$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/_g2TgdGRPKjK-RaPh8zG34fdfaI.roa File: _g2TgdGRPKjK-RaPh8zG34fdfaI.roa (raw, json) Hash identifier: aE4hApUgRjT96CT+cfPHPmI5rKygQNd0YDqWuV1tTow= Subject key identifier: FE:0D:93:81:D1:91:3C:A8:CA:F9:16:8F:87:CC:C6:DF:87:DD:7D:A2 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0CDA Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/_g2TgdGRPKjK-RaPh8zG34fdfaI.roa Signing time: Mon 26 Aug 2024 05:27:03 +0000 ROA not before: Mon 26 Aug 2024 05:27:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24157 IP address blocks: 116.89.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3290 (0xcda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 26 05:27:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FE0D9381D1913CA8CAF9168F87CCC6DF87DD7DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:8a:02:ca:e9:70:fa:38:97:2e:16:c5:d6: 22:03:26:2e:13:09:ae:24:50:e3:84:d1:79:ee:ce: ee:5b:86:3d:8f:ed:11:87:33:9a:5d:f0:a3:d9:9b: 80:38:f7:c1:23:e8:af:b2:39:a3:88:96:05:b1:41: c5:4a:71:92:d2:1e:21:a8:0a:d8:82:1d:88:d0:ad: 11:87:c1:07:d2:0d:9e:b2:ae:98:ae:95:b5:52:dd: f1:9c:7b:0a:80:d6:79:7f:f5:a7:f3:31:f0:74:56: 89:40:8c:2a:b0:9c:b1:25:0a:17:ca:d0:ec:78:6d: 64:6e:38:48:a1:7e:b3:69:1f:9f:0e:fb:ab:d0:81: 95:87:6f:3e:b4:c4:2c:e0:f4:b3:5f:04:30:04:22: 95:2c:ee:c1:ae:09:86:1d:90:24:dd:65:81:ff:ab: c1:95:4a:f2:87:87:85:41:53:70:6d:62:db:0e:0c: 3f:1f:fa:ad:d0:87:7f:12:33:b5:6f:cd:3b:7b:78: 6b:0a:2a:ad:37:88:d3:ac:84:87:49:65:c3:b7:d9: 3c:40:a4:55:ac:b6:5b:af:67:bb:ce:f4:d1:1e:e4: 9e:70:da:83:fd:87:50:f7:32:9d:9c:6b:f8:65:7e: 80:8f:53:17:02:37:7c:fe:8b:49:0c:c7:15:d1:22: d7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0D:93:81:D1:91:3C:A8:CA:F9:16:8F:87:CC:C6:DF:87:DD:7D:A2 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/_g2TgdGRPKjK-RaPh8zG34fdfaI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 116.89.128.0/20 Signature Algorithm: sha256WithRSAEncryption 77:77:8b:31:56:18:e0:72:82:d3:83:b3:79:73:0e:80:d0:00: 1b:ed:60:eb:bf:f0:ea:7e:80:28:c5:1f:6e:5b:db:56:e9:4c: 84:ef:8a:1e:0a:0d:ea:1a:b4:60:b5:40:bd:38:1a:3c:eb:77: 03:cd:fc:1b:ac:2f:7f:e9:f4:42:6f:81:3b:9e:54:84:24:77: 48:77:76:59:f7:02:2c:9d:d9:07:41:7f:df:c6:fd:3d:d2:29: e2:de:79:d2:71:33:9a:ed:4e:20:84:5d:c2:f7:3b:60:e5:a6: cd:83:2d:6c:08:2d:f7:3f:85:8d:6e:4c:c3:a6:87:06:3b:b8: 71:48:bb:7f:15:2d:d5:fb:5b:53:86:39:4f:5b:f5:83:63:44: 4c:43:b7:4f:fc:75:28:6f:f5:a0:f5:fe:4d:03:72:de:83:2f: 85:1c:36:85:e1:f0:8e:a4:e0:d9:c9:70:36:9e:89:1a:61:d0: 9e:c3:3c:93:ab:a9:6e:ad:4c:b4:c0:6b:b1:6a:51:74:19:ca: de:22:60:b8:0c:38:21:f7:a1:85:7e:24:90:ed:1e:6e:66:a0: fa:e4:84:a9:87:58:30:fb:f2:77:a3:58:52:94:4d:79:a6:b1: db:df:29:99:22:50:b4:d8:7f:b5:78:30:99:5d:db:23:c8:08: e4:c6:63:af -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDNowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNDA4MjYw NTI3MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZFMEQ5MzgxRDE5MTND QThDQUY5MTY4Rjg3Q0NDNkRGODdERDdEQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4sYoCyulw+jiXLhbF1iIDJi4TCa4kUOOE0Xnuzu5bhj2P7RGH M5pd8KPZm4A498Ej6K+yOaOIlgWxQcVKcZLSHiGoCtiCHYjQrRGHwQfSDZ6yrpiu lbVS3fGcewqA1nl/9afzMfB0VolAjCqwnLElChfK0Ox4bWRuOEihfrNpH58O+6vQ gZWHbz60xCzg9LNfBDAEIpUs7sGuCYYdkCTdZYH/q8GVSvKHh4VBU3BtYtsODD8f +q3Qh38SM7VvzTt7eGsKKq03iNOshIdJZcO32TxApFWstluvZ7vO9NEe5J5w2oP9 h1D3Mp2ca/hlfoCPUxcCN3z+i0kMxxXRIteHAgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQU/g2TgdGRPKjK+RaPh8zG34fdfaIwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL19nMlRn ZEdSUEtqSy1SYVBoOHpHMzRmZGZhSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAR0WYAwDQYJKoZIhvcNAQELBQADggEBAHd3izFWGOBygtODs3lz DoDQABvtYOu/8Op+gCjFH25b21bpTITvih4KDeoatGC1QL04GjzrdwPN/BusL3/p 9EJvgTueVIQkd0h3dln3Aiyd2QdBf9/G/T3SKeLeedJxM5rtTiCEXcL3O2Dlps2D LWwILfc/hY1uTMOmhwY7uHFIu38VLdX7W1OGOU9b9YNjRExDt0/8dShv9aD1/k0D ct6DL4UcNoXh8I6k4NnJcDaeiRph0J7DPJOrqW6tTLTAa7FqUXQZyt4iYLgMOCH3 oYV+JJDtHm5moPrkhKmHWDD78nejWFKUTXmmsdvfKZkiULTYf7V4MJld2yPICOTG Y68= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:44 2024 by rpki-client on console-fra.rpki-client.org