$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZhhGNJgy69TSHnBOvZgWGjS6HmY.roa File: ZhhGNJgy69TSHnBOvZgWGjS6HmY.roa (raw, json) Hash identifier: sDjmTjuHgGObhb3ICqLj4/sN4+WI5n9Ict9EI/yKawA= Subject key identifier: 66:18:46:34:98:32:EB:D4:D2:1E:70:4E:BD:98:16:1A:34:BA:1E:66 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0CD7 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZhhGNJgy69TSHnBOvZgWGjS6HmY.roa Signing time: Mon 26 Aug 2024 05:27:02 +0000 ROA not before: Mon 26 Aug 2024 05:27:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24157 IP address blocks: 202.144.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 26 05:27:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=661846349832EBD4D21E704EBD98161A34BA1E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:ac:13:c5:de:23:e9:1b:b6:7a:3e:3e:3f: e9:bd:ba:48:e6:b1:17:30:af:fe:ee:6c:ba:fa:1c: 13:a2:ca:8c:09:f4:ac:c1:a9:53:be:6d:dd:87:b6: e3:32:12:20:f4:c9:6f:6f:a4:09:a0:db:c9:15:68: 97:7e:74:8b:57:50:22:1b:f6:9e:97:5b:70:4f:f8: 68:8f:75:49:7d:bf:b9:01:c0:7c:3c:8f:bf:03:3d: 77:4d:9a:6b:19:75:61:a0:67:3f:a4:ee:8b:f7:48: 75:d9:18:0e:ef:9b:34:9b:6e:0e:cf:8b:01:94:27: 21:f9:e5:16:c9:b9:39:4b:d4:54:7d:62:85:08:5a: ea:67:fb:3d:49:95:b7:ac:67:e4:c1:ac:e0:72:29: 23:3b:20:ed:b5:39:00:b4:d7:53:fc:e7:88:22:58: 48:23:fd:0c:53:70:ec:a0:d6:64:79:61:87:1f:db: 91:e8:d2:c2:e0:eb:0e:17:f4:70:61:88:ee:3a:91: df:6e:dc:42:67:f5:27:cb:f9:fa:ee:d4:25:2d:ba: 38:65:f6:ea:8b:76:b4:da:33:f2:5f:a2:ac:9f:a3: a0:63:b5:68:1b:69:bd:a2:78:3a:8f:0e:d8:54:73: a9:d3:23:f3:22:22:9b:61:62:7f:ce:c0:aa:24:30: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:18:46:34:98:32:EB:D4:D2:1E:70:4E:BD:98:16:1A:34:BA:1E:66 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZhhGNJgy69TSHnBOvZgWGjS6HmY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.144.208.0/20 Signature Algorithm: sha256WithRSAEncryption 44:1a:0f:83:31:f7:a5:60:8f:2c:93:15:0b:10:bf:36:e1:f0: 6a:1a:9c:96:c2:b0:8a:ed:17:6d:70:78:22:62:df:19:a6:4b: ea:54:bb:16:af:53:5f:f2:87:84:a8:31:9a:0c:56:5f:09:0f: ac:c2:3a:ae:17:0f:bc:06:5f:73:23:03:9b:4e:d2:a5:19:66: cf:06:ac:74:ff:a5:f4:40:7d:77:41:7f:44:21:f3:27:b7:e8: de:df:67:b3:5e:a2:68:04:4b:94:2b:87:79:2b:bd:cc:31:e3: 99:7f:84:35:8e:51:e2:46:ac:af:ef:82:ed:14:e9:9e:38:91: 09:a2:b9:9c:46:d9:4f:6c:2a:73:1a:df:70:14:e7:55:91:94: 74:95:98:e0:15:c4:3a:ab:d2:c2:2d:2a:96:2c:ef:0d:ff:83: 13:88:ba:38:75:24:0e:14:5a:18:06:f9:6f:db:ea:60:69:ec: e4:49:01:bb:49:ae:56:13:3a:09:dc:2a:e4:af:b5:da:b6:1e: be:4e:44:27:ef:f8:f5:1c:cd:87:f9:f2:e5:4e:73:57:c4:e4: ce:b6:d9:97:3c:6c:1f:97:6e:f3:3d:f9:1e:81:c0:55:db:ba: 9a:11:ac:69:b7:98:93:d2:de:30:12:e1:f4:d2:e7:d2:6e:17: ed:a8:5d:6f -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNDA4MjYw NTI3MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2MTg0NjM0OTgzMkVC RDREMjFFNzA0RUJEOTgxNjFBMzRCQTFFNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt5awTxd4j6Ru2ej4+P+m9ukjmsRcwr/7ubLr6HBOiyowJ9KzB qVO+bd2HtuMyEiD0yW9vpAmg28kVaJd+dItXUCIb9p6XW3BP+GiPdUl9v7kBwHw8 j78DPXdNmmsZdWGgZz+k7ov3SHXZGA7vmzSbbg7PiwGUJyH55RbJuTlL1FR9YoUI Wupn+z1JlbesZ+TBrOByKSM7IO21OQC011P854giWEgj/QxTcOyg1mR5YYcf25Ho 0sLg6w4X9HBhiO46kd9u3EJn9SfL+fru1CUtujhl9uqLdrTaM/Jfoqyfo6BjtWgb ab2ieDqPDthUc6nTI/MiIpthYn/OwKokMJBFAgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQUZhhGNJgy69TSHnBOvZgWGjS6HmYwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL1poaEdO Smd5NjlUU0huQk92WmdXR2pTNkhtWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBATKkNAwDQYJKoZIhvcNAQELBQADggEBAEQaD4Mx96VgjyyTFQsQ vzbh8GoanJbCsIrtF21weCJi3xmmS+pUuxavU1/yh4SoMZoMVl8JD6zCOq4XD7wG X3MjA5tO0qUZZs8GrHT/pfRAfXdBf0Qh8ye36N7fZ7NeomgES5Qrh3krvcwx45l/ hDWOUeJGrK/vgu0U6Z44kQmiuZxG2U9sKnMa33AU51WRlHSVmOAVxDqr0sItKpYs 7w3/gxOIujh1JA4UWhgG+W/b6mBp7ORJAbtJrlYTOgncKuSvtdq2Hr5ORCfv+PUc zYf58uVOc1fE5M622Zc8bB+XbvM9+R6BwFXbupoRrGm3mJPS3jAS4fTS59JuF+2o XW8= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org