$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZOu-6cdrouoB5ZZeu4bREpyb8BY.roa File: ZOu-6cdrouoB5ZZeu4bREpyb8BY.roa (raw, json) Hash identifier: KfEe1BQeCKj1MAOtiC53QW7pPQgMQKFvtEb3NV5SGH8= Subject key identifier: 64:EB:BE:E9:C7:6B:A2:EA:01:E5:96:5E:BB:86:D1:12:9C:9B:F0:16 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0E71 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZOu-6cdrouoB5ZZeu4bREpyb8BY.roa Signing time: Fri 22 Aug 2025 08:50:16 +0000 ROA not before: Fri 22 Aug 2025 08:50:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24157 IP address blocks: 43.255.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3697 (0xe71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Aug 22 08:50:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=64EBBEE9C76BA2EA01E5965EBB86D1129C9BF016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:6a:d9:c1:cd:d0:a9:c1:68:4a:f3:a7:10: e0:8a:e4:47:89:b9:1e:b0:57:46:25:b5:13:b6:cd: ae:e6:43:1b:67:66:4e:8b:a0:f0:98:07:b2:be:2d: b4:2d:74:90:19:0b:c3:6e:3d:88:d5:1a:d7:c5:60: 9d:82:4a:c7:1a:c2:d7:3d:a9:65:2d:a7:ce:5a:c9: 8e:c2:61:15:07:fb:a1:43:03:9a:50:2e:25:64:96: 60:97:5d:01:0f:8c:35:5b:1c:1b:f6:c9:4c:be:ae: 60:49:50:54:c9:ae:c3:a3:87:41:b0:77:97:b7:dd: 6a:53:aa:9f:de:5c:68:dd:05:7c:9f:bf:ae:ec:62: 30:df:ab:45:05:f9:d8:77:2a:5b:33:f9:d3:b4:ac: 48:6f:46:1c:94:25:7c:11:90:34:92:95:50:b3:fb: 09:a3:ca:17:f5:29:c1:ab:c8:98:96:05:8b:9b:86: cf:f7:08:66:f7:30:98:41:a6:ca:37:47:91:22:05: 3e:17:e8:7e:bf:fb:43:ff:93:1f:c0:06:cf:69:7d: d6:f1:56:62:ac:9f:6a:76:ad:8e:9b:c1:34:6f:a5: 9f:2e:7d:4d:68:2f:3e:1b:31:68:83:ca:42:cd:77: 82:b0:d6:b1:a4:4e:ee:f4:4b:91:a9:c4:2d:e9:06: 3b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EB:BE:E9:C7:6B:A2:EA:01:E5:96:5E:BB:86:D1:12:9C:9B:F0:16 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZOu-6cdrouoB5ZZeu4bREpyb8BY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.255.88.0/22 Signature Algorithm: sha256WithRSAEncryption 41:ca:e1:21:8f:ab:ff:02:e4:a7:1e:d3:8a:bb:a6:6a:bc:13: d1:52:0a:2b:80:49:81:6c:98:3f:58:b3:2d:f2:f4:a2:2d:ae: 77:46:cc:5f:35:39:7e:02:1c:90:f9:90:ef:d5:d6:cb:21:76: ec:b6:01:7c:91:2f:e8:ad:83:c9:66:f6:d8:49:5b:61:b1:e1: 1c:31:a4:30:9f:48:6a:4b:e5:b2:55:9f:cb:85:c1:f1:8e:30: e8:80:2e:88:b6:c8:06:29:87:30:b5:19:6d:8d:7d:70:f7:e5: e4:6c:a4:3d:fd:13:46:3b:d1:ec:1f:40:9d:99:06:96:e4:86: 3b:e8:22:fd:7a:02:6d:2c:a6:b8:e9:cc:28:11:43:80:76:dc: 58:39:a4:45:d3:2f:86:3f:44:18:40:0f:8b:15:bc:38:bf:2f: 9e:3b:03:74:30:55:9d:f4:4f:ad:d4:4d:95:13:cd:b1:1a:f4: 6d:9c:f9:43:d2:74:0d:fa:b1:ec:b9:17:b6:cb:81:d2:a6:54: d8:68:11:0c:2f:45:de:14:82:a5:44:2d:01:2d:dc:20:b1:42: f8:62:20:52:a8:37:f7:50:a1:fe:f5:29:e5:db:2b:72:f7:75: 35:29:30:95:3a:ac:2a:40:c6:e3:0f:09:7a:ef:a1:20:fa:a3: e5:e0:dc:0d -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgICDnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA4MjIw ODUwMTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY0RUJCRUU5Qzc2QkEy RUEwMUU1OTY1RUJCODZEMTEyOUM5QkYwMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW2GrZwc3QqcFoSvOnEOCK5EeJuR6wV0YltRO2za7mQxtnZk6L oPCYB7K+LbQtdJAZC8NuPYjVGtfFYJ2CSscawtc9qWUtp85ayY7CYRUH+6FDA5pQ LiVklmCXXQEPjDVbHBv2yUy+rmBJUFTJrsOjh0Gwd5e33WpTqp/eXGjdBXyfv67s YjDfq0UF+dh3Klsz+dO0rEhvRhyUJXwRkDSSlVCz+wmjyhf1KcGryJiWBYubhs/3 CGb3MJhBpso3R5EiBT4X6H6/+0P/kx/ABs9pfdbxVmKsn2p2rY6bwTRvpZ8ufU1o Lz4bMWiDykLNd4Kw1rGkTu70S5GpxC3pBjsLAgMBAAGjggH6MIIB9jAdBgNVHQ4E FgQUZOu+6cdrouoB5ZZeu4bREpyb8BYwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL1pPdS02 Y2Ryb3VvQjVaWmV1NGJSRXB5YjhCWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAIr/1gwDQYJKoZIhvcNAQELBQADggEBAEHK4SGPq/8C5Kce04q7 pmq8E9FSCiuASYFsmD9Ysy3y9KItrndGzF81OX4CHJD5kO/V1sshduy2AXyRL+it g8lm9thJW2Gx4RwxpDCfSGpL5bJVn8uFwfGOMOiALoi2yAYphzC1GW2NfXD35eRs pD39E0Y70ewfQJ2ZBpbkhjvoIv16Am0sprjpzCgRQ4B23Fg5pEXTL4Y/RBhAD4sV vDi/L547A3QwVZ30T63UTZUTzbEa9G2c+UPSdA36sey5F7bLgdKmVNhoEQwvRd4U gqVELQEt3CCxQvhiIFKoN/dQof71KeXbK3L3dTUpMJU6rCpAxuMPCXrvoSD6o+Xg 3A0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:42:29 2025 by rpki-client