$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/1M8XrsPQ7_UoB-5HXeE4v6C53tA.roa File: 1M8XrsPQ7_UoB-5HXeE4v6C53tA.roa (raw, json) Hash identifier: cJUt2nvbb/BSj6oCQY6Wue+mtmCZGtc+vkFISvTm/Ss= Subject key identifier: D4:CF:17:AE:C3:D0:EF:F5:28:07:EE:47:5D:E1:38:BF:A0:B9:DE:D0 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0E7D Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/1M8XrsPQ7_UoB-5HXeE4v6C53tA.roa Signing time: Fri 22 Aug 2025 08:50:18 +0000 ROA not before: Fri 22 Aug 2025 08:50:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24157 IP address blocks: 1.200.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3709 (0xe7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 22 08:50:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D4CF17AEC3D0EFF52807EE475DE138BFA0B9DED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:fd:91:d6:fb:fa:de:3e:1a:2c:ba:28:ab: a3:b5:1c:79:a0:cc:81:b9:8b:1a:80:e2:eb:59:3e: 2d:57:9f:23:c8:eb:00:1b:f8:e2:0c:6f:8b:f6:22: 4e:7a:9a:b7:53:be:4b:c5:5b:11:6f:c5:1c:0c:80: 99:f5:1e:fd:17:4a:c1:07:ed:3e:de:7b:15:c7:d6: db:36:cd:08:ed:ec:1a:2c:5e:67:d6:a1:ad:47:96: 1f:63:d0:c7:43:65:d9:12:cc:55:c0:b4:90:ae:18: 2f:cf:ce:d5:b4:69:ff:b6:cb:cd:1c:50:00:1f:98: a8:65:1e:de:3d:56:1b:84:cc:88:45:61:96:a7:93: a3:14:b0:5c:39:ef:c7:e0:9a:f9:14:75:0a:a8:d2: d3:1f:b4:3c:e0:c8:32:fe:5f:e4:ae:bb:ae:4c:e0: 36:97:8e:3b:11:bf:7f:8d:a3:7b:9d:64:b5:af:dc: ce:da:e2:bc:33:27:d5:6c:91:bc:31:db:f7:ee:fa: 06:87:05:db:c0:44:bd:0c:46:db:56:58:e0:72:dc: 84:d6:ae:ad:66:ab:ea:9c:48:a8:f9:de:2c:4e:fc: 0c:04:07:f9:13:d7:42:42:fb:95:fc:8a:96:86:83: d9:7e:d8:1e:4b:fa:e5:d2:67:55:3f:8b:13:ef:2a: 23:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CF:17:AE:C3:D0:EF:F5:28:07:EE:47:5D:E1:38:BF:A0:B9:DE:D0 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/1M8XrsPQ7_UoB-5HXeE4v6C53tA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 1.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption be:7a:9d:93:94:cc:2e:ea:da:8a:ba:61:76:dd:b3:71:86:28: d3:75:e9:93:5f:91:f6:4c:9f:26:67:bd:b3:28:80:ae:37:02: 7e:e0:bf:aa:20:08:f5:9b:c2:4e:77:d5:67:bc:86:ab:50:23: 7a:5c:9e:b0:d4:fa:37:a1:9f:ac:79:dc:ed:8f:b6:56:f7:76: a7:00:95:a7:4d:ea:2b:16:de:92:2a:ab:40:ce:c4:58:d2:81: ec:7d:4a:d3:5b:90:c3:bf:ae:9a:10:a3:ea:af:e8:45:83:a3: c7:e0:22:c5:6e:c9:8b:82:c4:05:c2:e1:22:f9:3d:3c:8d:1d: d3:70:57:87:46:13:0c:08:1e:a3:47:05:08:ed:93:c4:6e:fd: af:02:96:1c:96:8c:66:fe:37:d0:f0:ea:b9:08:04:73:15:f7: ad:e0:f5:bb:8d:cc:3f:83:a0:38:2e:44:cd:a6:a9:b1:e6:34: 1e:a9:b2:c0:d5:6a:3c:d3:4c:05:9d:5c:d3:9a:77:02:55:8d: 99:e4:66:83:2f:a2:bb:02:83:0f:aa:eb:4e:5a:da:dc:aa:f6: bc:11:2e:6b:73:e5:9d:1c:ab:b8:d8:43:61:c6:c7:ae:54:3e: 32:20:fc:af:80:80:43:8c:44:e0:99:ab:38:d6:03:18:56:a0: d1:1a:dd:de -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICDn0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA4MjIw ODUwMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ0Q0YxN0FFQzNEMEVG RjUyODA3RUU0NzVERTEzOEJGQTBCOURFRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIU/2R1vv63j4aLLooq6O1HHmgzIG5ixqA4utZPi1XnyPI6wAb +OIMb4v2Ik56mrdTvkvFWxFvxRwMgJn1Hv0XSsEH7T7eexXH1ts2zQjt7BosXmfW oa1Hlh9j0MdDZdkSzFXAtJCuGC/PztW0af+2y80cUAAfmKhlHt49VhuEzIhFYZan k6MUsFw578fgmvkUdQqo0tMftDzgyDL+X+Suu65M4DaXjjsRv3+No3udZLWv3M7a 4rwzJ9Vskbwx2/fu+gaHBdvARL0MRttWWOBy3ITWrq1mq+qcSKj53ixO/AwEB/kT 10JC+5X8ipaGg9l+2B5L+uXSZ1U/ixPvKiMHAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQU1M8XrsPQ7/UoB+5HXeE4v6C53tAwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFLzFNOFhy c1BRN19Vb0ItNUhYZUU0djZDNTN0QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzAN MAsEAgABMAUDAwAByDANBgkqhkiG9w0BAQsFAAOCAQEAvnqdk5TMLurairphdt2z cYYo03Xpk1+R9kyfJme9syiArjcCfuC/qiAI9ZvCTnfVZ7yGq1AjelyesNT6N6Gf rHnc7Y+2Vvd2pwCVp03qKxbekiqrQM7EWNKB7H1K01uQw7+umhCj6q/oRYOjx+Ai xW7Ji4LEBcLhIvk9PI0d03BXh0YTDAgeo0cFCO2TxG79rwKWHJaMZv430PDquQgE cxX3reD1u43MP4OgOC5EzaapseY0HqmywNVqPNNMBZ1c05p3AlWNmeRmgy+iuwKD D6rrTlra3Kr2vBEua3PlnRyruNhDYcbHrlQ+MiD8r4CAQ4xE4JmrONYDGFag0Rrd 3g== -----END CERTIFICATE-----Generated at Sun Aug 24 09:43:10 2025 by rpki-client