
$ rpki-client -vvf rpkica.twnic.tw/rpki/VISION4YES/0/3130332e3132322e3232372e302f32342d3234203d3e20313331363138.roa
File: 3130332e3132322e3232372e302f32342d3234203d3e20313331363138.roa (raw, json)
Hash identifier: X2loQ1JbKCqeWcOjYZ1pP8S0M3dhQIM7WiLMc1+Ob+E=
Subject key identifier: 41:16:CD:42:EC:81:15:36:B7:5A:58:25:46:EB:6B:B6:84:22:BB:69
Certificate issuer: /CN=80E31B34932B532C4E8E3C56961B54B65049E2EC
Certificate serial: 2BD3580DA492ED874753D60F8EC4178E1D437312
Authority key identifier: 80:E3:1B:34:93:2B:53:2C:4E:8E:3C:56:96:1B:54:B6:50:49:E2:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VISION4YES/0/3130332e3132322e3232372e302f32342d3234203d3e20313331363138.roa
Signing time: Mon 11 May 2026 17:06:15 +0000
ROA not before: Mon 11 May 2026 17:01:15 +0000
ROA not after: Mon 10 May 2027 17:06:15 +0000
asID: 131618
IP address blocks: 103.122.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.crl
rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d3:58:0d:a4:92:ed:87:47:53:d6:0f:8e:c4:17:8e:1d:43:73:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80E31B34932B532C4E8E3C56961B54B65049E2EC
Validity
Not Before: May 11 17:01:15 2026 GMT
Not After : May 10 17:06:15 2027 GMT
Subject: CN=4116CD42EC811536B75A582546EB6BB68422BB69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:71:2c:8d:02:23:0f:3e:77:21:11:87:f7:
06:ee:29:dc:a1:8d:66:da:da:82:af:16:1f:13:fc:
1b:c5:f4:0f:82:3f:15:b9:7f:c8:31:f2:9b:7b:e3:
8f:df:c5:08:cf:4e:0a:53:a9:50:b3:4c:a4:55:b7:
ca:ec:09:7e:f5:83:37:e1:64:a2:9f:7b:c6:a1:b7:
32:0d:02:c5:7d:af:7a:96:75:ec:81:d4:7b:65:13:
57:14:fc:f4:23:d5:4a:30:76:4f:39:1d:09:79:e0:
db:97:61:e3:6c:dd:c0:98:f5:57:fb:b3:3c:1c:fc:
a7:93:7c:42:41:c5:c8:01:e7:8a:2f:08:73:75:10:
99:0c:9c:fc:ff:ef:07:00:ee:d1:8b:27:f7:0b:7d:
d8:61:0c:a2:c4:c1:3d:b7:16:a1:ac:0b:94:b8:f3:
97:87:dd:98:0a:ed:f9:b9:35:ce:84:fa:78:0c:1b:
3e:31:bb:7c:37:08:c4:f1:d2:48:87:27:7d:0e:bb:
12:4f:7c:bd:c0:f6:8a:e7:8a:3e:c0:29:79:d4:71:
43:a3:3b:62:a3:0c:68:e5:66:e8:ba:49:b8:0e:ad:
b2:bb:bc:c4:b5:84:ea:bb:af:e0:84:e4:4d:28:da:
51:ec:e3:e6:32:0b:23:57:12:b6:51:77:79:1b:b5:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:16:CD:42:EC:81:15:36:B7:5A:58:25:46:EB:6B:B6:84:22:BB:69
X509v3 Authority Key Identifier:
keyid:80:E3:1B:34:93:2B:53:2C:4E:8E:3C:56:96:1B:54:B6:50:49:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISION4YES/0/3130332e3132322e3232372e302f32342d3234203d3e20313331363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.227.0/24
Signature Algorithm: sha256WithRSAEncryption
98:59:82:ee:36:50:e8:f1:1a:56:7c:65:18:dc:ca:1c:fd:be:
1c:d1:ee:11:1d:a2:ab:c1:11:3f:04:5c:81:da:a0:07:f2:1d:
9a:39:f1:f7:2b:96:ec:01:59:c6:f9:29:31:18:85:bd:f1:82:
c4:67:2a:5d:eb:99:27:b3:47:a7:a0:d7:d9:bc:50:ff:d6:e7:
9a:27:c0:54:32:de:ab:6c:5b:a9:e5:72:ee:28:e9:26:41:92:
2d:2a:73:ce:26:59:04:19:18:ba:5f:6d:d6:81:6d:cc:ca:81:
1c:72:9a:4b:c5:f8:90:4f:27:cc:0b:a1:51:c3:44:ac:5d:ba:
3f:e8:a4:16:b8:d7:cb:61:57:eb:a2:e8:bc:5e:7e:e3:c0:8d:
68:2f:dc:2f:3e:c0:64:b3:06:62:6b:ae:af:96:60:48:f1:29:
a5:ce:a4:bd:a8:fc:8a:7f:8a:b2:cd:d4:34:ab:31:f3:d9:cf:
bb:20:b4:ff:a2:90:d4:7b:e6:0c:20:d3:5d:a6:bb:e7:da:68:
f8:5d:67:0f:ab:e6:b8:2d:3e:4b:51:5d:25:2e:8a:8a:7d:e5:
ce:16:ed:a8:91:48:c0:50:51:3e:ea:18:02:83:50:5c:3e:9d:
4b:d3:7f:28:e7:d5:9f:5e:7e:2e:c7:ed:94:74:19:75:2a:9e:
8a:fb:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:58 2026 by rpki-client