgmAVq9sCpnn/jirdnkuQstZsSNCQ8u8wqxC0UG0uSMP6RjiXnFwoEr Z2Qz/ruflU0FGvhROYeHpWEeKZEaz7By9X9k9OGqoQ5SFnhjAwXjYHO79IYBOasW HmR4ZNFhq8WqGmwi++brNQ0qTRPbr9E6DF6xHKCLnS8oTSxDaxH1+i/WIv/6KopL dZT4586EA19Yox26lv/UTola/xhbg8ya4rpbAgMBAAGjggH8MIIB+DAdBgNVHQ4E FgQUCerbrUz9DQlhB2mUg7P7rP7N/oAwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL0NlcmJy VXo5RFFsaEIybVVnN1A3clA3Tl9vQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQ MA4EAgACMAgDBgAkAnUACDANBgkqhkiG9w0BAQsFAAOCAQEAF4BlG2AmDwc1AXK6 PQI/r699iT4FC+MOuV3dmivQ+4vOcXb3PDlWL1I0BLmc+TF8UW9TsvnUh+iw8H2J O/qu6hBqWbarejiN1vVyt5wF1LV1aWUmAwOqo/FGIN1s5Kc6HmokMBJ5EORqrlbb oHcDue6r8Is1IFA2CgSqlzq7GbbvbTb0xovF54bc4fNC+O3p6Ey9ONPnr5CCLPlq OnxnR/AYa/yPBks7rMQx2RSy+fte0Zr5dDe5D/LE2+ZgEUPzVXajx3y6L2SgD402 JsNabUGRurmuB8qDz3eNmcxNgyfh5irzDzZZmhcHeFzGDsDLBk2I5J0O9jdrqJKU G1PQAw== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:15 2024 by rpki-client on console-ams.rpki-client.org