
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/DfUyHdZjjCZNikalitillbRExvY.roa
File: DfUyHdZjjCZNikalitillbRExvY.roa (raw, json)
Hash identifier: 0OtlcCA/c6MRDxtJW1CTLuevfR5xp4o1r7QgZ7DYk9A=
Subject key identifier: 0D:F5:32:1D:D6:63:8C:26:4D:8A:46:A5:8A:D8:A5:95:B4:44:C6:F6
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0E7B
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/DfUyHdZjjCZNikalitillbRExvY.roa
Signing time: Fri 22 Aug 2025 08:50:18 +0000
ROA not before: Fri 22 Aug 2025 08:50:18 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24157
IP address blocks: 103.239.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 12:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3707 (0xe7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Aug 22 08:50:18 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=0DF5321DD6638C264D8A46A58AD8A595B444C6F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:d9:67:b3:44:61:93:bc:29:22:26:48:0b:
5d:60:11:64:47:aa:f5:1b:6c:d8:0e:9e:19:49:15:
b8:35:28:36:c2:46:43:11:c7:39:3b:44:ce:6e:c6:
bd:18:51:46:21:93:7a:3a:91:9b:ac:e9:01:db:78:
34:85:0c:fe:f6:38:fd:e5:0a:18:e5:0a:43:84:09:
e2:8c:11:b0:d7:f3:f2:6c:a1:fb:bf:fb:45:03:6c:
f0:6e:60:22:af:22:0f:a7:c9:9d:a5:56:3f:07:a6:
31:29:88:05:e0:20:56:a2:76:77:80:77:27:9d:d5:
65:87:32:49:ca:9f:74:3d:86:98:8d:b5:d1:a1:51:
f1:1b:0c:e4:5a:86:b3:db:94:d4:10:17:8c:78:64:
87:13:22:f8:49:f0:0d:8b:3c:e1:a5:57:62:b3:c9:
b6:d3:05:93:7d:5e:6d:4b:c9:12:37:03:47:26:68:
94:f8:e9:4b:8a:b0:3d:1b:d9:48:c6:a6:58:58:2f:
e3:ab:26:59:dd:f5:c0:ea:39:5c:9f:a8:77:61:ae:
a7:87:a2:56:91:5c:88:31:a0:81:d9:00:3f:2a:ba:
58:2c:5e:8b:05:ea:c2:94:42:f8:d2:c0:44:51:89:
c6:18:68:e4:fe:88:53:b2:04:43:0e:7e:41:06:ab:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F5:32:1D:D6:63:8C:26:4D:8A:46:A5:8A:D8:A5:95:B4:44:C6:F6
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/DfUyHdZjjCZNikalitillbRExvY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
50:fc:37:6c:65:ea:83:d5:d6:f4:95:4a:67:e5:e7:b8:34:f2:
ea:54:52:00:ae:40:39:10:f7:06:66:3e:8d:57:90:e9:f4:16:
59:6c:b7:0d:f6:4b:f6:2f:c7:f5:d2:4d:77:8c:cc:ab:0b:2c:
3b:c4:ba:c4:c8:49:65:45:8f:1f:54:c1:42:cd:17:54:aa:4f:
e0:0b:7e:61:34:a9:5f:ba:ae:0e:55:72:d7:78:37:22:e2:93:
ac:4a:7c:bf:7b:2c:2a:bf:ef:d4:4c:fe:e7:e5:a6:fe:c8:a0:
d8:5b:0c:86:b4:c7:9c:7c:a6:c0:4d:06:c1:64:23:a8:11:71:
51:6f:fc:8f:bc:27:c1:e0:dd:66:96:f1:ea:8c:23:54:7a:ea:
17:2a:d2:50:13:15:05:84:92:34:ef:a2:f9:4f:6b:6e:43:88:
2b:70:b1:89:69:a6:7a:63:04:fe:40:d2:76:62:ea:88:5f:79:
3c:c4:1d:09:56:09:b9:bc:28:f0:41:25:91:69:3a:1d:3f:2f:
2c:9c:37:76:49:2d:e4:7a:36:28:b8:58:6f:1e:00:a7:e0:9a:
a0:4e:91:07:88:59:9b:0f:4a:3a:f9:7b:01:28:b3:9b:c8:43:
ed:4a:dc:f9:c6:9b:33:5f:7b:83:63:f3:9d:c8:fc:74:31:b5:
a4:ac:21:8c
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgICDnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA4MjIw
ODUwMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBERjUzMjFERDY2MzhD
MjY0RDhBNDZBNThBRDhBNTk1QjQ0NEM2RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYWtlns0Rhk7wpIiZIC11gEWRHqvUbbNgOnhlJFbg1KDbCRkMR
xzk7RM5uxr0YUUYhk3o6kZus6QHbeDSFDP72OP3lChjlCkOECeKMEbDX8/Jsofu/
+0UDbPBuYCKvIg+nyZ2lVj8HpjEpiAXgIFaidneAdyed1WWHMknKn3Q9hpiNtdGh
UfEbDORahrPblNQQF4x4ZIcTIvhJ8A2LPOGlV2KzybbTBZN9Xm1LyRI3A0cmaJT4
6UuKsD0b2UjGplhYL+OrJlnd9cDqOVyfqHdhrqeHolaRXIgxoIHZAD8qulgsXosF
6sKUQvjSwERRicYYaOT+iFOyBEMOfkEGqwXHAgMBAAGjggH6MIIB9jAdBgNVHQ4E
FgQUDfUyHdZjjCZNikalitillbRExvYwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL0RmVXlI
ZFpqakNaTmlrYWxpdGlsbGJSRXh2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAJn7zwwDQYJKoZIhvcNAQELBQADggEBAFD8N2xl6oPV1vSVSmfl
57g08upUUgCuQDkQ9wZmPo1XkOn0Fllstw32S/Yvx/XSTXeMzKsLLDvEusTISWVF
jx9UwULNF1SqT+ALfmE0qV+6rg5Vctd4NyLik6xKfL97LCq/79RM/uflpv7IoNhb
DIa0x5x8psBNBsFkI6gRcVFv/I+8J8Hg3WaW8eqMI1R66hcq0lATFQWEkjTvovlP
a25DiCtwsYlppnpjBP5A0nZi6ohfeTzEHQlWCbm8KPBBJZFpOh0/LyycN3ZJLeR6
Nii4WG8eAKfgmqBOkQeIWZsPSjr5ewEos5vIQ+1K3PnGmzNfe4Nj853I/HQxtaSs
IYw=
-----END CERTIFICATE-----
Generated at Sat Oct 25 11:28:24 2025 by rpki-client