This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Ocgd02FM9RPq4024Xm5ZXw7POxY.roa File: Ocgd02FM9RPq4024Xm5ZXw7POxY.roa (raw, json) Hash identifier: OKvYUY5ajPQzx6PEfhwocAUP8WQTleMePBeaUUkJrbI= Subject key identifier: 39:C8:1D:D3:61:4C:F5:13:EA:E3:4D:B8:5E:6E:59:5F:0E:CF:3B:16 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11A9 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ocgd02FM9RPq4024Xm5ZXw7POxY.roa Signing time: Mon 10 Feb 2025 14:27:36 +0000 ROA not before: Mon 10 Feb 2025 14:27:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 124.218.232.0/21 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 4521 (0x11a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=39C81DD3614CF513EAE34DB85E6E595F0ECF3B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:c1:0d:01:c7:5c:7f:a8:18:4c:44:d2:5c: d7:4f:8c:d5:c2:e4:d5:a8:92:7a:3e:77:fa:3c:42: 0e:5d:95:6c:1c:ab:c0:a7:46:b7:d2:88:74:16:1a: df:a9:5f:89:46:58:09:5d:42:2c:13:01:8b:4b:51: 3c:cc:74:36:0b:3e:4c:1d:d3:0e:fd:c8:98:d8:6c: f1:9e:7f:8d:42:c6:bd:94:b1:d3:3b:76:46:87:e6: fc:84:31:a2:5c:3e:ba:a5:a0:0b:55:68:db:a0:47: 55:c9:4a:cb:b4:ac:79:4e:4a:da:00:cb:b1:4d:89: 50:2f:7b:49:70:73:8e:d5:91:24:fc:6d:20:f4:f5: fb:c1:c0:c1:23:e7:88:9d:a3:3c:69:98:ef:f2:7f: db:b6:8e:66:a7:e0:f7:e3:2f:65:5a:33:e5:ea:aa: 5c:63:1d:ac:0b:a0:c8:08:a0:72:51:fa:d8:06:80: 5a:80:1f:31:5d:d8:d8:09:3b:20:bc:a9:a4:42:52: ca:1c:0d:6d:01:e6:d0:6f:e7:45:95:5f:6d:a4:eb: 51:f4:ff:b0:5e:07:b7:af:67:b9:24:69:6c:3d:4d: 92:a3:2f:4b:24:79:57:c0:6d:3d:08:22:f8:2a:f2: 11:15:e9:e3:3a:27:39:c5:14:6d:09:e8:cf:12:d1: 33:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C8:1D:D3:61:4C:F5:13:EA:E3:4D:B8:5E:6E:59:5F:0E:CF:3B:16 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ocgd02FM9RPq4024Xm5ZXw7POxY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.232.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:07:ac:ce:7e:4f:8e:f5:d4:38:bc:63:c4:42:08:eb:1a:54: b2:56:15:e0:aa:32:2b:02:79:ae:f8:ce:c1:1a:a6:dd:38:9d: 38:f5:f2:e9:3d:e9:ce:3d:25:a4:52:5c:d7:6c:91:b0:fd:3d: 26:7e:48:31:14:91:91:7a:0d:30:6a:62:77:80:50:d8:a5:26: eb:db:1b:3e:22:44:39:17:c3:b5:bf:c4:5e:e1:50:3b:b8:ec: 3f:9a:56:4f:b3:3c:52:17:79:08:e6:06:a4:59:7c:5f:93:e3: ab:26:8f:a3:1f:0a:54:b8:8e:4a:cc:29:ea:31:28:08:f0:b2: 61:31:fa:83:f7:cd:ee:48:b0:11:13:b7:10:1d:f2:65:10:8a: 4a:a2:e3:f8:1a:64:f6:c2:84:da:83:04:bf:10:b9:3b:d5:df: 5d:0e:64:08:b2:54:a1:54:d5:d4:25:f2:1e:ea:40:5a:ee:0c: b4:2c:86:77:18:fd:16:62:0e:4e:8a:96:35:ac:63:f1:53:72: 13:85:b8:5b:cb:cc:32:b1:5e:8d:c7:b8:c3:58:4b:2b:cc:6e: e2:a1:03:b2:bc:5b:4f:1d:94:77:93:98:01:26:00:82:6d:26: 90:ec:b0:c9:e7:d4:9a:23:54:f5:8b:e1:61:16:91:be:6f:4e: 11:e1:d4:e5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5QzgxREQzNjE0Q0Y1 MTNFQUUzNERCODVFNkU1OTVGMEVDRjNCMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMMcENAcdcf6gYTETSXNdPjNXC5NWokno+d/o8Qg5dlWwcq8Cn RrfSiHQWGt+pX4lGWAldQiwTAYtLUTzMdDYLPkwd0w79yJjYbPGef41Cxr2UsdM7 dkaH5vyEMaJcPrqloAtVaNugR1XJSsu0rHlOStoAy7FNiVAve0lwc47VkST8bSD0 9fvBwMEj54idozxpmO/yf9u2jman4PfjL2VaM+XqqlxjHawLoMgIoHJR+tgGgFqA HzFd2NgJOyC8qaRCUsocDW0B5tBv50WVX22k61H0/7BeB7evZ7kkaWw9TZKjL0sk eVfAbT0IIvgq8hEV6eM6JznFFG0J6M8S0TNhAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUOcgd02FM9RPq4024Xm5ZXw7POxYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL09jZ2QwMkZNOVJQcTQwMjRYbTVaWHc3 UE94WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN82ugwDQYJ KoZIhvcNAQELBQADggEBAA0HrM5+T4711Di8Y8RCCOsaVLJWFeCqMisCea74zsEa pt04nTj18uk96c49JaRSXNdskbD9PSZ+SDEUkZF6DTBqYneAUNilJuvbGz4iRDkX w7W/xF7hUDu47D+aVk+zPFIXeQjmBqRZfF+T46smj6MfClS4jkrMKeoxKAjwsmEx +oP3ze5IsBETtxAd8mUQikqi4/gaZPbChNqDBL8QuTvV310OZAiyVKFU1dQl8h7q QFruDLQshncY/RZiDk6KljWsY/FTchOFuFvLzDKxXo3HuMNYSyvMbuKhA7K8W08d lHeTmAEmAIJtJpDssMnn1JojVPWL4WEWkb5vThHh1OU= -----END CERTIFICATE-----Generated at Tue Dec 23 09:08:56 2025 by rpki-client