This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/JTr2bWcbHV_TGWw-HHQ61JBhE34.roa
File: JTr2bWcbHV_TGWw-HHQ61JBhE34.roa (raw, json)
Hash identifier: VOt1AXoRk+cv17dyyn2OUBPwMyB3ryaYc2z9g485d9g=
Subject key identifier: 25:3A:F6:6D:67:1B:1D:5F:D3:19:6C:3E:1C:74:3A:D4:90:61:13:7E
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 12DA
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/JTr2bWcbHV_TGWw-HHQ61JBhE34.roa
Signing time: Fri 21 Nov 2025 03:19:32 +0000
ROA not before: Fri 21 Nov 2025 03:19:32 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 4780
IP address blocks: 111.67.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 01:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4826 (0x12da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 21 03:19:32 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=253AF66D671B1D5FD3196C3E1C743AD49061137E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:dd:a9:22:68:43:40:a8:cd:40:e2:df:ef:
87:88:a6:6f:49:b8:0c:3e:6a:5a:a6:5b:cf:83:28:
f2:b0:ee:c4:d2:a9:f4:08:d4:ab:57:09:a2:1e:ab:
73:9c:88:4d:d4:e3:29:d3:7d:22:21:fe:7a:47:96:
be:74:34:f1:13:ff:44:a6:df:47:7a:a8:e3:38:d3:
73:62:4d:74:27:ca:af:64:7c:a2:05:67:a7:31:d8:
b5:6d:25:13:ca:90:01:74:56:3e:4e:c5:ed:65:d7:
4a:f3:9a:39:80:6d:90:23:a3:e9:22:08:1d:e6:ee:
94:e8:9b:13:c4:f0:c3:d3:ee:f5:e2:f9:c4:fe:d5:
de:25:0f:5c:ec:fb:a4:15:39:1e:b7:8e:d8:60:6f:
45:0d:0e:25:df:e7:2e:4e:81:0f:98:5a:bc:37:3f:
0d:c2:6b:dc:7a:9f:24:60:5a:fb:52:e6:06:d7:58:
24:03:d4:2c:9f:af:0e:bc:d1:cc:95:96:be:f5:76:
35:b5:e4:cc:2f:f0:b5:f2:99:1f:a1:2d:40:90:3c:
79:b5:96:93:a2:d3:3a:c6:3f:6b:5d:a1:92:8d:6e:
22:5d:f5:ff:d5:a0:76:04:62:78:82:f8:13:10:e6:
d4:c1:5a:00:c4:dd:33:a6:91:1f:9e:f9:dd:ee:fa:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:F6:6D:67:1B:1D:5F:D3:19:6C:3E:1C:74:3A:D4:90:61:13:7E
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/JTr2bWcbHV_TGWw-HHQ61JBhE34.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.67.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:b5:8f:b6:17:24:84:af:45:a3:7d:79:21:4f:a4:95:b5:82:
6b:9b:d8:02:4b:00:27:aa:29:6b:df:0f:96:12:63:03:49:73:
ed:cf:d6:92:e2:44:f3:ca:8b:0c:78:32:60:fc:8b:a0:c6:b2:
93:03:72:f9:7b:fe:d3:88:1a:b8:e3:9c:4a:d1:e2:18:3a:7f:
65:89:b3:6b:ac:fe:a0:88:31:d0:7d:64:7b:74:0a:25:12:9d:
11:8f:87:cd:54:22:90:fc:76:c1:76:6e:0e:ef:46:38:28:48:
d7:5d:5b:63:23:d7:80:78:98:67:04:53:ad:dc:74:97:ef:7c:
94:5b:eb:7a:86:41:1c:17:ef:c7:57:c6:3a:a6:15:3a:a9:8b:
a4:cb:f6:47:b1:3e:b1:9f:da:e9:c6:c8:6c:c5:62:c4:88:d7:
be:16:89:ba:9a:9b:39:62:1e:2e:f8:74:92:92:74:95:42:ba:
ed:0b:fa:4b:be:f6:3a:3c:a1:68:ba:4c:bb:50:ed:6a:96:42:
4b:7f:28:47:8b:32:2c:2a:ab:5c:a9:22:c8:ef:a6:25:ce:32:
d6:87:f1:08:6b:a6:59:f8:65:d7:66:46:23:9a:a9:15:b5:17:
57:32:b6:b1:19:8c:8a:76:89:d2:5e:b9:c5:09:7f:c0:a1:b2:
0e:92:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:31:58 2025 by rpki-client