$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/GebhNwDUicHnTykceMKO0c9t92o.roa File: GebhNwDUicHnTykceMKO0c9t92o.roa (raw, json) Hash identifier: PYHKJT0j7RkG5QuSgeJK9DeXGWerWT4870BHDsSeVCs= Subject key identifier: 19:E6:E1:37:00:D4:89:C1:E7:4F:29:1C:78:C2:8E:D1:CF:6D:F7:6A Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0E72 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/GebhNwDUicHnTykceMKO0c9t92o.roa Signing time: Fri 22 Aug 2025 08:50:16 +0000 ROA not before: Fri 22 Aug 2025 08:50:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24158 IP address blocks: 180.204.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3698 (0xe72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 22 08:50:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=19E6E13700D489C1E74F291C78C28ED1CF6DF76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:43:cc:db:09:b1:74:4b:c3:fb:76:f5:a6:7d: 24:33:34:31:a0:f1:92:31:38:b2:18:67:f2:ce:25: cf:93:da:ca:35:9f:68:3f:c2:25:db:53:5d:20:1a: 95:b5:84:ed:1f:41:5d:60:0f:e2:be:30:51:c2:3a: 0a:fc:14:84:85:4d:92:2b:0a:84:38:64:e2:d0:fe: 9f:05:2d:b6:3d:4e:a9:8f:6c:e5:05:c0:6e:ad:50: fa:d6:b3:a2:37:47:7e:eb:10:89:f5:32:16:76:bb: 72:43:72:fd:bb:38:68:b8:8a:38:6d:e0:60:7f:50: ac:ae:fe:e4:5a:c2:f7:6e:97:04:81:e5:47:79:91: a2:93:39:86:4c:58:24:31:80:60:07:3a:46:b4:40: ae:d4:6a:fe:4e:a1:e3:b5:de:1a:9f:58:90:18:46: ea:1d:07:50:83:c7:c8:ed:1e:71:8f:f1:ab:e1:fb: ff:5f:ea:f9:42:4d:f1:da:90:7f:4c:69:bc:c8:5f: f5:3d:d4:65:6c:51:92:c6:02:aa:b2:60:69:38:48: 46:56:91:3b:12:16:82:a1:a1:28:39:2b:c1:fd:40: 39:26:4e:0c:f9:ce:03:2e:9c:e5:40:52:29:4e:b9: 67:39:12:d3:23:fe:10:6e:45:ce:77:61:38:e5:53: 53:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E6:E1:37:00:D4:89:C1:E7:4F:29:1C:78:C2:8E:D1:CF:6D:F7:6A X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/GebhNwDUicHnTykceMKO0c9t92o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.204.0.0/14 Signature Algorithm: sha256WithRSAEncryption 0b:db:2a:5a:20:29:79:3f:21:ab:b1:55:e5:00:37:31:42:1e: 69:a0:68:d7:c8:92:00:c7:ac:e0:12:f8:47:b7:fb:c6:b5:3f: 0f:e6:cb:b7:41:d0:8d:d9:51:40:2d:02:8e:93:2a:48:23:c3: 4b:04:d4:47:fb:9a:15:ca:29:54:7f:fb:cf:b3:96:7c:24:af: 94:6c:8f:6a:08:27:30:2c:bc:97:f7:d2:57:86:b0:33:ea:a1: 06:5d:3b:12:81:d3:08:39:6a:74:78:64:54:ad:b1:71:26:c9: d1:ba:80:cd:4c:5b:cd:f8:88:e2:71:56:ff:03:4e:9a:70:ef: 21:5b:85:70:5d:e8:64:32:92:ad:57:a8:59:dd:ec:33:c4:4e: 9d:39:86:12:16:d6:22:08:36:16:cc:5f:ff:39:2d:7d:5a:ad: 11:31:18:82:10:8a:59:23:1c:7c:65:61:29:7b:8a:41:be:cd: b0:5f:78:15:e4:43:3f:84:08:e2:a8:c4:79:b2:3d:3e:ea:0c: 27:6d:a7:79:e3:0f:1d:7a:bb:31:9b:8c:1c:eb:f8:99:31:9d: f9:99:b9:18:be:e5:5a:40:07:cb:61:be:91:3b:c4:5b:66:33: d1:e9:8a:d0:7b:e8:a8:fd:2c:2b:8f:f1:d8:25:2e:1c:d4:60: b3:94:a0:17 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICDnIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA4MjIw ODUwMTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE5RTZFMTM3MDBENDg5 QzFFNzRGMjkxQzc4QzI4RUQxQ0Y2REY3NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiQ8zbCbF0S8P7dvWmfSQzNDGg8ZIxOLIYZ/LOJc+T2so1n2g/ wiXbU10gGpW1hO0fQV1gD+K+MFHCOgr8FISFTZIrCoQ4ZOLQ/p8FLbY9TqmPbOUF wG6tUPrWs6I3R37rEIn1MhZ2u3JDcv27OGi4ijht4GB/UKyu/uRawvdulwSB5Ud5 kaKTOYZMWCQxgGAHOka0QK7Uav5OoeO13hqfWJAYRuodB1CDx8jtHnGP8avh+/9f 6vlCTfHakH9MabzIX/U91GVsUZLGAqqyYGk4SEZWkTsSFoKhoSg5K8H9QDkmTgz5 zgMunOVAUilOuWc5EtMj/hBuRc53YTjlU1PZAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUGebhNwDUicHnTykceMKO0c9t92owHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL0dlYmhO d0RVaWNIblR5a2NlTUtPMGM5dDkyby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzAN MAsEAgABMAUDAwK0zDANBgkqhkiG9w0BAQsFAAOCAQEAC9sqWiApeT8hq7FV5QA3 MUIeaaBo18iSAMes4BL4R7f7xrU/D+bLt0HQjdlRQC0CjpMqSCPDSwTUR/uaFcop VH/7z7OWfCSvlGyPaggnMCy8l/fSV4awM+qhBl07EoHTCDlqdHhkVK2xcSbJ0bqA zUxbzfiI4nFW/wNOmnDvIVuFcF3oZDKSrVeoWd3sM8ROnTmGEhbWIgg2Fsxf/zkt fVqtETEYghCKWSMcfGVhKXuKQb7NsF94FeRDP4QI4qjEebI9PuoMJ22neeMPHXq7 MZuMHOv4mTGd+Zm5GL7lWkAHy2G+kTvEW2Yz0emK0HvoqP0sK4/x2CUuHNRgs5Sg Fw== -----END CERTIFICATE-----Generated at Sun Aug 24 11:43:58 2025 by rpki-client