This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/QXW-GorGtArUZIjnXWiPUqGXBmA.roa
File: QXW-GorGtArUZIjnXWiPUqGXBmA.roa (raw, json)
Hash identifier: RtgacIPJjUX4rUCBsgEdgZPQszbWJMT2BOGwznzSuPQ=
Subject key identifier: 41:75:BE:1A:8A:C6:B4:0A:D4:64:88:E7:5D:68:8F:52:A1:97:06:60
Certificate issuer: /CN=D264D19B9806023E476E039C05FDCE1376AC6C3C
Certificate serial: 01DB
Authority key identifier: D2:64:D1:9B:98:06:02:3E:47:6E:03:9C:05:FD:CE:13:76:AC:6C:3C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0mTRm5gGAj5HbgOcBf3OE3asbDw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/QXW-GorGtArUZIjnXWiPUqGXBmA.roa
Signing time: Sat 27 Dec 2025 15:40:29 +0000
ROA not before: Sat 27 Dec 2025 15:40:29 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 134823
IP address blocks: 161.248.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0mTRm5gGAj5HbgOcBf3OE3asbDw.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Jan 2026 19:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D264D19B9806023E476E039C05FDCE1376AC6C3C
Validity
Not Before: Dec 27 15:40:29 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4175BE1A8AC6B40AD46488E75D688F52A1970660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:ff:a2:e0:88:51:f6:67:a5:25:47:6b:03:
ad:6a:04:f8:64:81:1c:fb:76:93:ec:63:d5:45:39:
32:58:8f:96:46:fa:d8:6d:2f:6c:be:13:2f:9f:5e:
0d:f1:17:ad:a1:43:ea:5b:66:9c:c5:18:32:db:89:
97:26:13:5d:c2:5d:e7:12:fa:46:a0:5a:34:32:eb:
59:97:48:75:46:54:67:cc:10:f4:13:3d:4d:54:1b:
42:d8:61:ac:f8:a5:d5:3f:90:f9:68:0f:e1:7a:b2:
32:43:e7:24:67:2d:a8:c5:9a:b2:20:52:53:d7:c8:
9f:8e:06:cf:ca:30:04:2b:1d:fd:7b:4b:cd:63:da:
d8:8b:e7:8d:f2:53:16:c8:22:e4:34:46:fb:22:35:
be:a2:13:d7:2a:98:f6:b2:6a:39:38:8e:74:e6:8d:
24:56:b3:96:ab:1c:27:3f:34:89:4c:f9:a5:5d:5f:
c8:fa:5f:fe:39:4b:b1:26:d4:15:ea:32:bc:ab:31:
16:c9:2a:6d:8d:55:99:59:3a:01:13:4f:4c:d9:4d:
6e:79:92:9d:20:0f:a0:c2:6c:82:ff:d5:29:46:85:
9f:54:8b:d9:84:68:8c:26:83:0a:c1:89:36:ea:9e:
22:2e:e9:62:f4:32:4f:ad:4a:c5:1c:0a:f8:b1:6a:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:75:BE:1A:8A:C6:B4:0A:D4:64:88:E7:5D:68:8F:52:A1:97:06:60
X509v3 Authority Key Identifier:
keyid:D2:64:D1:9B:98:06:02:3E:47:6E:03:9C:05:FD:CE:13:76:AC:6C:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0mTRm5gGAj5HbgOcBf3OE3asbDw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/QXW-GorGtArUZIjnXWiPUqGXBmA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.144.0/23
Signature Algorithm: sha256WithRSAEncryption
43:50:d0:b7:16:1f:e4:97:f0:b3:1f:ab:a9:4f:79:e7:ab:0b:
2a:8e:be:eb:f6:92:0f:7c:d2:c4:93:a4:2f:69:6a:5f:b0:09:
84:51:9b:d4:f9:6f:07:74:f9:d0:94:2f:8c:38:62:b2:fe:76:
5b:93:62:f8:50:65:6a:83:aa:ea:ba:b7:87:06:0f:19:73:73:
7f:23:2d:1c:7c:cf:94:4d:c6:a4:a3:00:7f:bd:f2:7a:bf:71:
6b:05:4c:02:de:02:cb:0e:d7:1b:54:80:b2:5b:da:22:e2:84:
da:76:bd:b4:ef:58:6e:61:3e:43:b7:92:f6:6a:f2:06:e6:6d:
04:ea:ab:cf:d3:9f:b3:8b:d2:13:69:37:3b:a0:f7:cc:bf:87:
bb:68:2a:55:19:a9:fd:1a:f4:b1:dd:14:25:97:ff:43:72:0c:
2e:02:58:f0:0f:dd:08:26:11:b8:de:37:a7:8b:97:d5:f9:9a:
64:6e:ff:f7:51:b0:35:5a:e5:76:ec:a6:6a:90:0a:a1:d3:41:
c0:75:99:46:99:52:6a:e4:3b:7e:86:8f:e5:83:2e:a6:6f:11:
e6:8e:41:6f:07:05:a5:fa:fc:d2:cd:f9:7e:77:29:88:00:08:
ac:64:6d:88:96:46:3e:9a:82:d5:c6:7f:b1:5d:18:fa:cc:65:
0c:6f:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:45:47 2026 by rpki-client