$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/O7GHeH3P2AFhngjzzHn2N6OEzkE.roa File: O7GHeH3P2AFhngjzzHn2N6OEzkE.roa (raw, json) Hash identifier: Hr1q9KUOiXIE6FvCU/EISlemtLPHM6emZdcMAUCjIQ4= Subject key identifier: 3B:B1:87:78:7D:CF:D8:01:61:9E:08:F3:CC:79:F6:37:A3:84:CE:41 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0C06 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/O7GHeH3P2AFhngjzzHn2N6OEzkE.roa Signing time: Fri 22 Dec 2023 07:56:20 +0000 ROA not before: Fri 22 Dec 2023 07:56:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24157 IP address blocks: 2401:7080::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3078 (0xc06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Dec 22 07:56:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3BB187787DCFD801619E08F3CC79F637A384CE41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:fe:66:fc:d7:50:18:3f:ff:dd:bc:53:2f: 9e:09:ec:80:f5:a6:7a:5b:c4:18:2d:c0:8e:c4:f7: 52:e4:26:d6:04:c9:19:2d:bc:ef:5b:d8:0d:30:41: 58:3f:4c:0c:51:28:7f:d0:71:5b:72:38:fd:41:bc: 48:02:2b:fd:8a:65:98:5f:bc:be:90:6b:3f:2d:9c: 76:77:fd:87:7c:d4:4f:c0:88:03:49:3f:9f:e1:d1: 2c:09:19:39:52:c0:9f:81:b1:c5:51:d2:55:4a:27: b0:e4:d7:64:69:7f:49:f5:9c:99:cf:40:26:1a:29: 0e:81:85:1c:db:7f:19:98:8c:10:12:b0:34:c2:5c: be:9e:4e:ed:87:e9:68:00:2c:46:92:ee:34:1f:1c: 67:ac:d8:b1:c5:d6:5f:c0:b7:21:34:c5:01:17:47: 7c:46:e8:78:5c:bf:f9:d2:65:c7:08:3f:6f:7d:5b: ab:75:ec:88:44:d3:73:31:15:c5:ae:aa:82:ef:c9: 31:a0:74:a7:05:94:31:74:94:cc:3f:a0:49:4a:12: 59:d3:15:04:52:be:b3:4c:25:98:e8:69:f8:6b:ce: 8b:02:2b:e5:ac:88:55:b5:7c:f4:06:58:aa:36:3c: bc:d1:9f:c7:58:fd:5a:b9:a0:ca:ec:5a:7d:7d:97: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B1:87:78:7D:CF:D8:01:61:9E:08:F3:CC:79:F6:37:A3:84:CE:41 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/O7GHeH3P2AFhngjzzHn2N6OEzkE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:7080::/32 Signature Algorithm: sha256WithRSAEncryption 5a:0e:8c:ef:48:ec:7e:59:d2:42:6e:4d:23:5d:3d:d5:a3:0b: f7:0c:75:1d:c2:76:0e:47:1e:4c:94:d5:8a:e1:36:ce:a8:b2: 7b:48:aa:eb:c2:84:3e:0d:83:ca:56:fc:18:b7:89:94:5d:0e: 15:26:29:e0:a3:14:86:fe:22:bc:22:d5:33:5a:85:d4:99:ba: 5a:c9:57:2c:70:91:e5:cb:fe:4a:1f:31:f5:64:e5:fd:6a:a2: 0a:ab:40:91:0a:c6:38:93:54:39:d1:64:8f:f6:52:2e:b8:7e: 12:63:46:94:9d:32:09:b9:56:f9:c1:dc:b3:7b:0b:65:c3:3d: 2d:7e:c2:be:82:2f:76:18:f9:f9:44:ec:75:9a:f1:c3:1e:2f: bf:44:38:6c:74:53:80:82:8d:8b:a1:28:be:03:5b:3f:24:0b: d8:c8:6a:d1:92:c3:4f:d2:54:d3:e5:c3:42:75:c9:da:d8:c2: 42:54:23:68:cb:3b:47:99:82:b5:04:6d:be:9c:47:bf:35:e6: b2:fd:62:8a:5c:c5:b8:20:fb:2c:c8:03:c4:18:6c:25:36:c9: a3:1f:9a:92:9a:89:57:22:d6:9d:d8:d1:9f:3d:90:59:a3:a9: d2:05:c5:69:bc:ab:ed:8b:a7:69:f1:b4:1f:ec:3c:7f:27:11: 0f:a7:ed:d7 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgICDAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMzEyMjIw NzU2MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNCQjE4Nzc4N0RDRkQ4 MDE2MTlFMDhGM0NDNzlGNjM3QTM4NENFNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQiP5m/NdQGD//3bxTL54J7ID1pnpbxBgtwI7E91LkJtYEyRkt vO9b2A0wQVg/TAxRKH/QcVtyOP1BvEgCK/2KZZhfvL6Qaz8tnHZ3/Yd81E/AiANJ P5/h0SwJGTlSwJ+BscVR0lVKJ7Dk12Rpf0n1nJnPQCYaKQ6BhRzbfxmYjBASsDTC XL6eTu2H6WgALEaS7jQfHGes2LHF1l/AtyE0xQEXR3xG6Hhcv/nSZccIP299W6t1 7IhE03MxFcWuqoLvyTGgdKcFlDF0lMw/oElKElnTFQRSvrNMJZjoafhrzosCK+Ws iFW1fPQGWKo2PLzRn8dY/Vq5oMrsWn19l5x9AgMBAAGjggH7MIIB9zAdBgNVHQ4E FgQUO7GHeH3P2AFhngjzzHn2N6OEzkEwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL083R0hl SDNQMkFGaG5nanp6SG4yTjZPRXprRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkAXCAMA0GCSqGSIb3DQEBCwUAA4IBAQBaDozvSOx+WdJCbk0j XT3Vowv3DHUdwnYORx5MlNWK4TbOqLJ7SKrrwoQ+DYPKVvwYt4mUXQ4VJingoxSG /iK8ItUzWoXUmbpayVcscJHly/5KHzH1ZOX9aqIKq0CRCsY4k1Q50WSP9lIuuH4S Y0aUnTIJuVb5wdyzewtlwz0tfsK+gi92GPn5ROx1mvHDHi+/RDhsdFOAgo2LoSi+ A1s/JAvYyGrRksNP0lTT5cNCdcna2MJCVCNoyztHmYK1BG2+nEe/Neay/WKKXMW4 IPssyAPEGGwlNsmjH5qSmolXItad2NGfPZBZo6nSBcVpvKvti6dp8bQf7Dx/JxEP p+3X -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:52 2024 by rpki-client on console-ams.rpki-client.org