This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/S12NpOGXvvKUI2bSTCU_AKD3u0w.roa
File: S12NpOGXvvKUI2bSTCU_AKD3u0w.roa (raw, json)
Hash identifier: aPCx3RI0WTGEguPmZN3oA60SVYQc9wCfTBezweumYk0=
Subject key identifier: 4B:5D:8D:A4:E1:97:BE:F2:94:23:66:D2:4C:25:3F:00:A0:F7:BB:4C
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 122C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/S12NpOGXvvKUI2bSTCU_AKD3u0w.roa
Signing time: Fri 22 Aug 2025 08:49:04 +0000
ROA not before: Fri 22 Aug 2025 08:49:04 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17809
IP address blocks: 203.222.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 06:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4652 (0x122c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 22 08:49:04 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4B5D8DA4E197BEF2942366D24C253F00A0F7BB4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:e8:96:0b:b4:ae:dc:76:05:36:4b:ba:59:
f1:26:32:da:bf:1e:ad:2a:10:d2:32:54:e4:58:bb:
ca:0e:ca:0e:5b:22:05:b2:80:c5:4a:97:3f:a9:d1:
92:d2:4c:79:e7:e3:de:eb:84:cf:f1:3f:f9:76:5d:
7f:b3:75:c4:79:be:1f:16:2a:be:12:d6:1f:0d:7c:
7e:1a:35:aa:83:ac:a1:56:6c:37:7d:d7:8e:a4:41:
64:d5:be:cd:91:bc:eb:78:01:50:c0:d3:0a:83:1f:
35:e7:5a:83:71:29:63:59:86:19:b8:f1:ef:a0:b4:
ce:27:ec:fc:70:c8:a9:35:e5:cd:fb:cf:29:3a:2a:
fc:cb:e4:8d:80:34:13:54:c2:18:5a:ee:d3:80:29:
c5:e8:45:84:27:21:c7:1d:28:16:46:f7:5c:f9:04:
a6:18:53:16:50:c9:de:c6:71:1c:6f:38:3b:3c:be:
e7:91:9f:f0:c5:56:0e:00:03:1b:d5:65:1c:71:93:
5c:83:d8:7a:3f:9a:65:c5:d9:41:93:a5:bf:2f:cf:
63:c8:f3:65:12:db:ab:a1:22:f6:ac:fa:f1:18:e8:
d5:60:55:8b:87:38:3e:9a:16:0e:f1:2f:3c:2e:03:
37:11:a4:e0:eb:a8:d8:bf:4d:72:b7:c5:50:ea:90:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5D:8D:A4:E1:97:BE:F2:94:23:66:D2:4C:25:3F:00:A0:F7:BB:4C
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/S12NpOGXvvKUI2bSTCU_AKD3u0w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:02:0d:08:18:e3:78:5d:f2:54:cc:f0:6b:ad:46:35:cb:35:
3a:67:36:26:9e:b3:fb:d4:08:e9:7e:61:95:04:18:ba:2a:6c:
2e:65:9e:6c:bb:27:c6:5e:84:51:dd:66:52:b2:b4:03:4f:4a:
fd:7c:02:96:22:38:bf:e7:4c:1f:84:70:9c:bb:4e:fc:a1:9e:
f2:19:81:5f:8b:a0:46:dd:ca:3e:b1:04:14:2f:a3:de:ee:d1:
76:05:8f:a4:bc:b7:42:26:c0:61:2c:27:0a:8c:1c:1a:46:61:
03:60:6c:da:b9:d4:a7:5b:40:8f:f0:b7:42:ef:c9:1d:c2:03:
73:42:0b:88:e8:2e:f5:18:57:a6:71:d3:81:68:66:12:9b:23:
52:ee:96:51:43:fe:36:87:5c:bf:3b:e7:9d:8c:21:ab:a5:ef:
7f:e1:2d:d8:0f:ff:fd:63:bb:0f:35:55:7f:21:8a:04:28:db:
8b:69:92:22:93:6a:e1:94:7c:48:8b:37:1b:77:d0:a7:cd:67:
29:06:27:8d:31:d9:e6:57:a6:a4:30:d4:f0:86:d6:19:e4:3c:
7a:7c:c3:02:f7:cf:b5:22:cc:1a:fc:73:4c:1d:8a:04:90:c0:
af:3d:ed:29:fb:9d:b9:b5:8a:74:93:55:b9:77:a1:e8:7e:05:
c8:8d:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:11:47 2025 by rpki-client