$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/OsdrqJ2_3VfY5tu3idQbPTdWr20.roa File: OsdrqJ2_3VfY5tu3idQbPTdWr20.roa (raw, json) Hash identifier: 0hDgsXZ20hq1Z7VdfpEcGG27x701uTbSC7+OEapdFVE= Subject key identifier: 3A:C7:6B:A8:9D:BF:DD:57:D8:E6:DB:B7:89:D4:1B:3D:37:56:AF:6D Certificate issuer: /CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B Certificate serial: 0D94 Authority key identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/OsdrqJ2_3VfY5tu3idQbPTdWr20.roa Signing time: Fri 22 Aug 2025 08:43:58 +0000 ROA not before: Fri 22 Aug 2025 08:43:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9311 IP address blocks: 103.122.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3476 (0xd94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B Validity Not Before: Aug 22 08:43:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3AC76BA89DBFDD57D8E6DBB789D41B3D3756AF6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:42:d9:85:24:2b:99:f7:23:ca:2d:d9:06: 02:a9:df:02:32:30:93:79:d5:d7:36:b4:8d:59:6a: 12:76:c6:6a:f5:71:23:66:20:d8:5c:f2:48:b7:5d: 48:e5:4e:ef:b3:9f:82:d4:f6:aa:67:ea:0e:24:1f: fe:9c:15:37:6b:a0:a3:be:dd:79:20:75:cf:56:8d: 66:22:58:f5:51:f3:2e:f8:73:64:70:12:38:fb:50: 38:84:bb:10:29:a1:b5:58:7c:c5:47:9f:c3:0c:f5: 39:14:73:9a:71:39:af:72:c8:7f:9f:a9:5b:7c:4d: d4:43:40:35:ce:06:06:64:3a:b8:b1:de:05:f6:01: 66:a0:d3:a6:9b:61:ff:bb:7a:01:d1:3a:98:a0:79: 2a:d9:48:f9:8d:71:ca:fe:89:17:ee:da:a2:9d:27: 41:fd:37:8a:03:6c:ec:0a:2a:54:fa:41:ff:99:1b: fc:63:67:c2:49:0c:14:ce:c2:54:cf:4d:83:af:e8: ee:f8:0e:5f:cd:8d:32:1f:11:3b:0d:40:a9:ec:20: 7e:f4:54:f9:dd:4c:16:5b:88:24:f8:f3:82:72:7a: e0:71:9b:a0:bd:56:aa:9e:33:f5:66:74:a7:7c:ab: 6c:d6:99:fc:f5:eb:04:5c:97:32:bf:6c:03:85:6f: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C7:6B:A8:9D:BF:DD:57:D8:E6:DB:B7:89:D4:1B:3D:37:56:AF:6D X509v3 Authority Key Identifier: keyid:63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/OsdrqJ2_3VfY5tu3idQbPTdWr20.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.224.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:db:6c:88:a4:5f:04:8f:18:a6:d2:18:fa:01:30:75:94:8c: 7b:be:5d:7d:f9:60:5b:b2:00:1f:cb:34:9a:c8:bb:4e:70:0a: c7:d9:c7:fa:8f:04:ed:ad:c5:2a:7d:16:22:d0:70:62:ca:52: f7:f3:58:a8:d7:1f:c8:36:23:fd:53:ba:94:16:43:69:17:a7: 53:85:dd:9d:f4:6c:46:22:ac:04:59:04:2a:53:07:50:e9:93: 1f:7b:09:8f:51:ce:74:0c:a9:95:ca:6b:4d:ef:53:29:a7:a8: c3:74:c9:6b:17:5d:28:93:6b:f8:63:b8:8f:c8:eb:75:c7:87: 48:43:c4:10:70:fe:c1:7d:2d:23:96:ef:80:bd:15:11:e1:35: fa:5b:12:de:91:94:2e:69:46:85:3e:53:2d:d9:3a:a5:2d:d1: 9f:17:87:37:ef:e3:b9:41:6b:bf:e6:80:69:69:8a:6d:8e:e4: 51:1d:df:64:4d:c7:07:2b:fe:13:d7:4f:62:3c:23:66:a3:f1: d6:a6:60:92:31:76:a3:df:f5:dd:ed:98:43:b9:ed:32:08:df: fe:b8:c8:a2:0a:0e:84:fc:41:8d:47:6c:d5:eb:2b:c1:22:d3: a2:10:3b:3b:dc:66:df:fe:7d:f1:a2:8c:89:a8:4c:20:c8:ce: 98:93:b6:0d -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjM0 MDBBQTZFNkM2OEIxM0REREM5QzAwQjgyNTg2MTI0MjczRkE5QjAeFw0yNTA4MjIw ODQzNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNBQzc2QkE4OURCRkRE NTdEOEU2REJCNzg5RDQxQjNEMzc1NkFGNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVrULZhSQrmfcjyi3ZBgKp3wIyMJN51dc2tI1ZahJ2xmr1cSNm INhc8ki3XUjlTu+zn4LU9qpn6g4kH/6cFTdroKO+3Xkgdc9WjWYiWPVR8y74c2Rw Ejj7UDiEuxApobVYfMVHn8MM9TkUc5pxOa9yyH+fqVt8TdRDQDXOBgZkOrix3gX2 AWag06abYf+7egHROpigeSrZSPmNccr+iRfu2qKdJ0H9N4oDbOwKKlT6Qf+ZG/xj Z8JJDBTOwlTPTYOv6O74Dl/NjTIfETsNQKnsIH70VPndTBZbiCT484JyeuBxm6C9 VqqeM/VmdKd8q2zWmfz16wRclzK/bAOFb28VAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUOsdrqJ2/3VfY5tu3idQbPTdWr20wHwYDVR0jBBgwFoAUY0AKpubGixPd3JwA uCWGEkJz+pswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklTSU9O NFlFUy9ZMEFLcHViR2l4UGQzSndBdUNXR0VrSnotcHMuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1kwQUtwdWJHaXhQZDNKd0F1Q1dHRWtKei1wcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1ZJU0lPTjRZRVMvT3NkcnFKMl8z VmZZNXR1M2lkUWJQVGRXcjIwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGd64DANBgkqhkiG9w0BAQsFAAOCAQEAnttsiKRfBI8YptIY+gEwdZSM e75dfflgW7IAH8s0msi7TnAKx9nH+o8E7a3FKn0WItBwYspS9/NYqNcfyDYj/VO6 lBZDaRenU4XdnfRsRiKsBFkEKlMHUOmTH3sJj1HOdAyplcprTe9TKaeow3TJaxdd KJNr+GO4j8jrdceHSEPEEHD+wX0tI5bvgL0VEeE1+lsS3pGULmlGhT5TLdk6pS3R nxeHN+/juUFrv+aAaWmKbY7kUR3fZE3HByv+E9dPYjwjZqPx1qZgkjF2o9/13e2Y Q7ntMgjf/rjIogoOhPxBjUds1esrwSLTohA7O9xm3/598aKMiahMIMjOmJO2DQ== -----END CERTIFICATE-----Generated at Sat Sep 6 13:39:43 2025 by rpki-client