This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/JmUhNYAFvqi4npFYOj0knkMjtyE.roa File: JmUhNYAFvqi4npFYOj0knkMjtyE.roa (raw, json) Hash identifier: Yjx3MZvdPl3EbNTG40fkFmf/EKk03l2AASY1lH79bwQ= Subject key identifier: 26:65:21:35:80:05:BE:A8:B8:9E:91:58:3A:3D:24:9E:43:23:B7:21 Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Certificate serial: 0571 Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/JmUhNYAFvqi4npFYOj0knkMjtyE.roa Signing time: Tue 20 Jan 2026 05:43:49 +0000 ROA not before: Tue 20 Jan 2026 05:43:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 132369 IP address blocks: 211.79.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Validity Not Before: Jan 20 05:43:49 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=266521358005BEA8B89E91583A3D249E4323B721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:46:89:18:29:ec:68:f7:2b:7e:fa:76:65: dc:56:42:16:89:a5:00:d8:c2:9d:93:e3:4e:b4:62: 93:72:5c:77:e4:ca:07:a8:85:b3:d1:c8:fe:dc:3f: d5:46:48:f3:34:04:e4:b7:6f:92:9c:c0:12:35:72: 08:44:d8:4f:67:96:f4:00:ee:dd:57:b8:db:77:14: 0d:73:af:c6:de:02:a0:e0:5a:1e:5b:80:e2:4e:6a: f9:4e:ac:37:79:f6:6e:b9:fc:dd:be:c1:9e:95:a8: 80:7a:2a:9b:67:98:93:fc:ed:76:af:cc:db:48:fa: 0a:7c:e4:2e:87:b7:c7:c7:b1:a3:2c:c5:9f:fb:2b: 7a:36:a9:9b:7d:21:a5:7a:4d:0a:09:68:45:97:a2: ea:d8:eb:19:2c:c0:2b:bc:3f:9c:79:f9:cd:78:55: f0:67:55:e7:20:69:8d:02:cf:2b:09:40:9a:17:b2: 84:7c:5c:33:7f:f8:c8:a6:32:79:dd:ed:33:39:c8: 2c:a0:db:9f:ee:48:46:54:21:d0:fe:87:b4:46:3d: 8e:26:14:91:14:9d:71:60:5a:71:a3:ff:41:6e:6a: e1:ab:f3:ec:50:04:3d:b7:54:37:f8:be:8d:90:8c: b4:7b:60:2f:ef:96:da:ea:49:77:d8:a0:58:2e:21: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:65:21:35:80:05:BE:A8:B8:9E:91:58:3A:3D:24:9E:43:23:B7:21 X509v3 Authority Key Identifier: keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/JmUhNYAFvqi4npFYOj0knkMjtyE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.108.0/23 Signature Algorithm: sha256WithRSAEncryption a9:42:f9:47:f9:6f:77:72:d4:e2:48:f1:39:b4:fb:20:74:53: e9:fe:de:54:98:7f:2e:ba:4a:32:13:14:9d:f5:33:88:95:88: 31:a5:f6:18:4c:1a:30:b3:f7:e8:0d:60:a8:ce:20:1c:a8:de: dd:0f:c6:13:ef:18:16:b3:9c:ee:49:a8:41:68:11:4b:fe:bb: 4d:eb:4d:48:c4:c8:05:01:f9:e9:c1:ea:2c:bd:3a:27:1e:39: 2b:46:64:af:a4:38:e6:00:8e:ff:a2:16:2c:92:76:46:2c:8b: dc:bd:65:ff:b8:1f:db:13:2b:9f:86:6c:54:ff:17:ee:0d:5f: 53:49:1a:7a:eb:76:ed:90:8a:53:15:fb:f6:c5:0c:3a:43:22: 1a:88:0b:8b:db:cd:92:de:c5:c7:52:2d:87:2b:ff:ca:c7:a2: fa:20:ec:e4:fa:3b:e4:5f:ad:9f:68:c1:ab:9c:5d:50:ed:0d: 69:fb:da:82:2a:77:5a:b5:39:ac:f5:7e:54:92:f4:ac:f3:ed: 1d:9e:b6:22:ce:d1:6f:fe:da:ed:b4:75:b1:ea:22:a7:b6:2a: d8:5f:1b:e4:94:09:be:f6:01:c7:1d:26:7d:a5:72:1f:b0:40: af:3e:f3:a8:a5:42:29:24:53:ea:e8:41:d2:28:d3:9d:86:d4: fc:3d:6a:23 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEy MkE5MjkyQ0M5MzAxNTJBREU1QTI1ODQ4QzFCREM0MDQ0QzkwMjAeFw0yNjAxMjAw NTQzNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI2NjUyMTM1ODAwNUJF QThCODlFOTE1ODNBM0QyNDlFNDMyM0I3MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvw0aJGCnsaPcrfvp2ZdxWQhaJpQDYwp2T4060YpNyXHfkygeo hbPRyP7cP9VGSPM0BOS3b5KcwBI1cghE2E9nlvQA7t1XuNt3FA1zr8beAqDgWh5b gOJOavlOrDd59m65/N2+wZ6VqIB6KptnmJP87XavzNtI+gp85C6Ht8fHsaMsxZ/7 K3o2qZt9IaV6TQoJaEWXourY6xkswCu8P5x5+c14VfBnVecgaY0CzysJQJoXsoR8 XDN/+MimMnnd7TM5yCyg25/uSEZUIdD+h7RGPY4mFJEUnXFgWnGj/0FuauGr8+xQ BD23VDf4vo2QjLR7YC/vltrqSXfYoFguIXbdAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUJmUhNYAFvqi4npFYOj0knkMjtyEwHwYDVR0jBBgwFoAUMSKpKSzJMBUq3lol hIwb3EBEyQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVT Q09NL01TS3BLU3pKTUJVcTNsb2xoSXdiM0VCRXlRSS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTVNLcEtTekpNQlVxM2xvbGhJd2IzRUJFeVFJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09NL0ptVWhOWUFGdnFp NG5wRllPajBrbmtNanR5RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTT2wwDQYJKoZIhvcNAQELBQADggEBAKlC+Uf5b3dy1OJI8Tm0+yB0U+n+ 3lSYfy66SjITFJ31M4iViDGl9hhMGjCz9+gNYKjOIByo3t0PxhPvGBaznO5JqEFo EUv+u03rTUjEyAUB+enB6iy9OiceOStGZK+kOOYAjv+iFiySdkYsi9y9Zf+4H9sT K5+GbFT/F+4NX1NJGnrrdu2QilMV+/bFDDpDIhqIC4vbzZLexcdSLYcr/8rHovog 7OT6O+RfrZ9owaucXVDtDWn72oIqd1q1Oaz1flSS9Kzz7R2etiLO0W/+2u20dbHq Iqe2KthfG+SUCb72AccdJn2lch+wQK8+86ilQikkU+roQdIo052G1Pw9aiM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:10 2026 by rpki-client