This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/DR2DukQY8qyY5rWH2leFHpGYhCE.roa
File: DR2DukQY8qyY5rWH2leFHpGYhCE.roa (raw, json)
Hash identifier: lmDldo1DiQ9RvynogVmjoFQu2/tJB6dTCeqcCQCjMEg=
Subject key identifier: 0D:1D:83:BA:44:18:F2:AC:98:E6:B5:87:DA:57:85:1E:91:98:84:21
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5A7C
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/DR2DukQY8qyY5rWH2leFHpGYhCE.roa
Signing time: Fri 22 Aug 2025 08:55:54 +0000
ROA not before: Fri 22 Aug 2025 08:55:54 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38851
IP address blocks: 103.131.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 06:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23164 (0x5a7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Aug 22 08:55:54 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=0D1D83BA4418F2AC98E6B587DA57851E91988421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:f8:06:25:c6:f1:48:5b:af:12:c3:a3:d6:
9f:bd:d9:90:8f:32:17:a5:26:ce:01:5d:8e:10:39:
c7:3f:bd:73:15:1a:04:cb:ce:39:25:06:4e:45:df:
e1:a0:43:58:eb:12:ee:cc:17:1f:8a:93:0f:fe:5c:
e9:28:2e:81:bf:1c:15:73:d2:5a:25:73:24:3e:15:
40:f3:f6:ce:8e:fb:8c:b0:75:f4:2f:86:1b:c6:b9:
65:35:2c:85:07:4f:5c:b5:ca:20:9e:9d:a5:34:32:
1c:ea:93:a0:6d:5a:f4:bb:7c:4b:c5:25:4e:ca:11:
20:bf:ef:14:b4:1e:35:ee:e6:20:ee:d4:b0:b2:51:
6e:e8:e6:27:07:d9:97:5c:05:62:9f:d6:ef:99:b4:
49:52:fc:df:80:08:1f:1b:14:56:98:4e:3a:8e:4f:
03:0b:f7:84:a4:32:6c:fe:84:ef:a7:e5:7e:d9:07:
51:ac:21:e9:28:dc:48:89:e0:91:01:31:91:ca:8b:
c0:d3:b1:a0:12:dc:76:73:6b:7a:9c:2e:31:e6:46:
fe:78:8e:32:2a:de:77:0c:ab:f2:79:d6:d6:42:5a:
44:a6:02:31:e8:e7:1e:a4:8a:06:2a:86:3d:a4:be:
63:a4:fa:60:b2:4a:ef:fb:8a:df:b9:2b:f4:74:12:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1D:83:BA:44:18:F2:AC:98:E6:B5:87:DA:57:85:1E:91:98:84:21
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/DR2DukQY8qyY5rWH2leFHpGYhCE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:70:d3:36:3d:94:f7:6f:36:31:dc:6d:39:89:19:76:42:bf:
fd:9c:9c:9d:91:a0:83:d2:0c:b7:49:66:d8:69:14:ac:ef:21:
f5:86:81:e7:b2:75:24:c4:d1:d6:49:11:8b:13:88:d2:69:79:
2b:b7:11:73:85:2e:cf:2e:5a:68:54:a6:9c:de:27:48:43:0c:
51:bc:11:0b:6c:80:04:c4:6d:ec:43:79:d9:11:1e:13:fd:9a:
41:3e:1f:5e:5c:10:30:cb:e6:f6:b6:86:3e:88:d2:c7:ff:d0:
23:4a:2c:3d:4a:f2:cc:54:30:e5:59:91:c0:ab:57:54:36:dd:
c9:76:1b:66:75:5d:67:ba:1b:48:6c:f5:67:2d:21:66:3f:52:
92:e8:88:9e:02:4f:c0:a2:0d:65:2a:8f:a9:47:17:3a:e1:70:
e9:86:a5:de:1b:18:eb:d5:fd:e2:e6:f2:0c:eb:41:f7:19:76:
6f:41:e4:42:65:80:f4:bd:bb:85:81:45:2f:29:46:81:46:e3:
85:21:7a:8f:d7:03:03:e6:74:03:d1:79:e7:c0:74:2f:86:a4:
77:31:c3:9c:2d:df:ad:ad:7d:b2:3d:64:37:51:63:fc:cf:d3:
ad:ed:fe:6f:cc:70:c9:22:7c:71:57:66:da:0c:2b:f7:a4:00:
16:7c:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:59:27 2025 by rpki-client