$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/XoKfkGiWBOl29SKC3TZKVZaIQ4U.roa File: XoKfkGiWBOl29SKC3TZKVZaIQ4U.roa (raw, json) Hash identifier: J8EMtLItr7qFqEf6EqybR+0OnUkPmodK0NNdti/5jIw= Subject key identifier: 5E:82:9F:90:68:96:04:E9:76:F5:22:82:DD:36:4A:55:96:88:43:85 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0E6E Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/XoKfkGiWBOl29SKC3TZKVZaIQ4U.roa Signing time: Fri 22 Aug 2025 08:50:15 +0000 ROA not before: Fri 22 Aug 2025 08:50:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24158 IP address blocks: 2402:7500:800::/40 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3694 (0xe6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 22 08:50:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5E829F90689604E976F52282DD364A5596884385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:1b:dc:d3:d4:9b:98:a8:d6:df:7e:09:2b: 8f:28:5c:33:ac:24:2d:27:3a:f0:ed:c5:77:3d:b0: 7c:b4:4f:ac:d6:47:33:5c:54:b0:1f:54:91:51:8b: 84:d0:5b:1d:b8:f3:19:f5:f9:67:f5:20:d5:fe:06: 2d:3a:d3:1d:0e:37:b4:09:b6:2e:c8:e8:e1:0d:1f: 12:a3:87:5e:62:f3:db:0a:81:55:17:f1:c1:82:ef: b7:3c:9b:0b:7c:0e:e0:54:63:ed:1d:81:26:51:78: 42:44:b6:41:5d:da:f1:9d:46:07:67:e3:f9:90:07: 3e:63:c6:bf:b8:e6:52:d3:3d:f0:12:1c:d5:3a:24: fd:bc:3c:bc:d7:fd:6c:46:7d:54:df:a8:1f:e5:e0: 15:99:be:8f:c9:51:57:82:9f:97:2a:34:c5:c5:be: 83:b0:5d:4e:a8:72:74:62:ac:2f:9e:a9:66:3a:78: 34:16:73:85:6a:d1:b1:0a:2b:b2:ef:31:fd:ec:85: 3f:48:ff:09:f4:b1:8d:48:ff:2e:2d:1e:57:fe:bc: fe:41:7f:b6:13:b1:fd:9e:61:69:c0:cc:49:01:6a: 2f:8c:87:f3:e4:95:1e:34:2c:49:93:d0:90:6c:db: d3:ae:f6:06:a5:3f:f7:87:a2:68:93:12:70:d3:96: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:82:9F:90:68:96:04:E9:76:F5:22:82:DD:36:4A:55:96:88:43:85 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/XoKfkGiWBOl29SKC3TZKVZaIQ4U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:7500:800::/40 Signature Algorithm: sha256WithRSAEncryption d8:b7:fd:d6:fd:3d:a0:96:40:3d:44:2a:04:ab:8e:88:6f:f9: b0:1b:38:5b:fe:76:ed:d3:b2:b6:97:cf:91:6c:50:8d:83:17: 96:53:b8:fe:b8:02:28:7d:c5:36:75:3f:0d:a2:d2:16:a5:b5: 97:fc:64:e4:68:f7:4d:7d:5f:ea:0c:55:9c:d5:09:7e:1e:75: 32:a1:ee:1f:c7:b2:43:35:aa:36:88:ee:08:c8:ae:4e:9b:2d: ca:c2:18:8a:41:a1:7e:76:0b:41:30:42:11:46:09:a3:23:10: 4e:93:a0:08:9e:7e:7a:dd:e1:20:7c:cc:d2:5e:07:56:92:c3: 55:a4:dc:4f:cf:93:db:6f:dd:c8:d6:53:93:90:8b:14:a5:09: e2:25:2c:1b:b1:fe:ef:d8:64:da:18:f8:b4:60:f8:a0:61:17: 22:dc:60:d6:b4:b0:79:df:66:79:de:75:94:0d:16:5c:3f:70: 8f:da:b5:59:45:28:71:f0:0a:d9:49:9a:c2:1f:4a:99:01:eb: 67:76:34:47:34:d5:bb:b4:83:46:87:1f:87:c0:d0:1f:e9:45: 4f:4a:98:1a:fc:b8:2b:9d:df:39:eb:e0:89:4f:3c:b5:83:19: 2b:52:df:2b:20:f7:a4:ef:38:21:68:d2:0c:1c:df:d9:a2:1e: de:82:42:5d -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgICDm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA4MjIw ODUwMTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVFODI5RjkwNjg5NjA0 RTk3NkY1MjI4MkREMzY0QTU1OTY4ODQzODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxUBvc09SbmKjW334JK48oXDOsJC0nOvDtxXc9sHy0T6zWRzNc VLAfVJFRi4TQWx248xn1+Wf1INX+Bi060x0ON7QJti7I6OENHxKjh15i89sKgVUX 8cGC77c8mwt8DuBUY+0dgSZReEJEtkFd2vGdRgdn4/mQBz5jxr+45lLTPfASHNU6 JP28PLzX/WxGfVTfqB/l4BWZvo/JUVeCn5cqNMXFvoOwXU6ocnRirC+eqWY6eDQW c4Vq0bEKK7LvMf3shT9I/wn0sY1I/y4tHlf+vP5Bf7YTsf2eYWnAzEkBai+Mh/Pk lR40LEmT0JBs29Ou9galP/eHomiTEnDTlqkxAgMBAAGjggH8MIIB+DAdBgNVHQ4E FgQUXoKfkGiWBOl29SKC3TZKVZaIQ4UwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL1hvS2Zr R2lXQk9sMjlTS0MzVFpLVlphSVE0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQ MA4EAgACMAgDBgAkAnUACDANBgkqhkiG9w0BAQsFAAOCAQEA2Lf91v09oJZAPUQq BKuOiG/5sBs4W/527dOytpfPkWxQjYMXllO4/rgCKH3FNnU/DaLSFqW1l/xk5Gj3 TX1f6gxVnNUJfh51MqHuH8eyQzWqNojuCMiuTpstysIYikGhfnYLQTBCEUYJoyMQ TpOgCJ5+et3hIHzM0l4HVpLDVaTcT8+T22/dyNZTk5CLFKUJ4iUsG7H+79hk2hj4 tGD4oGEXItxg1rSwed9med51lA0WXD9wj9q1WUUocfAK2Umawh9KmQHrZ3Y0RzTV u7SDRocfh8DQH+lFT0qYGvy4K53fOevgiU88tYMZK1LfKyD3pO84IWjSDBzf2aIe 3oJCXQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:45:16 2025 by rpki-client