This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/XtUxPn2R2Z_CQmlCrc5r5tDTbqw.roa File: XtUxPn2R2Z_CQmlCrc5r5tDTbqw.roa (raw, json) Hash identifier: QRSGZNawZVkuyAsoEl+g7I8RAUwnLpDaduP3UKsMP7E= Subject key identifier: 5E:D5:31:3E:7D:91:D9:9F:C2:42:69:42:AD:CE:6B:E6:D0:D3:6E:AC Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0E96 Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/XtUxPn2R2Z_CQmlCrc5r5tDTbqw.roa Signing time: Wed 26 Nov 2025 07:42:26 +0000 ROA not before: Wed 26 Nov 2025 07:42:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 116.118.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 20:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3734 (0xe96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Nov 26 07:42:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5ED5313E7D91D99FC2426942ADCE6BE6D0D36EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:d4:70:ed:38:ba:9a:81:04:73:65:76:a1: e1:2c:46:97:98:5d:39:25:7d:39:49:68:0b:c1:dd: b6:42:09:dd:02:ba:87:b2:42:33:f8:1a:41:32:c8: 41:35:f3:79:2b:95:7c:5a:b2:0a:ad:73:f8:c6:0c: 35:22:63:65:d9:40:57:d0:22:31:ff:f4:07:60:26: 2f:14:b3:d1:ec:33:35:79:6f:ca:48:1c:ad:79:dc: 5c:94:b5:1e:ab:5b:91:f8:91:4d:4b:4e:de:09:e9: 81:7d:07:c1:4f:dc:04:e0:76:d8:ea:13:44:62:9f: 35:f7:e2:1a:a1:7f:28:39:dd:c6:c2:f1:6a:8b:a4: ef:5d:9c:65:32:df:94:96:e9:7d:ac:ab:69:b8:e3: 95:f2:0f:6b:c5:e1:f8:fe:05:fe:59:98:4a:f7:85: 46:b1:15:f2:fe:3c:05:94:d4:6d:b4:c7:c6:70:ff: ad:f4:a5:3b:7e:a1:41:f9:31:5e:21:f2:ab:b4:0b: 35:b2:1f:b6:62:97:9c:20:15:7c:6e:21:3f:ec:36: dc:27:6a:5d:9c:8c:84:3b:3c:e7:5a:0d:3e:05:11: 3c:db:84:81:86:d1:d4:77:f9:29:2c:79:59:fd:cf: 34:43:59:26:37:20:c5:60:bb:b1:b4:49:ef:23:12: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D5:31:3E:7D:91:D9:9F:C2:42:69:42:AD:CE:6B:E6:D0:D3:6E:AC X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/XtUxPn2R2Z_CQmlCrc5r5tDTbqw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 116.118.128.0/18 Signature Algorithm: sha256WithRSAEncryption 93:5d:40:72:ef:cd:5e:2e:0c:79:3f:0a:a7:06:34:74:b7:7f: 6b:56:e4:35:c9:4f:07:a7:ec:87:0c:8f:29:ba:ac:11:07:ef: ef:bd:7f:bd:31:f4:10:76:26:6e:f1:a9:c9:8b:44:83:80:8c: 86:1b:d6:69:b0:37:58:81:f3:98:c4:0c:9c:3a:f3:7a:37:5a: 4c:01:b6:82:84:55:28:7a:16:66:a3:6d:28:9e:17:8a:87:1d: d0:b5:e2:9a:39:f4:43:d8:ca:e7:8a:3b:c2:a4:26:9f:24:4c: e8:a8:54:f0:38:da:af:30:26:30:16:fb:4e:dc:62:73:ac:88: e3:8b:33:5c:46:60:f4:6d:d2:e8:20:ff:d3:6d:ee:9f:d1:be: 38:5d:62:db:39:24:4f:f4:cc:63:45:68:6b:e5:2d:55:89:88: eb:ef:d8:3b:3b:4e:53:b2:4e:4e:f3:c4:58:2e:25:21:ea:ea: 6e:83:88:4d:df:72:a7:ed:51:b1:1a:a6:6a:19:d5:aa:07:d3: 06:3d:e3:5c:90:54:59:44:34:80:ce:f3:d4:39:8f:13:a3:f0: 70:82:b7:66:ec:79:1d:6e:fa:15:71:da:de:6c:70:08:8a:45: 99:14:38:08:03:8e:5c:7c:44:3e:ba:f8:c5:27:62:b4:9f:80: 6d:b4:46:80 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yNTExMjYw NzQyMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVFRDUzMTNFN0Q5MUQ5 OUZDMjQyNjk0MkFEQ0U2QkU2RDBEMzZFQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRdtRw7Ti6moEEc2V2oeEsRpeYXTklfTlJaAvB3bZCCd0Cuoey QjP4GkEyyEE183krlXxasgqtc/jGDDUiY2XZQFfQIjH/9AdgJi8Us9HsMzV5b8pI HK153FyUtR6rW5H4kU1LTt4J6YF9B8FP3ATgdtjqE0RinzX34hqhfyg53cbC8WqL pO9dnGUy35SW6X2sq2m445XyD2vF4fj+Bf5ZmEr3hUaxFfL+PAWU1G20x8Zw/630 pTt+oUH5MV4h8qu0CzWyH7Zil5wgFXxuIT/sNtwnal2cjIQ7POdaDT4FETzbhIGG 0dR3+SkseVn9zzRDWSY3IMVgu7G0Se8jEsczAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUXtUxPn2R2Z/CQmlCrc5r5tDTbqwwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvWHRVeFBuMlIyWl9DUW1sQ3JjNXI1 dERUYnF3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnR2gDAN BgkqhkiG9w0BAQsFAAOCAQEAk11Acu/NXi4MeT8KpwY0dLd/a1bkNclPB6fshwyP KbqsEQfv771/vTH0EHYmbvGpyYtEg4CMhhvWabA3WIHzmMQMnDrzejdaTAG2goRV KHoWZqNtKJ4Xiocd0LXimjn0Q9jK54o7wqQmnyRM6KhU8DjarzAmMBb7Ttxic6yI 44szXEZg9G3S6CD/023un9G+OF1i2zkkT/TMY0Voa+UtVYmI6+/YOztOU7JOTvPE WC4lIerqboOITd9yp+1RsRqmahnVqgfTBj3jXJBUWUQ0gM7z1DmPE6PwcIK3Zux5 HW76FXHa3mxwCIpFmRQ4CAOOXHxEPrr4xSditJ+AbbRGgA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:31:56 2025 by rpki-client