This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/vbt-4D_wxqZhYYQXKalT3heZpj0.roa File: vbt-4D_wxqZhYYQXKalT3heZpj0.roa (raw, json) Hash identifier: Hl9ilN5bQmICMa74omOoP/SVm33vEMFbfB8GNLU+cAY= Subject key identifier: BD:BB:7E:E0:3F:F0:C6:A6:61:61:84:17:29:A9:53:DE:17:99:A6:3D Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E Certificate serial: 0E32 Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/vbt-4D_wxqZhYYQXKalT3heZpj0.roa Signing time: Sun 18 Jan 2026 03:55:13 +0000 ROA not before: Sun 18 Jan 2026 03:55:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38254 IP address blocks: 2403:7f40:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 04:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3634 (0xe32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E Validity Not Before: Jan 18 03:55:13 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BDBB7EE03FF0C6A66161841729A953DE1799A63D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:e5:aa:37:53:f4:af:28:28:94:4e:ea:5d: 9c:29:61:c7:5c:d2:20:5f:5d:ca:ef:19:d0:e1:24: 24:86:16:fb:a0:93:99:cc:c7:82:ee:33:5d:ce:c2: 3a:37:00:05:77:09:8e:d7:f9:4a:bd:9f:e9:95:0e: 8c:af:aa:a7:36:07:2b:b4:8a:f1:67:47:22:f7:bd: 36:f2:33:9f:41:94:45:61:51:86:50:bd:28:4d:c9: 09:ef:d5:09:18:14:3a:b6:ce:c8:d5:24:2b:86:ba: 21:f4:03:0f:11:7a:a8:9e:1d:20:fe:16:ab:ab:35: 40:1f:a9:c5:44:98:36:5a:df:33:61:71:57:66:c5: 92:f0:f5:41:c1:b6:75:ad:0a:5e:28:d8:ba:5e:32: fc:67:ce:4c:e8:67:45:28:76:3a:83:6c:a6:64:63: 11:27:26:ac:69:8a:4c:6c:e2:39:da:b2:65:0c:e5: fa:78:47:96:23:e6:de:92:67:29:c9:b1:99:a5:f2: b7:f6:f5:3b:ac:a9:d4:66:9d:06:ab:46:4e:42:d7: 9e:9a:b7:58:17:64:a1:05:54:45:d7:13:88:1f:57: a9:ab:cc:3f:2d:7b:45:b9:3a:00:d0:1a:06:72:a7: c3:e1:ab:33:79:ef:4f:ab:29:d0:db:40:ec:79:f6: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BB:7E:E0:3F:F0:C6:A6:61:61:84:17:29:A9:53:DE:17:99:A6:3D X509v3 Authority Key Identifier: keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/vbt-4D_wxqZhYYQXKalT3heZpj0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:7f40:e000::/36 Signature Algorithm: sha256WithRSAEncryption 44:b0:91:fe:9a:ca:b4:d3:27:1c:6e:b0:9d:42:6a:41:2b:df: dc:77:9d:04:07:17:3f:c1:1c:bd:ce:63:f0:3d:c2:21:f0:b0: e8:6e:05:05:a7:30:3e:4f:fb:48:bb:8a:92:3b:16:d9:24:57: 2d:83:ad:1a:37:b9:6c:55:bf:be:3d:3c:f6:00:6b:14:9a:f2: 77:44:a2:4d:af:cb:7a:fb:f4:d7:a5:fd:45:4c:d2:52:64:35: a9:9e:73:c1:51:7a:18:e1:7b:c8:cf:4f:cd:66:1a:e3:f2:2e: 8d:97:b4:fb:e1:33:81:5c:4b:a8:6f:77:d9:fa:2d:c2:af:ba: 97:99:aa:20:c6:0c:8d:9b:71:a7:76:5c:5d:60:f2:fa:4e:0a: c2:9b:df:8d:66:41:b1:39:bf:9c:a9:e5:35:fa:81:71:c2:ec: e4:7f:05:32:df:3e:6e:24:da:50:f5:0c:09:70:27:ed:64:77: 3f:93:4c:fe:9c:ad:84:97:c0:40:99:8f:66:a0:d0:58:b5:29: fd:09:6b:c5:f2:99:31:d3:28:23:9f:43:94:8b:c5:d7:ee:02: 49:71:85:33:4f:f9:bc:78:ec:c2:7c:da:9c:cf:a5:80:43:06: 41:cc:ef:f0:36:33:8a:12:3e:01:e8:30:12:7e:a1:f5:4b:29: 63:62:98:b2 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkQ3 MjA0NjE3MzU0RDcwNTIzQjZGNjVBMjcwNzEyQjZCMTlEODE1RTAeFw0yNjAxMTgw MzU1MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJEQkI3RUUwM0ZGMEM2 QTY2MTYxODQxNzI5QTk1M0RFMTc5OUE2M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkkeWqN1P0rygolE7qXZwpYcdc0iBfXcrvGdDhJCSGFvugk5nM x4LuM13Owjo3AAV3CY7X+Uq9n+mVDoyvqqc2Byu0ivFnRyL3vTbyM59BlEVhUYZQ vShNyQnv1QkYFDq2zsjVJCuGuiH0Aw8ReqieHSD+FqurNUAfqcVEmDZa3zNhcVdm xZLw9UHBtnWtCl4o2LpeMvxnzkzoZ0UodjqDbKZkYxEnJqxpikxs4jnasmUM5fp4 R5Yj5t6SZynJsZml8rf29TusqdRmnQarRk5C156at1gXZKEFVEXXE4gfV6mrzD8t e0W5OgDQGgZyp8PhqzN570+rKdDbQOx59nglAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUvbt+4D/wxqZhYYQXKalT3heZpj0wHwYDVR0jBBgwFoAULXIEYXNU1wUjtvZa JwcStrGdgV4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElIL0xY SUVZWE5VMXdVanR2WmFKd2NTdHJHZGdWNC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TFhJRVlYTlUxd1VqdHZaYUp3Y1N0ckdkZ1Y0LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVElIL3ZidC00RF93eHFaaFlZUVhLYWxUM2hl WnBqMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkA39A4DAN BgkqhkiG9w0BAQsFAAOCAQEARLCR/prKtNMnHG6wnUJqQSvf3HedBAcXP8Ecvc5j 8D3CIfCw6G4FBacwPk/7SLuKkjsW2SRXLYOtGje5bFW/vj089gBrFJryd0SiTa/L evv016X9RUzSUmQ1qZ5zwVF6GOF7yM9PzWYa4/IujZe0++EzgVxLqG932fotwq+6 l5mqIMYMjZtxp3ZcXWDy+k4KwpvfjWZBsTm/nKnlNfqBccLs5H8FMt8+biTaUPUM CXAn7WR3P5NM/pythJfAQJmPZqDQWLUp/QlrxfKZMdMoI59DlIvF1+4CSXGFM0/5 vHjswnzanM+lgEMGQczv8DYzihI+AegwEn6h9UspY2KYsg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:24 2026 by rpki-client