This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/zoml0r3ZWfK_qyFCbkcftKlcX6Y.roa
File: zoml0r3ZWfK_qyFCbkcftKlcX6Y.roa (raw, json)
Hash identifier: kZb+jpWn6RebjR2BmXQkLh2ah+VTq3XIEq9ZaflJP7c=
Subject key identifier: CE:89:A5:D2:BD:D9:59:F2:BF:AB:21:42:6E:47:1F:B4:A9:5C:5F:A6
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0D5A
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/zoml0r3ZWfK_qyFCbkcftKlcX6Y.roa
Signing time: Mon 10 Feb 2025 13:44:46 +0000
ROA not before: Mon 10 Feb 2025 13:44:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38047
IP address blocks: 2402:c340:eeee::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3418 (0xd5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Feb 10 13:44:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CE89A5D2BDD959F2BFAB21426E471FB4A95C5FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:df:2b:b7:b0:c8:c9:fa:fe:b8:f1:18:e5:
0c:f6:38:43:58:1b:ca:43:47:c0:2f:ce:9d:d6:2f:
0a:b2:be:2d:a4:5c:53:a0:11:6c:d7:d0:9e:93:cc:
eb:0a:ab:43:b5:7d:0b:8a:8f:d7:dc:6d:89:45:83:
f2:bd:be:33:c3:17:b6:3f:7b:40:92:95:5f:cc:92:
d8:5e:db:0b:e1:32:f7:10:da:ef:f0:6e:2a:d9:db:
b1:dc:57:ad:64:fb:dc:86:71:82:56:53:d5:7a:d2:
e0:ba:43:fb:bd:cf:c9:04:61:47:81:36:0f:59:1f:
34:79:a9:fd:0d:03:01:f8:d9:86:39:11:a3:18:b1:
a6:f1:c8:98:0c:42:5f:e4:02:c4:7f:c7:08:3a:dc:
01:1c:75:49:72:c4:8f:45:f3:c0:fe:8e:c7:81:07:
96:c1:bf:eb:b8:a6:da:6e:2b:ef:14:a5:95:1b:59:
bb:b1:a2:06:f3:3f:34:3f:cb:0b:4c:ce:2d:e9:1b:
8b:14:c6:da:22:dd:2d:8c:4c:3f:02:9b:b8:55:47:
75:45:dc:6e:95:ff:a6:e5:75:15:5c:cb:52:75:66:
7d:88:ef:c2:3e:aa:9f:15:87:bb:0e:58:c1:b9:64:
56:65:43:c5:e1:cf:bf:68:50:49:f2:57:c9:1a:02:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:89:A5:D2:BD:D9:59:F2:BF:AB:21:42:6E:47:1F:B4:A9:5C:5F:A6
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/zoml0r3ZWfK_qyFCbkcftKlcX6Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c340:eeee::/48
Signature Algorithm: sha256WithRSAEncryption
08:d5:10:52:a6:92:d1:f7:a6:94:4e:be:32:dd:3d:dc:b6:f3:
b7:e1:6a:b2:07:f3:b0:5b:6e:6b:80:8e:9e:e9:82:bb:2e:df:
93:a7:1c:fc:01:de:7f:2a:8b:2a:96:a5:66:29:e5:8e:92:92:
e5:e0:b3:99:af:d1:72:cb:f8:93:7e:4b:60:4a:eb:c7:fb:af:
de:da:46:89:2d:12:74:47:4e:9e:ba:cf:6d:17:08:e5:dc:d0:
95:d0:01:2b:3c:ba:d8:6a:5d:40:57:c4:15:d8:97:b2:ff:91:
b1:f5:70:f4:07:a7:c4:8b:4c:a5:9b:b0:89:c2:a5:c9:c8:dc:
da:72:6c:9a:a0:2a:6d:0f:14:a7:cd:e6:c7:8a:be:35:53:96:
98:24:bf:a5:d7:5d:7b:12:4a:c6:4e:97:16:27:4d:ea:58:08:
90:b6:e9:37:da:27:a3:4d:04:78:b8:24:92:0c:2c:a2:e1:a9:
76:d7:4c:96:8e:44:89:0a:6b:d1:84:4a:10:01:ea:8e:7b:da:
7a:e9:9d:e3:92:de:0f:2b:5b:f1:cc:0c:44:f3:00:20:b9:ad:
94:39:2d:6a:03:5d:cc:29:dd:82:21:03:42:e8:08:74:40:59:
66:52:6f:5b:e3:4d:a5:0f:2d:45:ff:06:65:ec:88:19:40:7b:
90:e9:26:36
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1
NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yNTAyMTAx
MzQ0NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENFODlBNUQyQkREOTU5
RjJCRkFCMjE0MjZFNDcxRkI0QTk1QzVGQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt+98rt7DIyfr+uPEY5Qz2OENYG8pDR8Avzp3WLwqyvi2kXFOg
EWzX0J6TzOsKq0O1fQuKj9fcbYlFg/K9vjPDF7Y/e0CSlV/Mkthe2wvhMvcQ2u/w
birZ27HcV61k+9yGcYJWU9V60uC6Q/u9z8kEYUeBNg9ZHzR5qf0NAwH42YY5EaMY
sabxyJgMQl/kAsR/xwg63AEcdUlyxI9F88D+jseBB5bBv+u4ptpuK+8UpZUbWbux
ogbzPzQ/ywtMzi3pG4sUxtoi3S2MTD8Cm7hVR3VF3G6V/6bldRVcy1J1Zn2I78I+
qp8Vh7sOWMG5ZFZlQ8Xhz79oUEnyV8kaAp99AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUzoml0r3ZWfK/qyFCbkcftKlcX6YwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB
76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI
RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL3pvbWwwcjNaV2ZL
X3F5RkNia2NmdEtsY1g2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAkAsNA7u4wDQYJKoZIhvcNAQELBQADggEBAAjVEFKmktH3ppROvjLdPdy2
87fharIH87BbbmuAjp7pgrsu35OnHPwB3n8qiyqWpWYp5Y6SkuXgs5mv0XLL+JN+
S2BK68f7r97aRoktEnRHTp66z20XCOXc0JXQASs8uthqXUBXxBXYl7L/kbH1cPQH
p8SLTKWbsInCpcnI3NpybJqgKm0PFKfN5seKvjVTlpgkv6XXXXsSSsZOlxYnTepY
CJC26TfaJ6NNBHi4JJIMLKLhqXbXTJaORIkKa9GEShAB6o572nrpneOS3g8rW/HM
DETzACC5rZQ5LWoDXcwp3YIhA0LoCHRAWWZSb1vjTaUPLUX/BmXsiBlAe5DpJjY=
-----END CERTIFICATE-----
Generated at Fri Jan 9 15:54:13 2026 by rpki-client