This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/III/tbS3w6XLB0m7dmwDdalwAb7fOaU.roa File: tbS3w6XLB0m7dmwDdalwAb7fOaU.roa (raw, json) Hash identifier: TpfRiYbFsp9EnkMwrDnhH+7NtlNUBx7b+/IzDltb3NU= Subject key identifier: B5:B4:B7:C3:A5:CB:07:49:BB:76:6C:03:75:A9:70:01:BE:DF:39:A5 Certificate issuer: /CN=573FB8567CA1EDED29EC817238E68E20F21BCD75 Certificate serial: 0A Authority key identifier: 57:3F:B8:56:7C:A1:ED:ED:29:EC:81:72:38:E6:8E:20:F2:1B:CD:75 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/III/tbS3w6XLB0m7dmwDdalwAb7fOaU.roa Signing time: Mon 15 Dec 2025 08:17:54 +0000 ROA not before: Mon 15 Dec 2025 08:17:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 140.92.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/III/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/III/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573FB8567CA1EDED29EC817238E68E20F21BCD75 Validity Not Before: Dec 15 08:17:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B5B4B7C3A5CB0749BB766C0375A97001BEDF39A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:55:70:6d:67:3e:d0:4a:2e:f3:c0:b8:e5:11: d2:1d:7a:4c:87:6c:fd:6c:1c:39:5a:ac:23:c1:53: 03:e2:86:d0:18:dd:00:2e:05:66:49:34:80:1b:6e: d7:58:bc:b3:61:1d:28:3d:14:b7:2e:46:a3:03:8a: 77:1c:8b:74:83:04:7f:30:2a:b0:05:37:e1:0e:d8: 90:c2:b7:20:54:87:5d:b3:a9:8b:c5:88:0a:79:a6: 96:11:e7:19:08:a5:d5:3f:92:88:3d:ce:e7:1f:3c: 8f:b4:f8:70:df:b4:a4:bb:b3:59:14:2a:c4:a9:50: f6:13:c5:3d:25:26:86:8f:b0:69:48:6e:83:5b:a4: 4b:2c:c7:50:69:1e:cd:6a:07:94:88:0c:6b:e6:06: 7b:60:9e:3e:60:57:99:0e:7b:48:2a:7b:a5:af:de: 87:a5:07:58:2c:38:ae:ee:6f:a4:ce:c5:bb:44:0f: 5d:38:34:5d:8f:10:9f:0f:98:10:71:db:0e:fb:7e: dc:d8:5c:2f:36:57:d8:5d:90:0c:70:51:d1:6e:55: 3e:0f:ad:2b:7b:11:f1:f0:4a:e8:da:d5:88:30:04: fd:86:8f:21:67:0f:ce:0d:74:70:7c:d5:6f:3f:12: cf:dc:fe:e5:1b:81:4d:2d:a1:45:19:16:84:22:e2: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B4:B7:C3:A5:CB:07:49:BB:76:6C:03:75:A9:70:01:BE:DF:39:A5 X509v3 Authority Key Identifier: keyid:57:3F:B8:56:7C:A1:ED:ED:29:EC:81:72:38:E6:8E:20:F2:1B:CD:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/III/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/III/tbS3w6XLB0m7dmwDdalwAb7fOaU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.92.