$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/N2vBFlZJu2yyc4L2EMwLtCN4wkE.roa File: N2vBFlZJu2yyc4L2EMwLtCN4wkE.roa (raw, json) Hash identifier: D9846Ps/3qHt8UtTs6axKoOu73r/qUr/c6tbvQ2tDaA= Subject key identifier: 37:6B:C1:16:56:49:BB:6C:B2:73:82:F6:10:CC:0B:B4:23:78:C2:41 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0E75 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/N2vBFlZJu2yyc4L2EMwLtCN4wkE.roa Signing time: Fri 22 Aug 2025 08:50:17 +0000 ROA not before: Fri 22 Aug 2025 08:50:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24158 IP address blocks: 101.8.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 12:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3701 (0xe75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 22 08:50:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=376BC1165649BB6CB27382F610CC0BB42378C241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:77:2a:ad:aa:54:e8:f9:02:aa:50:24:79: 53:30:75:51:e2:3a:86:1b:d3:24:18:db:67:ba:19: 8a:f4:14:28:ec:b4:3c:79:77:e7:59:94:1a:8f:b9: e4:b2:4f:37:b2:35:05:ef:74:73:5c:ce:46:8b:5d: 5a:8b:fb:b3:25:4f:02:c4:03:15:96:0e:96:1f:c8: a2:fc:56:21:41:62:b6:50:29:08:be:52:28:97:1d: fe:00:39:fc:95:34:35:eb:f5:ec:7f:96:f8:b7:79: 41:0f:33:4e:d0:ce:ef:64:b2:36:f3:a8:59:f5:70: 96:bb:c2:7b:e2:8d:dc:0e:ed:20:62:ee:00:c0:f5: 63:84:1f:68:a9:62:7a:87:14:69:ee:56:e3:41:74: ba:16:5a:16:10:6a:0b:b4:b4:ac:2c:fc:c3:59:1d: a9:a3:23:e8:62:46:ba:35:91:89:4c:fd:6f:4a:62: 84:4f:ff:24:21:e0:2f:43:0b:2d:4a:3d:1a:6a:ca: 76:6c:79:6e:ca:96:19:ee:76:40:1a:9b:82:1a:d3: 69:e3:5d:b7:af:93:0f:3c:72:2a:d5:71:ec:d5:4c: 23:2d:d7:41:3f:f0:9b:fa:c7:29:5a:69:d6:71:09: ba:c8:77:b5:af:53:c5:b7:d0:8c:c1:48:87:cf:63: b2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6B:C1:16:56:49:BB:6C:B2:73:82:F6:10:CC:0B:B4:23:78:C2:41 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/N2vBFlZJu2yyc4L2EMwLtCN4wkE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.8.0.0/13 Signature Algorithm: sha256WithRSAEncryption 43:5c:f2:2d:7a:08:c4:83:df:9b:82:c8:74:2f:11:fa:45:be: ee:1c:de:fe:19:1d:d3:dd:e7:24:e7:75:65:5d:9b:63:f6:12: 2b:11:35:71:cf:1a:3a:bd:41:98:8b:62:80:70:74:23:87:8d: 0c:d9:87:37:f8:4d:65:a0:26:d0:0e:fe:42:45:6a:17:79:c1: 49:d1:04:8e:d9:81:5e:9e:0e:92:a2:df:01:b9:d5:9b:e6:7d: ef:fe:93:14:10:85:aa:e1:90:cc:39:0a:b1:ad:4b:34:24:b5: 2f:d8:e2:a9:a5:bb:63:0b:2b:54:85:ed:fe:94:93:f6:11:89: 07:10:2b:6e:6f:41:3f:7a:e9:9e:f6:5a:23:86:3e:b0:d1:d5: 91:9e:06:49:e7:0f:e9:ab:68:36:3c:c1:da:70:b8:74:b0:35: ef:16:ba:fa:18:ca:d8:fe:75:96:94:f3:3c:fe:44:ed:58:a5: 9d:4f:93:38:1e:75:46:cc:33:86:7d:96:5b:fa:ef:eb:ff:0b: 1c:f3:65:37:11:a5:72:c7:77:a1:c8:08:2b:b3:be:66:ef:f8: 2b:4c:0d:72:10:03:63:0b:10:47:fc:e2:08:2a:0c:6e:b5:0e: d4:60:f2:8b:e6:ce:de:7e:e3:68:e2:e4:1d:22:aa:7f:d2:27: 2c:d0:80:25 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICDnUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA4MjIw ODUwMTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM3NkJDMTE2NTY0OUJC NkNCMjczODJGNjEwQ0MwQkI0MjM3OEMyNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2cXcqrapU6PkCqlAkeVMwdVHiOoYb0yQY22e6GYr0FCjstDx5 d+dZlBqPueSyTzeyNQXvdHNczkaLXVqL+7MlTwLEAxWWDpYfyKL8ViFBYrZQKQi+ UiiXHf4AOfyVNDXr9ex/lvi3eUEPM07Qzu9ksjbzqFn1cJa7wnvijdwO7SBi7gDA 9WOEH2ipYnqHFGnuVuNBdLoWWhYQagu0tKws/MNZHamjI+hiRro1kYlM/W9KYoRP /yQh4C9DCy1KPRpqynZseW7KlhnudkAam4Ia02njXbevkw88cirVcezVTCMt10E/ 8Jv6xylaadZxCbrId7WvU8W30IzBSIfPY7JbAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUN2vBFlZJu2yyc4L2EMwLtCN4wkEwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL04ydkJG bFpKdTJ5eWM0TDJFTXdMdENONHdrRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzAN MAsEAgABMAUDAwNlCDANBgkqhkiG9w0BAQsFAAOCAQEAQ1zyLXoIxIPfm4LIdC8R +kW+7hze/hkd093nJOd1ZV2bY/YSKxE1cc8aOr1BmItigHB0I4eNDNmHN/hNZaAm 0A7+QkVqF3nBSdEEjtmBXp4OkqLfAbnVm+Z97/6TFBCFquGQzDkKsa1LNCS1L9ji qaW7YwsrVIXt/pST9hGJBxArbm9BP3rpnvZaI4Y+sNHVkZ4GSecP6atoNjzB2nC4 dLA17xa6+hjK2P51lpTzPP5E7VilnU+TOB51Rswzhn2WW/rv6/8LHPNlNxGlcsd3 ocgIK7O+Zu/4K0wNchADYwsQR/ziCCoMbrUO1GDyi+bO3n7jaOLkHSKqf9InLNCA JQ== -----END CERTIFICATE-----Generated at Fri Oct 24 11:42:25 2025 by rpki-client