This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NORDATW/XJd-znpiotONwpw2gXcuco5ARFQ.roa File: XJd-znpiotONwpw2gXcuco5ARFQ.roa (raw, json) Hash identifier: sTOnIvCd4RIPms6cv16koF9sF7sTRjGK0YAyj+W7iNg= Subject key identifier: 5C:97:7E:CE:7A:62:A2:D3:8D:C2:9C:36:81:77:2E:72:8E:40:44:54 Certificate issuer: /CN=159D5F897276F0DEC857E7E2DEDD649876E8A482 Certificate serial: 0F5E Authority key identifier: 15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/XJd-znpiotONwpw2gXcuco5ARFQ.roa Signing time: Fri 07 Nov 2025 00:25:03 +0000 ROA not before: Fri 07 Nov 2025 00:25:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 21859 IP address blocks: 211.79.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 15:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3934 (0xf5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159D5F897276F0DEC857E7E2DEDD649876E8A482 Validity Not Before: Nov 7 00:25:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5C977ECE7A62A2D38DC29C3681772E728E404454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:08:63:d5:66:d6:7a:0f:86:51:f5:74:91: e7:1c:e5:49:d3:7d:47:4f:3f:a6:cb:f8:f3:62:c3: 6e:de:ea:8a:66:a2:95:6a:54:82:d4:e8:4b:09:06: 2b:91:bd:a1:52:4b:29:1c:ce:e9:88:f2:29:76:1c: de:82:06:58:e4:f4:ad:57:7e:82:42:8b:a7:4c:36: f0:c0:65:b1:68:e8:cf:b1:87:6a:df:13:40:d3:ef: 14:41:eb:b4:70:6c:5b:e9:2e:7e:d6:27:47:a3:ad: 54:0a:e1:b2:54:e3:84:be:e4:f3:c9:24:7f:da:05: 81:2b:ad:ad:c6:d3:1c:b2:5b:7e:39:2b:d5:ed:1f: af:7a:fd:bc:80:14:1e:2a:4f:11:08:ec:18:28:4b: 78:07:02:57:92:72:ea:4f:35:bd:c5:88:91:16:22: 80:f1:1f:17:69:d9:11:bc:b8:57:4e:e3:9a:05:90: c8:3f:71:d9:35:4d:6c:84:f4:7a:59:92:17:b3:5e: ea:a1:40:a6:88:6f:ce:a9:ab:c8:cc:ff:19:39:07: a8:59:f3:7d:03:69:64:3b:45:74:68:e6:f6:91:52: 3c:7a:57:0c:89:6d:07:60:6e:1c:b7:3d:c5:0d:61: 0e:a1:8a:15:63:04:93:f2:c0:c9:7d:70:eb:b5:e7: b3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:97:7E:CE:7A:62:A2:D3:8D:C2:9C:36:81:77:2E:72:8E:40:44:54 X509v3 Authority Key Identifier: keyid:15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/XJd-znpiotONwpw2gXcuco5ARFQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.98.0/23 Signature Algorithm: sha256WithRSAEncryption 22:c0:c6:c8:77:4b:5d:03:1e:47:d2:2f:6f:24:c6:9c:1c:3b: a1:93:1d:01:89:f0:21:e4:a4:08:65:5a:40:a5:d7:bc:81:68: cf:d3:81:00:d2:81:0c:1e:95:fa:39:32:4c:42:cf:f1:65:56: 55:a1:9a:c8:3f:8a:ad:94:e2:94:10:f3:05:03:cb:28:c6:1c: 5c:b6:96:7b:70:62:80:68:b8:cb:5e:88:0a:66:b6:c1:b2:a2: 35:3f:26:a8:eb:be:7f:2d:8b:62:58:ed:b7:bd:44:34:65:22: 0f:22:e5:dd:af:c2:3b:ae:00:f3:6a:70:d2:96:3a:32:e3:5f: fd:4d:6c:9e:bf:85:78:f4:4f:73:3f:c8:03:e5:5e:44:50:3c: 3a:4d:09:a0:f7:32:d2:b9:3d:6d:8a:2c:c3:ca:2d:a5:13:0b: e5:17:bd:02:0f:78:5c:af:ea:42:48:44:84:ef:0f:ee:60:2a: 1d:01:24:77:a2:8d:4f:6a:9c:3c:ae:6d:2b:eb:40:4f:ce:76: 08:39:ab:33:0c:7f:d7:c2:03:af:89:5f:fa:b7:74:2c:da:16: 23:4e:6f:6e:17:38:c1:f3:43:cf:c9:ca:d9:91:58:33:e9:74: cf:41:f2:c0:73:d2:51:56:bc:a8:a3:52:7e:d7:2f:47:dc:19: 0a:f5:b3:63 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTU5 RDVGODk3Mjc2RjBERUM4NTdFN0UyREVERDY0OTg3NkU4QTQ4MjAeFw0yNTExMDcw MDI1MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDOTc3RUNFN0E2MkEy RDM4REMyOUMzNjgxNzcyRTcyOEU0MDQ0NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1swhj1WbWeg+GUfV0kecc5UnTfUdPP6bL+PNiw27e6opmopVq VILU6EsJBiuRvaFSSykczumI8il2HN6CBljk9K1XfoJCi6dMNvDAZbFo6M+xh2rf E0DT7xRB67RwbFvpLn7WJ0ejrVQK4bJU44S+5PPJJH/aBYErra3G0xyyW345K9Xt H696/byAFB4qTxEI7BgoS3gHAleScupPNb3FiJEWIoDxHxdp2RG8uFdO45oFkMg/ cdk1TWyE9HpZkhezXuqhQKaIb86pq8jM/xk5B6hZ830DaWQ7RXRo5vaRUjx6VwyJ bQdgbhy3PcUNYQ6hihVjBJPywMl9cOu157MrAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUXJd+znpiotONwpw2gXcuco5ARFQwHwYDVR0jBBgwFoAUFZ1fiXJ28N7IV+fi 3t1kmHbopIIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTk9SREFU Vy9GWjFmaVhKMjhON0lWLWZpM3Qxa21IYm9wSUkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0ZaMWZpWEoyOE43SVYtZmkzdDFrbUhib3BJSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05PUkRBVFcvWEpkLXpucGlvdE9Od3B3 MmdYY3VjbzVBUkZRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AdNPYjANBgkqhkiG9w0BAQsFAAOCAQEAIsDGyHdLXQMeR9IvbyTGnBw7oZMdAYnw IeSkCGVaQKXXvIFoz9OBANKBDB6V+jkyTELP8WVWVaGayD+KrZTilBDzBQPLKMYc XLaWe3BigGi4y16ICma2wbKiNT8mqOu+fy2LYljtt71ENGUiDyLl3a/CO64A82pw 0pY6MuNf/U1snr+FePRPcz/IA+VeRFA8Ok0JoPcy0rk9bYosw8otpRML5Re9Ag94 XK/qQkhEhO8P7mAqHQEkd6KNT2qcPK5tK+tAT852CDmrMwx/18IDr4lf+rd0LNoW I05vbhc4wfNDz8nK2ZFYM+l0z0HywHPSUVa8qKNSftcvR9wZCvWzYw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:59:17 2025 by rpki-client