This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S590tDPTYA1ha28LUvr3nPSIsSk.roa
File: S590tDPTYA1ha28LUvr3nPSIsSk.roa (raw, json)
Hash identifier: 4de7pMTDe1IBtupv7VYijUVRpjG3IzhvH5pxaruunOY=
Subject key identifier: 4B:9F:74:B4:33:D3:60:0D:61:6B:6F:0B:52:FA:F7:9C:F4:88:B1:29
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 13D1
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S590tDPTYA1ha28LUvr3nPSIsSk.roa
Signing time: Fri 22 Aug 2025 08:57:18 +0000
ROA not before: Fri 22 Aug 2025 08:57:18 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131627
IP address blocks: 150.116.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 06:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5073 (0x13d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 22 08:57:18 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4B9F74B433D3600D616B6F0B52FAF79CF488B129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:f6:82:59:a0:7d:98:90:0c:67:61:cf:de:
c4:f2:ae:72:6c:ed:38:c0:ab:cb:76:35:37:23:a9:
4a:2a:61:65:7d:86:b8:c4:92:87:76:41:8d:ed:bb:
27:d3:8d:58:b3:07:99:bc:ae:dd:7a:19:ef:75:02:
4c:10:70:37:35:bd:c6:ac:f1:17:71:5c:df:b6:f5:
6a:66:31:fd:a9:0f:62:9f:f7:24:a9:06:a0:8a:f4:
84:bf:88:46:12:38:8b:a3:9e:83:b5:e1:65:22:b4:
78:0a:2e:f5:6d:cf:55:9e:4e:08:18:33:ae:e5:d7:
74:ec:78:76:d9:39:4f:14:ea:eb:73:4c:59:77:ba:
d1:15:55:9a:7d:50:4f:5e:cb:3f:d2:cb:84:23:98:
50:e4:61:a1:69:4f:f1:2f:ae:1a:22:ef:29:61:70:
a2:60:93:cf:69:ee:4d:8d:3f:bd:0d:29:dc:f9:a5:
00:5b:30:8d:18:f0:d6:b5:62:99:e4:53:49:d2:4b:
2f:2f:23:59:fc:65:8d:87:86:13:a1:17:fc:2b:87:
f8:7d:45:13:0f:dc:dd:a3:63:a7:4c:e8:66:46:0f:
47:5a:ae:c6:19:8c:6e:ff:d4:23:4d:71:bc:61:6c:
15:46:8f:c5:1c:c0:c3:c9:c7:14:20:e7:01:3a:a9:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9F:74:B4:33:D3:60:0D:61:6B:6F:0B:52:FA:F7:9C:F4:88:B1:29
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S590tDPTYA1ha28LUvr3nPSIsSk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.239.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e9:cc:36:46:32:24:71:2b:df:9a:01:9e:04:cc:07:70:f7:
1f:de:8f:0b:b6:38:ce:c2:c0:06:90:85:15:b1:a3:c2:8a:a2:
7a:4e:d0:8a:74:6b:2f:26:96:46:79:4e:9e:0b:6c:f0:35:0f:
0e:36:72:41:92:83:bd:1c:f5:a4:83:3c:fc:9d:03:4a:1d:96:
1e:8f:68:77:7c:fa:9e:fc:e9:3b:c3:87:d3:46:61:dd:3d:d1:
99:f9:76:a0:cd:8c:22:37:7e:d1:19:8b:a1:69:bc:62:0f:20:
21:c8:69:b4:e6:09:52:e2:a0:17:53:a5:c4:f8:a7:7a:b6:c0:
46:18:11:c4:7d:d7:dc:19:96:96:e5:1a:20:d3:97:64:56:4d:
7b:0a:e1:09:4a:a8:a5:be:3a:98:83:1d:ce:40:9f:c7:cf:c3:
80:c5:de:fe:49:1b:de:a2:af:ff:9f:72:c6:13:70:05:a2:fa:
9f:b3:dc:52:58:16:21:af:c7:8e:ee:fa:8c:46:9d:f3:01:ac:
47:dd:5a:77:a0:fc:e8:e3:73:e5:e5:84:98:3b:6f:2f:34:b4:
72:b9:66:f4:84:c3:9e:3b:a5:76:f5:11:17:de:e6:1b:fc:f3:
5e:85:a6:ba:b1:a9:7e:7f:ab:e7:91:25:2d:be:cc:04:65:df:
04:97:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:41:26 2025 by rpki-client