$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/kVEGuHeI6b0hZDffJxtWx2r7GcU.roa File: kVEGuHeI6b0hZDffJxtWx2r7GcU.roa (raw, json) Hash identifier: 8rmESp62pho0qjSVOc9mlnIwVOa8NODQkmF06XGXdyo= Subject key identifier: 91:51:06:B8:77:88:E9:BD:21:64:37:DF:27:1B:56:C7:6A:FB:19:C5 Certificate issuer: /CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B Certificate serial: 0D93 Authority key identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/kVEGuHeI6b0hZDffJxtWx2r7GcU.roa Signing time: Fri 22 Aug 2025 08:43:58 +0000 ROA not before: Fri 22 Aug 2025 08:43:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131618 IP address blocks: 103.122.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3475 (0xd93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B Validity Not Before: Aug 22 08:43:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=915106B87788E9BD216437DF271B56C76AFB19C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:05:bf:f6:f1:2b:e1:a6:29:51:cc:d8:fb: 35:a1:f9:c3:8c:df:69:ae:15:14:91:c1:ad:b0:88: 59:c9:d8:ab:d4:45:51:11:70:d6:fa:61:47:9e:8c: be:8c:12:ee:a2:37:4d:5e:4e:42:62:62:2e:5b:8c: c5:f5:b8:45:1c:3c:56:59:f4:54:d7:9f:76:d4:3b: 72:9a:61:bd:db:1e:66:20:46:c0:b2:de:c3:3b:1f: be:85:f1:cc:4b:a5:02:cf:9c:18:0c:08:81:30:d4: ef:80:4a:ec:af:7e:f1:50:87:a6:9d:3a:af:d0:70: ab:19:22:5d:7f:8c:aa:ed:ce:8d:17:74:30:41:2c: 90:d4:d2:b8:67:71:d8:4e:49:39:c0:ce:ef:5d:de: 1a:95:eb:49:0b:22:f5:ea:fd:80:5c:46:36:39:01: 59:e6:42:e4:ff:64:ff:b5:a2:e2:67:71:b8:fe:ea: 86:c9:65:d3:93:83:08:d8:9e:c5:b7:9e:78:57:9f: fe:89:bf:cc:3d:cb:2c:35:ef:e3:4b:d6:ec:5c:14: 89:db:ca:ff:47:12:4e:89:94:d2:fb:f6:25:45:9e: ce:16:8a:d6:d4:09:04:a7:8a:b6:03:bb:55:29:ec: af:34:c0:38:8e:79:93:51:04:0a:b5:f7:56:74:f3: 4b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:51:06:B8:77:88:E9:BD:21:64:37:DF:27:1B:56:C7:6A:FB:19:C5 X509v3 Authority Key Identifier: keyid:63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/kVEGuHeI6b0hZDffJxtWx2r7GcU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.227.0/24 Signature Algorithm: sha256WithRSAEncryption 10:0e:85:89:4e:00:ad:8c:81:b7:82:49:6a:92:15:29:2f:cb: fe:a3:d5:eb:1f:2c:be:d6:75:9f:f7:a9:f9:13:75:d7:7e:29: 48:74:89:03:21:03:bb:cc:b9:fd:47:db:b2:d7:44:6c:fb:0c: cd:1f:b6:cd:f1:bb:ef:05:78:fa:71:6c:98:c7:a5:4d:ae:51: bc:79:c9:02:76:1b:4d:bb:2a:41:22:85:a8:cc:75:e0:db:92: 11:22:78:13:35:64:a8:45:09:4f:45:e9:fd:51:d4:bd:4a:b3: fe:14:bb:22:c0:f1:62:c1:91:df:37:6b:90:bf:84:ab:17:df: 5e:23:57:58:3f:e0:5e:30:11:d8:4a:1e:b7:0e:a6:57:61:e9: ff:ab:eb:1c:22:d1:90:2e:94:d9:57:64:f9:c7:bc:82:77:4d: 2e:b4:b7:16:a4:34:86:88:4c:96:72:fe:33:dd:61:81:3a:3c: aa:13:0f:ec:70:51:f5:b5:1d:0c:75:0d:cb:99:93:30:fa:00: ed:ea:0b:ce:78:96:14:dc:4f:ea:4f:fc:db:7a:58:92:92:33: 7d:72:e7:c3:e8:db:e7:be:3a:50:09:ec:82:37:61:81:6e:d4: 85:0a:12:eb:02:23:43:7e:da:59:50:ce:bb:ef:1d:45:42:a2: 6c:29:31:42 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjM0 MDBBQTZFNkM2OEIxM0REREM5QzAwQjgyNTg2MTI0MjczRkE5QjAeFw0yNTA4MjIw ODQzNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkxNTEwNkI4Nzc4OEU5 QkQyMTY0MzdERjI3MUI1NkM3NkFGQjE5QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC87wW/9vEr4aYpUczY+zWh+cOM32muFRSRwa2wiFnJ2KvURVER cNb6YUeejL6MEu6iN01eTkJiYi5bjMX1uEUcPFZZ9FTXn3bUO3KaYb3bHmYgRsCy 3sM7H76F8cxLpQLPnBgMCIEw1O+ASuyvfvFQh6adOq/QcKsZIl1/jKrtzo0XdDBB LJDU0rhncdhOSTnAzu9d3hqV60kLIvXq/YBcRjY5AVnmQuT/ZP+1ouJncbj+6obJ ZdOTgwjYnsW3nnhXn/6Jv8w9yyw17+NL1uxcFInbyv9HEk6JlNL79iVFns4WitbU CQSnirYDu1Up7K80wDiOeZNRBAq191Z080tXAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUkVEGuHeI6b0hZDffJxtWx2r7GcUwHwYDVR0jBBgwFoAUY0AKpubGixPd3JwA uCWGEkJz+pswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklTSU9O NFlFUy9ZMEFLcHViR2l4UGQzSndBdUNXR0VrSnotcHMuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1kwQUtwdWJHaXhQZDNKd0F1Q1dHRWtKei1wcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1ZJU0lPTjRZRVMva1ZFR3VIZUk2 YjBoWkRmZkp4dFd4MnI3R2NVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGd64zANBgkqhkiG9w0BAQsFAAOCAQEAEA6FiU4ArYyBt4JJapIVKS/L /qPV6x8svtZ1n/ep+RN1134pSHSJAyEDu8y5/UfbstdEbPsMzR+2zfG77wV4+nFs mMelTa5RvHnJAnYbTbsqQSKFqMx14NuSESJ4EzVkqEUJT0Xp/VHUvUqz/hS7IsDx YsGR3zdrkL+EqxffXiNXWD/gXjAR2Eoetw6mV2Hp/6vrHCLRkC6U2Vdk+ce8gndN LrS3FqQ0hohMlnL+M91hgTo8qhMP7HBR9bUdDHUNy5mTMPoA7eoLzniWFNxP6k/8 23pYkpIzfXLnw+jb5746UAnsgjdhgW7UhQoS6wIjQ37aWVDOu+8dRUKibCkxQg== -----END CERTIFICATE-----Generated at Sun Aug 24 13:38:07 2025 by rpki-client