This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3jj5CfpxFDS9wjNCiQLxJY1D3jA.cer File: 3jj5CfpxFDS9wjNCiQLxJY1D3jA.cer (raw, json) Hash identifier: tPFLAoWhA0/dVzS7Sa68zR7EWFQNS54WhrttjQxD3u8= Subject key identifier: DE:38:F9:09:FA:71:14:34:BD:C2:33:42:89:02:F1:25:8D:43:DE:30 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3F14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/3jj5CfpxFDS9wjNCiQLxJY1D3jA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 06 Nov 2025 03:18:15 +0000 Certificate not after: Fri 30 Oct 2026 15:30:19 +0000 Subordinate resources: AS: 24162 IP: 2402:3560::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16148 (0x3f14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Nov 6 03:18:15 2025 GMT Not After : Oct 30 15:30:19 2026 GMT Subject: CN=DE38F909FA711434BDC233428902F1258D43DE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:0e:17:cc:26:5c:ce:23:9e:c6:fc:91:2c: a4:12:8c:ba:ee:27:b0:06:95:84:5d:a6:cd:3e:63: cc:58:11:ee:68:86:38:4b:33:e2:64:85:db:02:d1: 15:8f:fc:52:5d:4f:74:15:34:ba:95:5a:a3:ed:88: 3b:43:36:44:15:fd:d1:93:48:25:c0:3e:54:25:df: 78:a3:3c:c4:72:c6:68:e6:6a:81:30:c0:f8:58:13: 88:25:3d:2c:d2:b2:4b:b8:57:15:ad:65:d5:d3:1a: f1:4f:72:c7:11:8c:20:a6:5f:b9:fa:4e:eb:d0:7e: 28:3f:8b:ae:cd:a2:09:36:ff:33:1c:16:a3:5d:30: 79:b6:78:c2:3a:a7:1d:74:e9:4f:3a:e9:f3:0b:59: 9b:7b:60:c9:b7:89:02:fe:e4:44:66:08:53:c7:5e: 8b:03:97:b5:35:b9:05:e1:fe:5c:3f:e5:cc:02:ca: 95:ff:fe:0c:f0:3a:ea:db:01:1e:3d:44:b4:f6:73: db:6b:61:1b:79:15:4b:4f:39:5d:79:dd:87:72:1d: da:95:68:07:63:bd:23:15:e7:6a:4a:a5:fb:ad:e3: a5:ea:18:0d:56:0b:b5:2b:4e:8c:af:72:97:9a:c2: 24:9f:59:45:2d:92:35:67:a0:b4:71:c8:10:04:00: f0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:38:F9:09:FA:71:14:34:BD:C2:33:42:89:02:F1:25:8D:43:DE:30 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/3jj5CfpxFDS9wjNCiQLxJY1D3jA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24162 sbgp-ipAddrBlock: critical IPv6: 2402:3560::/32 Signature Algorithm: sha256WithRSAEncryption 57:44:61:3e:c4:9e:92:0e:e3:53:d3:4a:ba:fb:26:6e:c6:38: 98:ce:18:cd:3d:b1:75:90:07:6f:f0:b6:e9:15:56:8c:87:5c: 29:34:9c:66:13:3e:26:f0:70:a5:a8:6b:6d:0a:08:3a:fe:d3: 24:66:8c:49:6d:e2:b4:8c:54:73:7b:5f:b6:b7:c5:eb:31:e6: 10:0d:e8:0a:cc:33:15:8f:d5:90:d1:45:40:e6:e4:84:bb:ae: 0d:4d:6c:20:38:e0:10:1d:66:fc:6e:44:89:55:c4:99:f2:bd: 81:ec:8e:95:4b:de:44:8e:2d:dc:53:15:41:42:e2:9d:81:3f: 7d:e6:ce:56:8f:6b:cf:1d:b3:34:ff:a2:ca:9e:71:1e:dd:1c: f1:04:e1:bd:b6:93:2e:20:68:7d:94:6e:01:92:0a:dc:b5:a3: d6:88:69:4a:46:e9:39:bd:2d:cb:3f:45:b4:c5:b0:79:01:6a: 19:1e:45:9a:ea:c2:64:9c:e7:ba:8e:44:10:73:16:6e:c1:bc: f2:94:72:3f:c1:41:31:af:07:12:3a:ea:69:79:2f:7d:97:59: e3:5c:85:e8:0a:8b:8a:d9:1d:1c:9c:09:15:74:f0:99:7c:3b: 65:60:96:a8:4c:38:c2:2e:b4:2e:41:8d:de:7c:f2:e8:45:09: fc:3c:8a:c6 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICPxQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MTEwNjAzMTgxNVoXDTI2MTAzMDE1MzAxOVowMzEx MC8GA1UEAxMoREUzOEY5MDlGQTcxMTQzNEJEQzIzMzQyODkwMkYxMjU4RDQzREUz MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2QDhfMJlzOI57G/JEs pBKMuu4nsAaVhF2mzT5jzFgR7miGOEsz4mSF2wLRFY/8Ul1PdBU0upVao+2IO0M2 RBX90ZNIJcA+VCXfeKM8xHLGaOZqgTDA+FgTiCU9LNKyS7hXFa1l1dMa8U9yxxGM IKZfufpO69B+KD+Lrs2iCTb/MxwWo10webZ4wjqnHXTpTzrp8wtZm3tgybeJAv7k RGYIU8deiwOXtTW5BeH+XD/lzALKlf/+DPA66tsBHj1EtPZz22thG3kVS085XXnd h3Id2pVoB2O9IxXnakql+63jpeoYDVYLtStOjK9yl5rCJJ9ZRS2SNWegtHHIEAQA 8EkCAwEAAaOCAmwwggJoMB0GA1UdDgQWBBTeOPkJ+nEUNL3CM0KJAvEljUPeMDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1hJLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L01JTkdYSS8zamo1Q2ZweEZEUzl3ak5DaVFMeEpZMUQzakEubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAl5iMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAI1YDANBgkqhkiG9w0BAQsFAAOCAQEAV0RhPsSekg7jU9NKuvsmbsY4mM4Y zT2xdZAHb/C26RVWjIdcKTScZhM+JvBwpahrbQoIOv7TJGaMSW3itIxUc3tftrfF 6zHmEA3oCswzFY/VkNFFQObkhLuuDU1sIDjgEB1m/G5EiVXEmfK9geyOlUveRI4t 3FMVQULinYE/febOVo9rzx2zNP+iyp5xHt0c8QThvbaTLiBofZRuAZIK3LWj1ohp SkbpOb0tyz9FtMWweQFqGR5FmurCZJznuo5EEHMWbsG88pRyP8FBMa8HEjrqaXkv fZdZ41yF6AqLitkdHJwJFXTwmXw7ZWCWqEw4wi60LkGN3nzy6EUJ/DyKxg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:03 2025 by rpki-client