$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Rvb1QgeIjCEG_9TMr9C22Awtqvc.roa File: Rvb1QgeIjCEG_9TMr9C22Awtqvc.roa (raw, json) Hash identifier: on4d3muldAJQW9t2TYeJj6QRwIZYXAe7qYaDAGj6IO0= Subject key identifier: 46:F6:F5:42:07:88:8C:21:06:FF:D4:CC:AF:D0:B6:D8:0C:2D:AA:F7 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0CD6 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Rvb1QgeIjCEG_9TMr9C22Awtqvc.roa Signing time: Mon 26 Aug 2024 05:27:02 +0000 ROA not before: Mon 26 Aug 2024 05:27:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24158 IP address blocks: 2402:7500:f9ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 26 05:27:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=46F6F54207888C2106FFD4CCAFD0B6D80C2DAAF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:52:e3:2b:27:7c:3b:0b:5b:31:c2:9c:12: f6:c1:cf:2c:df:f9:41:7a:4d:af:0c:f5:04:f8:c2: 32:e8:04:b9:46:8e:34:48:5e:f4:60:da:12:84:4f: 46:27:27:2e:40:df:b2:53:da:6c:5c:0a:96:ed:a4: c1:0e:2a:7b:35:29:6f:1b:8e:95:c6:8e:86:c8:be: 68:8e:bb:cd:88:46:60:a8:c9:1a:a0:cd:8a:9d:b8: ff:90:fb:78:48:29:b2:88:08:76:c4:dc:1d:14:fd: bb:db:ea:07:4d:59:a9:66:0d:9a:60:67:ab:41:0e: 63:61:d8:dd:ed:4a:c7:b3:5e:a8:0d:6b:fc:b8:d6: 90:c8:c9:b9:a2:27:de:77:1f:31:89:60:5d:a9:ab: df:d8:fd:c5:bc:6e:9d:fc:61:ad:b1:7e:98:f2:fc: 91:7e:f4:40:c8:fb:ec:8f:09:f5:ed:d0:9e:93:82: 73:1e:24:f5:2c:03:5c:67:82:f2:3a:9c:9a:42:ac: 05:20:51:a0:17:82:3a:1b:c3:e3:fa:a9:c3:0d:7a: de:d3:0d:8a:8a:77:88:4a:d0:d0:15:8c:5e:7d:ee: 78:a3:fc:39:e7:e5:5d:77:ab:7d:47:68:76:a4:80: d4:09:24:19:0b:a7:de:2f:b3:39:4c:27:d4:fa:72: 8b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F6:F5:42:07:88:8C:21:06:FF:D4:CC:AF:D0:B6:D8:0C:2D:AA:F7 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Rvb1QgeIjCEG_9TMr9C22Awtqvc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7500:f9ff::/48 Signature Algorithm: sha256WithRSAEncryption d7:2b:0f:d1:34:07:db:49:72:94:c8:6b:33:46:b4:e6:69:25: 4c:2b:51:15:f9:48:85:99:0d:aa:03:48:c8:d7:c1:3a:96:b0: e0:41:c2:ea:a7:c4:9d:3f:00:12:d6:12:a8:7e:19:71:6d:b5: f7:fb:4f:c7:e7:47:fe:13:14:cb:ea:d7:f6:73:88:26:12:af: 01:11:99:a6:89:24:c8:6f:fb:e9:65:00:3f:4f:98:27:d7:de: 13:52:05:bf:2f:dc:87:e2:a8:7e:79:ca:0a:da:31:1e:1e:a3: 43:7d:55:9c:65:2a:0c:6a:3e:12:2b:b0:a4:52:cd:e5:13:4a: 7a:9e:97:4c:ef:c8:6c:f8:13:5e:0b:75:25:3f:68:2b:a7:dc: 45:7b:34:7b:e1:36:c0:83:34:0d:37:a3:67:5f:a7:49:ed:8a: 81:3a:92:57:ad:08:87:29:e9:a4:7b:ef:85:fd:f1:6d:71:0d: bc:17:94:f7:8e:cf:d5:fc:95:73:53:34:27:7a:3f:80:0a:42: f6:62:b4:97:ce:36:b4:57:4f:71:5a:79:d5:b9:c9:bc:53:15: b5:c2:de:1b:98:00:2b:4a:88:84:80:a2:b6:d9:cd:a0:71:af: 20:8b:e8:fb:b5:66:b6:5b:67:d6:69:bf:ed:64:9f:8b:f7:07: 68:57:1e:7b -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNDA4MjYw NTI3MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ2RjZGNTQyMDc4ODhD MjEwNkZGRDRDQ0FGRDBCNkQ4MEMyREFBRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3zVLjKyd8OwtbMcKcEvbBzyzf+UF6Ta8M9QT4wjLoBLlGjjRI XvRg2hKET0YnJy5A37JT2mxcCpbtpMEOKns1KW8bjpXGjobIvmiOu82IRmCoyRqg zYqduP+Q+3hIKbKICHbE3B0U/bvb6gdNWalmDZpgZ6tBDmNh2N3tSsezXqgNa/y4 1pDIybmiJ953HzGJYF2pq9/Y/cW8bp38Ya2xfpjy/JF+9EDI++yPCfXt0J6TgnMe JPUsA1xngvI6nJpCrAUgUaAXgjobw+P6qcMNet7TDYqKd4hK0NAVjF597nij/Dnn 5V13q31HaHakgNQJJBkLp94vszlMJ9T6covDAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQURvb1QgeIjCEG/9TMr9C22AwtqvcwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL1J2YjFR Z2VJakNFR185VE1yOUMyMkF3dHF2Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAkAnUA+f8wDQYJKoZIhvcNAQELBQADggEBANcrD9E0B9tJcpTI azNGtOZpJUwrURX5SIWZDaoDSMjXwTqWsOBBwuqnxJ0/ABLWEqh+GXFttff7T8fn R/4TFMvq1/ZziCYSrwERmaaJJMhv++llAD9PmCfX3hNSBb8v3IfiqH55ygraMR4e o0N9VZxlKgxqPhIrsKRSzeUTSnqel0zvyGz4E14LdSU/aCun3EV7NHvhNsCDNA03 o2dfp0ntioE6kletCIcp6aR774X98W1xDbwXlPeOz9X8lXNTNCd6P4AKQvZitJfO NrRXT3FaedW5ybxTFbXC3huYACtKiISAorbZzaBxryCL6Pu1ZrZbZ9Zpv+1kn4v3 B2hXHns= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org