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8c:0a:e9:aa:9a:27:bf:4c:85:25:83:96:bd:77:22:35:b5:17: 26:00:f6:90:0a:19:1d:48:2e:1b:1f:9b:c0:0d:a6:69:ac:c4: db:19:50:02:89:22:5d:0d:53:62:82:22:ed:4e:69:21:27:8e: 9f:8b:ce:a4:01:5a:d8:ee:cc:c7:1f:9e:7e:dd:46:60:49:5c: f8:69:5f:39:e8:f0:00:39:c8:24:ef:d3:3f:b8:ca:92:4c:ff: cc:6d:8a:6e:b7:60:89:5b:e7:a7:b8:e1:74:62:cd:3d:29:0b: 96:3b:5d:f2:1a:0d:97:ef:10:db:85:59:ca:5f:79:c1:61:14: 3e:d8:e3:6c:58:8a:33:ff:20:0c:f5:e2:d9:d8:a4:5e:cd:52: 52:c9:56:9a:4b:d5:9a:cb:49:b0:54:01:a3:3f:bc:74:15:c4: ae:e7:16:f0:3c:06:4c:de:4e:9d:2b:c3:da:00:4d:e0:03:62: ad:4a:c3:01:99:1f:5e:a9:2f:1e:d2:4a:a6:e8:e0:27:d5:f0: 8c:68:42:17:39:94:54:fd:ad:c3:46:43:d9:cb:67:4e:65:0d: 52:d4:86:38:4a:9c:61:87:dd:7e:42:f8:48:f6:59:bf:f6:be: 8f:67:e7:5f:96:4a:d1:dd:4d:a4:a7:06:72:58:3a:c0:2b:86: 4b:21:8a:c2 -----BEGIN CERTIFICATE----- MIIEyjCCA7KgAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NzNG Qjg1NjdDQTFFREVEMjlFQzgxNzIzOEU2OEUyMEYyMUJDRDc1MB4XDTI1MTIxNTA4 MTc1NFoXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoQjVCNEI3QzNBNUNCMDc0 OUJCNzY2QzAzNzVBOTcwMDFCRURGMzlBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPdVcG1nPtBKLvPAuOUR0h16TIds/WwcOVqsI8FTA+KG0BjdAC4F Zkk0gBtu11i8s2EdKD0Uty5GowOKdxyLdIMEfzAqsAU34Q7YkMK3IFSHXbOpi8WI CnmmlhHnGQil1T+SiD3O5x88j7T4cN+0pLuzWRQqxKlQ9hPFPSUmho+waUhug1uk SyzHUGkezWoHlIgMa+YGe2CePmBXmQ57SCp7pa/eh6UHWCw4ru5vpM7Fu0QPXTg0 XY8Qnw+YEHHbDvt+3NhcLzZX2F2QDHBR0W5VPg+tK3sR8fBK6NrViDAE/YaPIWcP zg10cHzVbz8Sz9z+5RuBTS2hRRkWhCLifQkCAwEAAaOCAecwggHjMB0GA1UdDgQW BBS1tLfDpcsHSbt2bAN1qXABvt85pTAfBgNVHSMEGDAWgBRXP7hWfKHt7SnsgXI4 5o4g8hvNdTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGA1UdHwRSMFAwTqBM oEqGSHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JSUkvVnot NFZueWg3ZTBwN0lGeU9PYU9JUElielhVLmNybDBgBggrBgEFBQcBAQRUMFIwUAYI KwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9W ei00Vm55aDdlMHA3SUZ5T09hT0lQSWJ6WFUuY2VyMA4GA1UdDwEB/wQEAwIHgDCB mQYIKwYBBQUHAQsEgYwwgYkwVAYIKwYBBQUHMAuGSHJzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS9JSUkvdGJTM3c2WExCMG03ZG13RGRhbHdBYjdm T2FVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIxcMA0GCSqG SIb3DQEBCwUAA4IBAQCMCumqmie/TIUlg5a9dyI1tRcmAPaQChkdSC4bH5vADaZp rMTbGVACiSJdDVNigiLtTmkhJ46fi86kAVrY7szHH55+3UZgSVz4aV856PAAOcgk 79M/uMqSTP/MbYput2CJW+enuOF0Ys09KQuWO13yGg2X7xDbhVnKX3nBYRQ+2ONs WIoz/yAM9eLZ2KRezVJSyVaaS9Way0mwVAGjP7x0FcSu5xbwPAZM3k6dK8PaAE3g A2KtSsMBmR9eqS8e0kqm6OAn1fCMaEIXOZRU/a3DRkPZy2dOZQ1S1IY4Spxhh91+ QvhI9lm/9r6PZ+dflkrR3U2kpwZyWDrAK4ZLIYrC -----END CERTIFICATE-----Generated at Sun Dec 21 06:59:18 2025 by rpki-client