$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/4vxHRREJWNpi9vjz_CapmDGulWI.roa File: 4vxHRREJWNpi9vjz_CapmDGulWI.roa (raw, json) Hash identifier: gl9yRRmraCp5SGJ5C8tKmurBQPpqQEsQE9JzJBgCxXg= Subject key identifier: E2:FC:47:45:11:09:58:DA:62:F6:F8:F3:FC:26:A9:98:31:AE:95:62 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0E7F Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/4vxHRREJWNpi9vjz_CapmDGulWI.roa Signing time: Fri 22 Aug 2025 08:50:19 +0000 ROA not before: Fri 22 Aug 2025 08:50:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24158 IP address blocks: 2402:7500:f9ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3711 (0xe7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 22 08:50:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E2FC4745110958DA62F6F8F3FC26A99831AE9562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:d9:23:34:de:74:f3:15:5f:3b:ab:a5:d0: 94:16:64:94:71:c5:ef:d9:53:90:87:a6:de:b8:05: 43:ad:78:b8:ff:53:f3:3a:52:27:97:49:81:d1:71: 1f:51:34:74:96:6c:fe:5e:25:88:a0:92:47:1f:f2: de:df:37:ac:ba:64:60:f5:39:09:a3:8a:c1:c7:59: 93:35:d1:2f:7e:00:9e:ac:82:29:49:eb:93:a5:be: a4:15:2e:34:a1:d3:65:c7:84:47:79:1e:c8:66:08: d4:43:7b:82:36:46:dc:d0:73:2f:88:dd:c6:92:f5: 42:80:93:51:0a:96:8c:14:6d:79:12:53:27:8f:1f: d2:30:51:73:36:0a:2e:18:5d:14:a0:02:2b:8b:3d: 23:ac:63:bf:29:91:40:4b:69:e2:8b:27:ae:f1:79: 49:56:50:78:80:50:af:db:a1:6b:ff:67:94:23:03: 46:74:21:4e:6d:e3:19:a7:d9:87:11:54:54:aa:0d: 31:a1:f2:50:d6:12:b2:79:33:db:9e:53:24:b1:a2: 3d:a7:21:36:4a:e0:ec:58:b4:bd:9c:7b:55:e9:16: 1f:79:19:16:d9:d8:fa:9d:51:13:e4:eb:55:4a:ff: 0c:69:7f:e6:77:65:14:64:1d:cd:a4:b0:5e:cd:8b: eb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FC:47:45:11:09:58:DA:62:F6:F8:F3:FC:26:A9:98:31:AE:95:62 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/4vxHRREJWNpi9vjz_CapmDGulWI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7500:f9ff::/48 Signature Algorithm: sha256WithRSAEncryption c4:e1:f2:34:f2:c5:e5:03:b0:f8:51:5e:2d:8f:64:fc:13:52: c8:e3:42:ce:26:df:ec:c4:d2:9c:32:8f:ca:5d:a9:33:09:cd: 42:8c:52:ca:e2:db:5e:d4:07:dd:21:98:6a:a5:ce:05:4f:1c: 33:ab:f3:a8:b6:cc:52:1e:b8:45:14:1d:d2:48:38:d3:78:c1: eb:35:76:b4:39:f4:47:d2:cd:9d:1a:c3:5f:c8:14:e0:43:3d: 8d:d0:56:98:bd:77:bf:b9:d0:ef:8e:21:1d:70:93:32:8a:c3: 77:2f:f7:44:e2:65:8c:b7:3f:92:e5:3b:db:42:93:40:50:c4: c9:c1:ca:a4:30:79:da:bd:81:f3:1a:79:2b:e7:54:d2:aa:69: 4e:df:4f:b4:33:a1:a7:ec:27:1d:d0:40:14:42:70:4c:cf:87: 58:46:26:9f:ba:08:9f:fd:c5:f6:c5:9f:ad:18:16:f2:fc:c9: b0:da:0b:56:65:61:6b:18:b7:42:55:bb:a4:af:6b:1e:be:29: a3:14:53:12:53:cb:aa:c0:71:cb:39:4d:08:5c:44:ca:c7:a8: 84:85:6a:e3:b5:b3:fe:c6:3c:7d:88:32:4d:3c:74:2c:3f:c7: 7c:a2:f6:89:70:f8:7f:71:7a:ed:93:94:72:d6:d8:50:65:57: 89:ae:ac:e7 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICDn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA4MjIw ODUwMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUyRkM0NzQ1MTEwOTU4 REE2MkY2RjhGM0ZDMjZBOTk4MzFBRTk1NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO7NkjNN508xVfO6ul0JQWZJRxxe/ZU5CHpt64BUOteLj/U/M6 UieXSYHRcR9RNHSWbP5eJYigkkcf8t7fN6y6ZGD1OQmjisHHWZM10S9+AJ6sgilJ 65OlvqQVLjSh02XHhEd5HshmCNRDe4I2RtzQcy+I3caS9UKAk1EKlowUbXkSUyeP H9IwUXM2Ci4YXRSgAiuLPSOsY78pkUBLaeKLJ67xeUlWUHiAUK/boWv/Z5QjA0Z0 IU5t4xmn2YcRVFSqDTGh8lDWErJ5M9ueUySxoj2nITZK4OxYtL2ce1XpFh95GRbZ 2PqdURPk61VK/wxpf+Z3ZRRkHc2ksF7Ni+uvAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQU4vxHRREJWNpi9vjz/CapmDGulWIwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFLzR2eEhS UkVKV05waTl2anpfQ2FwbURHdWxXSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAkAnUA+f8wDQYJKoZIhvcNAQELBQADggEBAMTh8jTyxeUDsPhR Xi2PZPwTUsjjQs4m3+zE0pwyj8pdqTMJzUKMUsri217UB90hmGqlzgVPHDOr86i2 zFIeuEUUHdJIONN4wes1drQ59EfSzZ0aw1/IFOBDPY3QVpi9d7+50O+OIR1wkzKK w3cv90TiZYy3P5LlO9tCk0BQxMnByqQwedq9gfMaeSvnVNKqaU7fT7QzoafsJx3Q QBRCcEzPh1hGJp+6CJ/9xfbFn60YFvL8ybDaC1ZlYWsYt0JVu6Svax6+KaMUUxJT y6rAccs5TQhcRMrHqISFauO1s/7GPH2IMk08dCw/x3yi9olw+H9xeu2TlHLW2FBl V4murOc= -----END CERTIFICATE-----Generated at Sun Aug 24 07:42:09 2025 by rpki-client