$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Q9SBASj2UVFEFOJglG_xbgyqgGg.roa File: Q9SBASj2UVFEFOJglG_xbgyqgGg.roa (raw, json) Hash identifier: KNndLOoVuF9Yikal31W8GCHxNxFGDHgaLbYeyxwS8yw= Subject key identifier: 43:D4:81:01:28:F6:51:51:44:14:E2:60:94:6F:F1:6E:0C:AA:80:68 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0E78 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Q9SBASj2UVFEFOJglG_xbgyqgGg.roa Signing time: Fri 22 Aug 2025 08:50:18 +0000 ROA not before: Fri 22 Aug 2025 08:50:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24158 IP address blocks: 123.99.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3704 (0xe78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 22 08:50:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=43D4810128F651514414E260946FF16E0CAA8068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:f9:3a:42:ec:b3:9a:7f:c5:20:77:60:35: f8:76:e8:9e:54:b0:2f:63:12:2c:ce:ac:a1:97:50: 2c:0b:0b:a6:9b:24:2e:f3:d6:8c:97:ac:be:33:fd: 80:8d:e7:ae:d3:13:03:8e:6d:58:90:f2:90:62:51: 17:70:e3:6b:5e:5e:19:a7:b7:a2:d2:03:f6:d1:ed: 49:7e:5e:26:40:cb:ba:a7:f4:0a:1b:13:33:a3:c2: 72:ce:e0:55:3e:d3:00:2d:59:12:8e:11:10:3a:49: 05:f8:4b:d4:12:23:5c:36:d4:80:1f:1f:0e:90:37: 67:d4:24:c4:b9:8a:58:e3:51:fd:9e:e8:66:7e:b4: 9e:c3:15:88:6d:67:4a:f3:21:89:4f:df:45:43:4d: ec:20:cb:7f:3c:5f:99:75:50:3b:1f:c4:57:13:dd: a4:d8:b2:64:ff:89:ae:b8:21:cd:ba:2e:26:3c:bc: ac:8d:8f:b9:20:54:47:54:63:6f:97:5e:16:82:23: 85:d9:e9:3b:42:61:b1:a7:73:a0:55:f7:35:3e:99: 8d:13:a0:75:37:0e:5d:2c:3d:ec:c7:cc:a1:72:ce: b3:36:27:25:71:a6:7e:42:8c:69:a8:be:cd:18:7d: e7:6b:0f:ad:2e:6c:a1:de:30:24:ed:03:82:4a:65: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:81:01:28:F6:51:51:44:14:E2:60:94:6F:F1:6E:0C:AA:80:68 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Q9SBASj2UVFEFOJglG_xbgyqgGg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.99.0.0/19 Signature Algorithm: sha256WithRSAEncryption 43:64:01:55:a7:b8:f9:d8:c2:9a:46:97:14:dc:c4:59:73:3b: 47:f4:8b:b3:6f:d1:82:be:a2:18:d8:a0:fa:39:c7:37:53:3e: 37:d6:23:1b:54:bb:a2:d2:8b:72:16:2b:fb:ec:ca:cd:03:c4: 01:66:da:49:11:55:93:52:18:f7:8e:85:ab:80:9f:8f:b2:68: 67:4c:4e:ad:f9:3f:83:47:c6:3c:d0:ff:ec:a7:3f:12:ac:4a: b3:28:e5:58:52:a6:53:80:1c:70:df:e5:b4:93:7a:bd:4d:3e: 3c:42:36:3b:cd:e0:10:79:bc:b9:f5:ea:cf:40:b2:22:e2:70: 3c:b9:95:62:6e:d2:a0:84:e0:61:25:30:05:d7:97:e2:e6:a0: 1c:39:86:79:d7:40:65:93:ea:7a:5b:b2:a9:df:57:b7:e2:ee: 63:41:03:97:e5:27:81:fd:96:c8:f7:79:69:c8:ec:11:b4:ff: d5:ab:d2:cd:9d:f0:5e:81:cc:8e:44:02:47:c7:b4:c6:56:7d: 9a:2d:46:c8:dd:24:16:38:17:26:2c:c9:63:ad:b8:f4:a1:1f: 10:14:68:52:cd:c6:e2:a2:68:4e:0a:53:f8:5d:12:58:48:00: 83:96:8f:db:b8:a3:46:31:96:16:bd:9f:ed:14:73:b5:e3:4a: 1c:c4:25:f8 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA4MjIw ODUwMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQzRDQ4MTAxMjhGNjUx NTE0NDE0RTI2MDk0NkZGMTZFMENBQTgwNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvCvk6Quyzmn/FIHdgNfh26J5UsC9jEizOrKGXUCwLC6abJC7z 1oyXrL4z/YCN567TEwOObViQ8pBiURdw42teXhmnt6LSA/bR7Ul+XiZAy7qn9Aob EzOjwnLO4FU+0wAtWRKOERA6SQX4S9QSI1w21IAfHw6QN2fUJMS5iljjUf2e6GZ+ tJ7DFYhtZ0rzIYlP30VDTewgy388X5l1UDsfxFcT3aTYsmT/ia64Ic26LiY8vKyN j7kgVEdUY2+XXhaCI4XZ6TtCYbGnc6BV9zU+mY0ToHU3Dl0sPezHzKFyzrM2JyVx pn5CjGmovs0YfedrD60ubKHeMCTtA4JKZbLnAgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQUQ9SBASj2UVFEFOJglG/xbgyqgGgwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL1E5U0JB U2oyVVZGRUZPSmdsR194Ymd5cWdHZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAV7YwAwDQYJKoZIhvcNAQELBQADggEBAENkAVWnuPnYwppGlxTc xFlzO0f0i7Nv0YK+ohjYoPo5xzdTPjfWIxtUu6LSi3IWK/vsys0DxAFm2kkRVZNS GPeOhauAn4+yaGdMTq35P4NHxjzQ/+ynPxKsSrMo5VhSplOAHHDf5bSTer1NPjxC NjvN4BB5vLn16s9AsiLicDy5lWJu0qCE4GElMAXXl+LmoBw5hnnXQGWT6npbsqnf V7fi7mNBA5flJ4H9lsj3eWnI7BG0/9Wr0s2d8F6BzI5EAkfHtMZWfZotRsjdJBY4 FyYsyWOtuPShHxAUaFLNxuKiaE4KU/hdElhIAIOWj9u4o0Yxlha9n+0Uc7XjShzE Jfg= -----END CERTIFICATE-----Generated at Sun Aug 24 09:44:49 2025 by rpki-client