$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/FmWNEPkXc_eaJpi8n2aLIeMVlos.roa File: FmWNEPkXc_eaJpi8n2aLIeMVlos.roa (raw, json) Hash identifier: iTdXr6XH4tcK+8AjfKvl3+qTeDRhDc048uxXZP4A6RU= Subject key identifier: 16:65:8D:10:F9:17:73:F7:9A:26:98:BC:9F:66:8B:21:E3:15:96:8B Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0CD8 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/FmWNEPkXc_eaJpi8n2aLIeMVlos.roa Signing time: Mon 26 Aug 2024 05:27:02 +0000 ROA not before: Mon 26 Aug 2024 05:27:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24158 IP address blocks: 117.19.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 26 05:27:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=16658D10F91773F79A2698BC9F668B21E315968B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:08:c6:02:d1:d0:81:60:dc:3f:35:0d:8c: f4:96:c4:c3:08:4d:3c:47:81:67:a4:8f:b2:95:b4: a1:68:59:9f:05:af:a5:a9:9f:4d:cb:6f:76:ed:f3: 71:a0:d7:ab:4e:f0:22:05:7a:21:5f:45:5a:11:3f: b2:31:97:a4:c8:be:e3:3d:d5:42:30:f8:20:fd:a7: 58:23:2a:01:ec:c6:7b:6a:d8:03:56:2e:d8:d3:2a: 20:40:8e:91:f7:82:a1:31:3d:7d:29:40:d4:ef:82: b7:0f:94:a2:9a:f5:db:46:95:e4:5d:7f:65:c0:74: ed:44:a7:f3:3f:d6:5b:17:9e:5a:73:76:ca:60:01: 13:4c:f1:ef:dc:7d:46:1a:90:37:09:2e:4d:31:b9: d7:24:9d:55:92:b0:ba:63:c9:e3:ee:aa:ec:87:35: 82:c4:94:59:88:0a:78:1a:71:25:40:be:27:60:ef: 3c:9d:d6:42:25:5d:43:af:ba:d7:1f:30:d3:bd:e1: 5b:d2:31:6b:ad:a0:f4:68:df:2a:aa:54:e7:81:3d: 70:13:c9:e0:5d:0c:7b:eb:96:ab:bf:22:96:e8:5c: 56:ea:9e:eb:6a:71:c6:24:16:13:94:36:54:4c:6d: 6e:e6:4a:fc:48:0e:b5:32:46:87:50:8d:43:b6:29: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:65:8D:10:F9:17:73:F7:9A:26:98:BC:9F:66:8B:21:E3:15:96:8B X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/FmWNEPkXc_eaJpi8n2aLIeMVlos.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 117.19.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7f:7b:90:3d:6f:3a:7e:fa:ae:a4:95:b0:95:63:8e:74:25:3d: 2a:fc:eb:3c:47:b8:25:98:21:50:09:54:98:df:ca:04:a6:70: a8:7d:c2:4c:50:50:36:66:2a:59:b9:9d:cb:bb:67:10:03:9d: 00:e6:1d:b2:d2:da:7c:66:80:22:a6:6b:50:2e:13:48:b4:f1: f9:b8:34:62:be:66:9b:ff:cc:6a:06:3b:79:77:b8:78:a4:e6: 3f:28:24:db:c5:a4:f6:57:b5:d2:f8:f1:6b:92:04:c9:65:53: 0c:af:2a:07:61:7c:07:cd:25:19:64:ab:c1:9e:d1:26:33:f0: c9:6e:00:1c:50:2d:f1:68:00:c1:99:6d:47:a6:90:81:6f:6f: 91:6b:ea:79:de:43:99:e4:c9:dc:5a:f4:89:37:c0:b9:7f:5a: d2:24:f1:f7:a5:18:92:e0:ae:06:8d:1b:c8:98:43:9f:57:95: bc:bb:97:50:56:6d:dd:c9:11:fa:8a:74:7a:57:be:13:0c:8a: db:06:55:f0:a8:6d:42:bd:30:fb:eb:33:db:d7:86:2e:fb:73: 9c:31:d5:9d:0a:ff:13:59:95:72:22:f1:c6:88:02:f4:ed:a4: 90:e1:3d:07:7b:e5:6e:63:f5:9e:a4:97:aa:ab:57:12:6c:34: 5b:51:83:22 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNDA4MjYw NTI3MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2NjU4RDEwRjkxNzcz Rjc5QTI2OThCQzlGNjY4QjIxRTMxNTk2OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4XgjGAtHQgWDcPzUNjPSWxMMITTxHgWekj7KVtKFoWZ8Fr6Wp n03Lb3bt83Gg16tO8CIFeiFfRVoRP7Ixl6TIvuM91UIw+CD9p1gjKgHsxntq2ANW LtjTKiBAjpH3gqExPX0pQNTvgrcPlKKa9dtGleRdf2XAdO1Ep/M/1lsXnlpzdspg ARNM8e/cfUYakDcJLk0xudcknVWSsLpjyePuquyHNYLElFmICngacSVAvidg7zyd 1kIlXUOvutcfMNO94VvSMWutoPRo3yqqVOeBPXATyeBdDHvrlqu/IpboXFbqnutq ccYkFhOUNlRMbW7mSvxIDrUyRodQjUO2KTebAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUFmWNEPkXc/eaJpi8n2aLIeMVloswHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL0ZtV05F UGtYY19lYUpwaThuMmFMSWVNVmxvcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzAN MAsEAgABMAUDAwB1EzANBgkqhkiG9w0BAQsFAAOCAQEAf3uQPW86fvqupJWwlWOO dCU9KvzrPEe4JZghUAlUmN/KBKZwqH3CTFBQNmYqWbmdy7tnEAOdAOYdstLafGaA IqZrUC4TSLTx+bg0Yr5mm//MagY7eXe4eKTmPygk28Wk9le10vjxa5IEyWVTDK8q B2F8B80lGWSrwZ7RJjPwyW4AHFAt8WgAwZltR6aQgW9vkWvqed5DmeTJ3Fr0iTfA uX9a0iTx96UYkuCuBo0byJhDn1eVvLuXUFZt3ckR+op0ele+EwyK2wZV8KhtQr0w ++sz29eGLvtznDHVnQr/E1mVciLxxogC9O2kkOE9B3vlbmP1nqSXqqtXEmw0W1GD Ig== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:15 2024 by rpki-client on console-ams.rpki-client.org