This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/oPRLCERsrnUgLyJ7OLW25jJBzHg.roa
File: oPRLCERsrnUgLyJ7OLW25jJBzHg.roa (raw, json)
Hash identifier: hAovYeuVabsccrjl/VDX1RVwHYY/VPSLu0M10xnlfic=
Subject key identifier: A0:F4:4B:08:44:6C:AE:75:20:2F:22:7B:38:B5:B6:E6:32:41:CC:78
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1300
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oPRLCERsrnUgLyJ7OLW25jJBzHg.roa
Signing time: Tue 02 Dec 2025 19:37:41 +0000
ROA not before: Tue 02 Dec 2025 19:37:41 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17809
IP address blocks: 203.222.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4864 (0x1300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 2 19:37:41 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=A0F44B08446CAE75202F227B38B5B6E63241CC78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:e0:ab:e9:64:0b:27:dc:04:e6:07:5f:ec:
26:1f:24:68:b4:26:0d:f1:5f:90:38:d7:39:79:0a:
bc:8b:02:f8:ea:32:49:53:fa:ba:ae:ba:12:03:d5:
4b:04:72:c6:c8:2a:f1:47:91:e6:5d:f4:52:6d:a7:
99:26:1b:bd:ba:72:62:71:21:27:81:09:7d:b6:76:
52:8e:43:1a:3c:91:c4:c5:43:0f:c8:40:be:d3:9b:
fa:81:0c:8a:7c:e4:81:c7:38:d8:6a:12:c0:ec:41:
bf:0f:0b:b1:e3:1e:e0:59:7c:7e:99:a4:30:7d:e0:
38:1b:88:0c:56:ce:c6:c3:a3:6b:77:51:21:5a:c9:
7a:61:f7:c3:49:7e:ab:13:97:6f:31:d0:e0:fd:c4:
9e:6f:2f:99:7f:75:19:dd:ab:d8:a9:c0:b1:ae:27:
af:1f:b2:96:64:aa:14:24:e1:a3:d5:7e:bc:83:63:
9f:f2:59:6d:d6:8c:ce:e0:de:4f:cd:26:cc:1b:5d:
8d:85:f5:16:b0:5f:55:26:cd:12:c9:47:55:7f:81:
21:14:a6:8f:cb:74:ce:b8:f0:88:b3:d9:82:0d:f8:
74:c8:f1:5a:fa:34:bc:20:51:3c:be:00:29:dd:cb:
6a:03:25:19:d5:c8:53:b5:c0:2a:f4:4f:77:f8:3c:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:4B:08:44:6C:AE:75:20:2F:22:7B:38:B5:B6:E6:32:41:CC:78
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oPRLCERsrnUgLyJ7OLW25jJBzHg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:63:f9:99:5c:51:c5:ba:7f:a9:34:79:4e:44:74:d1:6f:ab:
65:b5:1e:34:6a:13:ff:8f:e9:55:20:1b:78:5a:ed:5b:02:b1:
53:96:d0:b2:f0:34:74:82:b2:ad:d8:37:87:86:ed:0d:9f:06:
32:ad:db:89:ed:85:e1:6a:6d:e4:86:1c:d4:fd:d7:c4:05:ea:
2b:03:22:89:c2:a2:aa:e9:66:0e:34:ea:32:0e:dc:bc:c1:77:
5b:1f:29:54:4c:34:90:b0:c0:a0:c3:29:7e:d7:e4:c1:af:5b:
3f:6c:35:6f:a6:71:73:5d:b0:0a:dd:22:84:6d:1f:fe:45:cc:
99:dc:c7:67:91:aa:ae:fb:3a:0c:3a:ce:3f:fd:40:e2:53:ad:
60:cf:1e:da:3d:83:c0:ca:22:f7:aa:12:af:99:48:a1:6a:05:
67:8a:24:d3:75:b1:6f:a9:97:7e:47:cb:9c:3e:c9:cf:e8:4b:
2f:b1:2f:c9:ef:80:8e:f8:a6:8e:a3:4a:9b:31:e4:6d:d9:25:
28:98:74:2c:db:40:98:28:56:16:c5:c5:eb:7b:ec:89:a8:29:
39:6e:1e:ca:ff:1c:95:21:a9:56:a2:98:a8:dc:2f:dc:3b:dc:
02:c1:1f:ac:43:c0:ed:e3:9a:33:65:22:da:f4:c7:86:1d:49:
8a:2c:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:13:25 2025 by rpki-client