This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/U35zTOumWfEL99IJzAFhbENgcYY.roa
File: U35zTOumWfEL99IJzAFhbENgcYY.roa (raw, json)
Hash identifier: /RCkf59EqRgA1F2q9R2caeeg+3uEMVEmlzEajKKYNWE=
Subject key identifier: 53:7E:73:4C:EB:A6:59:F1:0B:F7:D2:09:CC:01:61:6C:43:60:71:86
Certificate issuer: /CN=FD65047793BD3817F2694DCC2A6FEE124729F4DD
Certificate serial: 0B
Authority key identifier: FD:65:04:77:93:BD:38:17:F2:69:4D:CC:2A:6F:EE:12:47:29:F4:DD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_WUEd5O9OBfyaU3MKm_uEkcp9N0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/U35zTOumWfEL99IJzAFhbENgcYY.roa
Signing time: Wed 21 Jan 2026 17:17:03 +0000
ROA not before: Wed 21 Jan 2026 17:17:03 +0000
ROA not after: Fri 15 Jan 2027 15:30:19 +0000
asID: 18044
IP address blocks: 2402:4920::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/_WUEd5O9OBfyaU3MKm_uEkcp9N0.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/_WUEd5O9OBfyaU3MKm_uEkcp9N0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/_WUEd5O9OBfyaU3MKm_uEkcp9N0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 08:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD65047793BD3817F2694DCC2A6FEE124729F4DD
Validity
Not Before: Jan 21 17:17:03 2026 GMT
Not After : Jan 15 15:30:19 2027 GMT
Subject: CN=537E734CEBA659F10BF7D209CC01616C43607186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:fc:a3:e5:7e:14:49:4b:f0:fe:4c:82:35:
c7:3f:38:b3:88:a0:bb:fd:32:fc:a3:85:37:6a:96:
1c:c3:93:ce:46:d8:c8:b4:5c:ae:c1:81:7a:05:d8:
55:4b:54:2c:ca:a3:c4:36:9d:3a:b3:c6:b7:3c:37:
e3:f5:5e:0a:9f:5a:4a:26:c0:7f:54:f6:65:83:48:
1f:5c:df:89:4a:3d:53:dd:0b:7e:fb:53:82:b3:e3:
3d:aa:19:30:7a:16:e8:c4:ca:fd:85:c2:ef:69:27:
a1:09:04:44:20:af:89:2f:c9:16:79:1c:7a:cd:8a:
48:cc:26:c0:dc:c9:dd:55:44:80:39:86:8d:fb:8e:
76:f6:c1:34:19:2e:29:17:28:10:e7:d7:04:cf:48:
25:a8:64:c6:a7:30:80:9c:4d:e6:cf:d7:80:01:b3:
72:42:1e:d8:61:71:dd:12:7a:a1:e0:38:21:89:29:
07:5c:e9:80:a8:54:70:09:08:13:6f:12:97:9f:57:
ed:59:98:4b:a0:ea:7d:80:ce:df:cf:03:b9:d5:c6:
ba:cb:12:9e:8e:10:0a:00:03:05:39:be:e1:e5:94:
67:04:5c:3a:15:e1:63:e9:8c:35:e4:ab:ca:97:4e:
8d:de:74:5f:c6:1a:be:24:10:2b:8e:18:75:d2:a9:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7E:73:4C:EB:A6:59:F1:0B:F7:D2:09:CC:01:61:6C:43:60:71:86
X509v3 Authority Key Identifier:
keyid:FD:65:04:77:93:BD:38:17:F2:69:4D:CC:2A:6F:EE:12:47:29:F4:DD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/_WUEd5O9OBfyaU3MKm_uEkcp9N0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_WUEd5O9OBfyaU3MKm_uEkcp9N0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/U35zTOumWfEL99IJzAFhbENgcYY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4920::/32
Signature Algorithm: sha256WithRSAEncryption
c2:ba:ac:c5:80:4d:23:2f:8d:98:d5:49:9d:03:d4:7b:1a:84:
bb:05:89:14:af:cb:1e:b6:df:77:ba:04:d7:df:c2:7d:ad:61:
7e:82:15:81:7a:0a:75:30:02:a4:fd:7a:2e:2e:ab:1d:39:e7:
8d:0a:5e:13:ae:4b:6a:c6:ba:a0:29:d2:9c:35:c2:b8:01:a2:
92:a8:dc:d8:23:4a:cb:11:7e:78:3c:eb:24:04:07:32:a8:a9:
28:2e:e9:af:c9:51:44:ef:e9:0b:94:c9:7b:ee:94:42:ae:fa:
e4:a4:47:ff:af:d4:b0:52:fb:16:be:9f:b5:fa:a5:5e:72:0a:
e5:9e:54:21:42:78:6e:43:31:1e:fe:bb:49:a5:d5:2b:5c:43:
df:96:46:05:99:f8:b1:9a:57:d4:20:4b:87:2d:09:7f:a4:4c:
d2:16:2f:3f:06:4e:9c:a4:f2:e1:6a:bf:3c:c9:ca:23:70:65:
6d:11:42:b5:ee:d7:70:9d:ab:20:08:98:a1:e1:64:fd:e4:72:
5d:ad:7f:c8:48:bb:60:f1:ef:d8:dc:f7:cb:b5:23:13:94:da:
ad:a6:bc:13:c2:20:c9:74:4f:de:15:61:71:4c:c8:5f:d4:ff:
21:67:f7:20:46:8c:bb:a6:cd:79:66:49:a2:b2:20:8b:10:30:
d4:46:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:07:20 2026 by rpki-client