This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer File: OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer (raw, json) Hash identifier: kLzMoydcNDKc6DHHeEMjRcN6KasZRUw8P7VlWGEjObE= Subject key identifier: 38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1F7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 06 Nov 2025 03:18:16 +0000 Certificate not after: Fri 30 Oct 2026 15:30:19 +0000 Subordinate resources: IP: 138.252.116.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 01:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8062 (0x1f7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Nov 6 03:18:16 2025 GMT Not After : Oct 30 15:30:19 2026 GMT Subject: CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:ff:c2:7b:3f:16:d3:66:0a:28:ff:f2:94: 19:f2:ad:9f:3c:a2:dc:da:ad:d0:ac:34:11:9a:21: 27:f0:85:5b:6c:eb:69:99:d3:c0:1b:81:2f:0a:d9: 0d:9d:dd:4b:a6:22:ec:ef:a4:81:a2:c4:25:87:f2: 82:0c:c2:65:d7:19:60:35:48:b5:ff:fb:51:c8:b7: 1c:9d:45:62:75:c7:9b:33:dc:b0:ea:3c:d1:54:a1: 00:f8:f3:51:69:ce:d6:0c:48:f9:81:c0:e1:3b:83: fc:bf:73:ae:f0:f5:d7:34:43:fb:10:34:94:63:73: ff:20:f0:16:84:37:0e:fa:d8:7d:ef:ac:f7:9a:20: cc:76:f6:25:b3:dd:7e:c7:40:7b:ce:73:bf:a5:37: 9d:a6:eb:e5:98:0e:90:56:b4:80:48:5f:be:be:d5: a5:dc:5b:90:01:5b:19:26:19:c7:b1:94:f0:a6:62: 97:5f:51:78:2b:cf:3b:4f:b2:e7:5b:e0:d1:ab:20: fd:2e:db:4a:91:33:00:e2:42:46:a4:ab:2d:44:b7: c7:02:4c:03:bb:69:a3:92:5f:fe:35:7b:ea:f5:4f: 17:99:39:ad:b3:6d:bc:8f:1c:31:2d:47:e5:1f:27: f6:2e:27:b9:ab:92:22:4b:02:80:57:bd:6f:4d:ed: 04:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.116.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:d1:4e:19:17:95:8b:45:93:6c:5b:db:93:ac:99:b0:50:92: 90:6a:0b:cb:dd:64:18:2c:0f:c2:9d:ba:e1:b3:4d:b1:70:01: ad:fa:2d:9d:7e:a1:d2:25:c5:70:37:a5:56:cf:d7:40:e1:52: 78:f0:0e:90:7a:75:05:90:3e:fa:8e:20:e7:f5:39:6f:a1:f1: 50:4b:d0:d8:08:b8:86:46:67:9a:7d:f5:d6:92:b1:e4:66:0c: 02:80:3b:2c:e6:93:40:80:f2:2b:90:4f:e3:f9:63:ac:93:26: 4a:f7:1e:9a:a1:b3:25:97:3c:63:a9:5e:6d:84:1b:85:84:db: ee:39:a6:ae:60:2b:8c:c5:54:94:d0:6b:21:7f:06:48:68:f1: 8a:0c:b7:f5:76:88:38:57:5b:cc:09:11:b1:53:23:63:fd:bd: 4c:ba:24:2e:92:f6:3e:78:f3:b4:ae:0f:35:a2:c8:2e:4e:01: 53:92:bc:62:41:57:2a:70:d5:3b:ed:df:0c:d7:fd:a4:63:98: 4c:38:65:e8:d7:5a:92:1d:f8:b8:de:34:78:9d:bd:ad:cd:6c: 1d:8e:e8:e6:ca:18:36:1b:fe:9e:0b:01:6a:2f:d8:51:93:68: 88:cd:d6:e2:14:06:44:00:d6:ec:a6:e7:42:18:0b:24:93:df: 84:0b:7d:f4 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICH34wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MTEwNjAzMTgxNloXDTI2MTAzMDE1MzAxOVowMzEx MC8GA1UEAxMoMzhCRkIzMEM3MkNBOTU0OEY3OTZDQzNENEZCNjAwNkI4ODNFMjcw MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ7p/8J7PxbTZgoo//KU GfKtnzyi3Nqt0Kw0EZohJ/CFW2zraZnTwBuBLwrZDZ3dS6Yi7O+kgaLEJYfyggzC ZdcZYDVItf/7Uci3HJ1FYnXHmzPcsOo80VShAPjzUWnO1gxI+YHA4TuD/L9zrvD1 1zRD+xA0lGNz/yDwFoQ3DvrYfe+s95ogzHb2JbPdfsdAe85zv6U3nabr5ZgOkFa0 gEhfvr7VpdxbkAFbGSYZx7GU8KZil19ReCvPO0+y51vg0asg/S7bSpEzAOJCRqSr LUS3xwJMA7tpo5Jf/jV76vVPF5k5rbNtvI8cMS1H5R8n9i4nuauSIksCgFe9b03t BBsCAwEAAaOCAlAwggJMMB0GA1UdDgQWBBQ4v7MMcsqVSPeWzD1PtgBriD4nATAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1hJLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L01JTkdYSS9PTC16REhMS2xVajNsc3c5VDdZQWE0Zy1Kd0UubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBivx0MA0GCSqGSIb3DQEBCwUAA4IBAQB9 0U4ZF5WLRZNsW9uTrJmwUJKQagvL3WQYLA/Cnbrhs02xcAGt+i2dfqHSJcVwN6VW z9dA4VJ48A6QenUFkD76jiDn9TlvofFQS9DYCLiGRmeaffXWkrHkZgwCgDss5pNA gPIrkE/j+WOskyZK9x6aobMllzxjqV5thBuFhNvuOaauYCuMxVSU0GshfwZIaPGK DLf1dog4V1vMCRGxUyNj/b1MuiQukvY+ePO0rg81osguTgFTkrxiQVcqcNU77d8M 1/2kY5hMOGXo11qSHfi43jR4nb2tzWwdjujmyhg2G/6eCwFqL9hRk2iIzdbiFAZE ANbspudCGAskk9+EC330 -----END CERTIFICATE-----Generated at Sat Dec 6 22:49:32 2025 by rpki-client