This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer File: noRxCOugtVC8Ag_Zsdxt6yng2-8.cer (raw, json) Hash identifier: o5q8BBWfGtDrNe470jNC4Ncp8XGhX8Kn5LBATU85qCY= Subject key identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3FD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 08 Dec 2025 08:04:54 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 63897 IP: 103.127.236.0/22 IP: 103.178.36.0/23 IP: 2400:4460::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16343 (0x3fd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Dec 8 08:04:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:b8:1c:18:af:c2:2a:71:b6:1c:14:e5:d1: 94:3b:a3:cb:ae:43:c8:d6:b0:bc:43:53:22:7b:0d: f2:c4:e1:c8:fb:5e:89:b2:f0:d1:fd:31:89:96:50: 74:84:ed:89:38:31:3a:78:1b:c2:05:bc:6b:42:f0: 27:8c:0e:b0:4a:47:aa:c4:8d:c8:10:3f:be:c8:b4: 89:75:39:f8:cd:0f:f0:0f:f2:e4:db:e8:ef:0d:34: cc:c0:51:a2:59:2b:f2:1c:00:8d:58:5a:fb:8c:03: 41:e1:fd:0c:d6:7d:e2:9e:57:92:ba:c5:9b:82:58: 12:49:eb:c7:3f:b3:34:c6:46:d6:5b:84:72:8e:72: 84:1e:b6:68:fc:b7:e8:d8:ee:bd:2a:a5:65:b1:da: a0:3f:20:ce:2b:0e:b6:f0:85:da:be:92:10:d2:4f: 7e:ac:23:a5:73:a6:bf:35:32:ab:64:69:9c:b4:24: 70:b0:7f:7e:18:41:48:d0:de:d8:72:ea:fb:93:bb: 30:72:cd:04:7b:5a:29:88:ba:bd:0c:9e:fa:1c:5f: a1:c3:ed:74:4a:e7:5e:5e:ab:15:ca:b7:4a:82:ba: b5:49:a3:f7:6f:c3:bc:49:f0:08:41:e5:54:9b:bb: 1b:7c:5c:5b:fc:df:26:06:da:94:99:89:2a:63:2e: 9e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63897 sbgp-ipAddrBlock: critical IPv4: 103.127.236.0/22 103.178.36.0/23 IPv6: 2400:4460::/32 Signature Algorithm: sha256WithRSAEncryption 4f:cc:f3:6c:3b:22:06:67:f3:85:9b:a9:eb:4f:08:a7:ad:62: 5a:45:e5:b9:be:35:bd:51:cc:4c:86:e8:49:65:4f:9a:af:f0: 5a:9b:28:b1:ba:1d:72:37:33:1d:87:e9:2a:8f:25:21:dd:90: 38:67:b0:19:c4:7f:f5:e4:7d:00:7a:79:32:10:4d:0b:59:56: d5:4c:e6:c9:21:39:e5:4d:a3:b1:5b:49:7b:81:fd:2d:f9:c8: 93:20:1a:fd:7c:f5:de:cd:9e:ee:cb:65:7f:1c:4f:0b:34:bd: fa:fb:ef:02:05:84:68:f1:ca:28:dd:5f:47:1d:36:bf:71:67: a0:1e:9f:1c:bb:e2:a1:b4:48:06:fc:f6:30:49:58:53:2b:04: c8:59:42:f4:55:59:31:bc:e7:99:de:fe:6c:28:c8:31:a2:8e: 2b:65:f7:68:22:17:14:c5:8e:7e:0b:6d:f7:c1:27:05:4f:a5: 15:ad:20:47:18:54:46:2c:3e:d5:a0:9b:d0:ad:1c:5f:53:1c: c9:7a:cc:67:49:29:2e:19:dc:5d:81:8e:ee:b0:13:59:63:a7: ac:78:78:f0:62:84:ea:fc:d9:41:13:0b:93:b7:66:4d:e6:af: e5:5b:6e:ea:06:be:b6:5d:c8:38:0a:bc:f7:3c:d4:c7:38:80: 8b:33:95:10 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgICP9cwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MTIwODA4MDQ1NFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoOUU4NDcxMDhFQkEwQjU1MEJDMDIwRkQ5QjFEQzZERUIyOUUwREJF RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKW8uBwYr8IqcbYcFOXR lDujy65DyNawvENTInsN8sThyPteibLw0f0xiZZQdITtiTgxOngbwgW8a0LwJ4wO sEpHqsSNyBA/vsi0iXU5+M0P8A/y5Nvo7w00zMBRolkr8hwAjVha+4wDQeH9DNZ9 4p5XkrrFm4JYEknrxz+zNMZG1luEco5yhB62aPy36NjuvSqlZbHaoD8gzisOtvCF 2r6SENJPfqwjpXOmvzUyq2RpnLQkcLB/fhhBSNDe2HLq+5O7MHLNBHtaKYi6vQye +hxfocPtdErnXl6rFcq3SoK6tUmj92/DvEnwCEHlVJu7G3xcW/zfJgbalJmJKmMu nnMCAwEAAaOCAn8wggJ7MB0GA1UdDgQWBBSehHEI66C1ULwCD9mx3G3rKeDb7zAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVk9DT00vMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Vk9DT00vbm9SeENPdWd0VkM4QWdfWnNkeHQ2eW5nMi04Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA+ZkwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJnf+wDBAFnsiQwDQQCAAIwBwMFACQARGAwDQYJKoZIhvcNAQELBQADggEBAE/M 82w7IgZn84WbqetPCKetYlpF5bm+Nb1RzEyG6EllT5qv8FqbKLG6HXI3Mx2H6SqP JSHdkDhnsBnEf/XkfQB6eTIQTQtZVtVM5skhOeVNo7FbSXuB/S35yJMgGv189d7N nu7LZX8cTws0vfr77wIFhGjxyijdX0cdNr9xZ6Aenxy74qG0SAb89jBJWFMrBMhZ QvRVWTG855ne/mwoyDGijitl92giFxTFjn4LbffBJwVPpRWtIEcYVEYsPtWgm9Ct HF9THMl6zGdJKS4Z3F2Bju6wE1ljp6x4ePBihOr82UETC5O3Zk3mr+VbbuoGvrZd yDgKvPc81Mc4gIszlRA= -----END CERTIFICATE-----Generated at Sun Dec 21 14:42:43 2025 by rpki-client