This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer File: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer (raw, json) Hash identifier: q9paV5o+53kdCxQ446WMJuLDXpa0u0LZgx+B5vboSBc= Subject key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4F5C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 15 Jan 2026 07:15:08 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: IP: 2.58.240.0/22 IP: 151.158.6.0/23 IP: 151.158.26.0/23 IP: 2001:7fa:1::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20316 (0x4f5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Jan 15 07:15:08 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:2d:6c:a6:63:34:42:4a:08:60:2c:3e:bf: 15:b8:8e:13:65:ca:b0:aa:4c:99:3c:d5:f8:49:6e: ea:d2:42:e0:48:c8:2a:c4:81:4b:f3:50:2d:36:4a: 14:e6:b7:5e:1e:fa:05:f0:8f:fe:0a:a9:e6:63:f8: fd:60:7d:b8:ed:09:a8:51:f7:27:e2:fa:cd:28:63: ec:c3:6a:a2:ab:6b:77:39:74:16:1a:0c:28:3c:09: 08:be:a0:94:51:d9:c1:3e:a9:67:ba:92:95:68:ca: d0:a7:a2:10:5b:cb:e6:5a:8c:e2:01:c1:8d:94:22: 4c:41:f6:69:ae:35:51:da:a0:23:56:d8:64:ed:ce: 90:75:ba:fd:85:28:22:85:38:e9:14:25:1b:2a:cd: 40:56:66:5b:ad:0e:b7:eb:8c:61:a5:3b:90:43:09: 74:14:4b:21:73:a9:84:dd:43:dd:c1:bf:25:24:72: 8b:01:84:0f:62:56:f7:31:93:89:83:26:17:49:e5: ce:84:71:a2:7c:2e:26:5b:56:a9:4d:17:28:39:76: d1:2c:ca:53:5d:f0:80:c1:d4:34:68:87:f1:4a:fb: b3:ca:21:6b:14:5b:fd:4e:db:cc:90:b6:65:a4:48: e3:e5:8d:e5:f9:00:3c:c4:dd:44:f3:f8:ef:1b:09: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 2.58.240.0/22 151.158.6.0/23 151.158.26.0/23 IPv6: 2001:7fa:1::/48 Signature Algorithm: sha256WithRSAEncryption 6b:75:1e:02:9e:50:fa:57:07:97:2b:8e:48:04:2f:d7:c6:d1: f4:42:c8:b0:21:dd:6f:ac:d5:71:c0:af:0d:73:aa:a3:e6:58: 07:7e:20:74:e1:f4:11:3a:55:03:47:3b:ea:f7:ae:ca:49:6d: 68:61:35:07:e0:cd:7f:39:42:01:5b:ce:db:02:c9:fc:79:ea: cb:97:60:83:5b:d8:82:fa:6a:b9:45:e9:c5:90:dc:e4:1e:cc: eb:4a:1e:e3:3e:31:ad:c9:cd:70:c6:0c:34:26:ea:86:c8:f2: 29:20:66:fd:39:df:22:29:f5:f0:e4:66:37:2b:4e:2f:2c:88: 5c:c9:40:3f:9f:9a:f4:be:51:05:01:a6:26:e1:cb:9d:78:62: 32:08:1d:46:16:44:a4:02:5d:64:50:69:d7:5c:4e:96:21:d5: 71:e1:39:3f:c0:21:d2:f4:f4:84:fc:23:6a:9b:a0:34:b1:90: 2b:b4:89:e3:6f:53:a8:d5:40:10:c4:9f:e4:20:11:5c:f3:61: d8:cd:72:77:3f:18:70:dc:55:b9:82:85:1e:cf:12:08:dc:bf: b6:b0:b0:66:c2:89:ee:a9:e6:79:51:04:f2:5f:c5:90:bb:ca: d0:0d:1c:c1:e4:45:8d:c7:1d:7d:9d:9a:32:b0:fc:fa:31:f6: 54:ff:50:9d -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgICT1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYwMTE1MDcxNTA4WhcNMjYwOTMwMDAwMDAwWjBKMRUwEwYD VQQDDAxBOTFCREIyOTAwMDAxMTAvBgNVBAUTKEQxRDJGNTVDMjZEQjI4NTIwQTc5 OTZGRjcyRUQwMTA0MjAwNzk4QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC+Ei1spmM0QkoIYCw+vxW4jhNlyrCqTJk81fhJburSQuBIyCrEgUvzUC02 ShTmt14e+gXwj/4KqeZj+P1gfbjtCahR9yfi+s0oY+zDaqKra3c5dBYaDCg8CQi+ oJRR2cE+qWe6kpVoytCnohBby+ZajOIBwY2UIkxB9mmuNVHaoCNW2GTtzpB1uv2F KCKFOOkUJRsqzUBWZlutDrfrjGGlO5BDCXQUSyFzqYTdQ93BvyUkcosBhA9iVvcx k4mDJhdJ5c6EcaJ8LiZbVqlNFyg5dtEsylNd8IDB1DRoh/FK+7PKIWsUW/1O28yQ tmWkSOPljeX5ADzE3UTz+O8bCdrbAgMBAAGjggKvMIICqzAdBgNVHQ4EFgQU0dL1 XCbbKFIKeZb/cu0BBCAHmKIwHwYDVR0jBBgwFoAUDPzneFf88B852ZpitKpi5hWe dvgwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0 MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0RQem5lRmY4OEI4NTJacGl0S3BpNWhX ZWR2Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy MUE0RjRGQjQvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZnLmNlcjBKBgNVHSAB Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw bmljLm5ldC9SUEtJL0NQUy5wZGYwgcgGCCsGAQUFBwELBIG7MIG4MDEGCCsGAQUF BzAFhiVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMFAGCCsG AQUFBzAKhkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMGRM MVhDYmJLRklLZVpiX2N1MEJCQ0FIbUtJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6 Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDA8BggrBgEFBQcBBwEB/wQt MCswGAQCAAEwEgMEAgI68AMEAZeeBgMEAZeeGjAPBAIAAjAJAwcAIAEH+gABMA0G CSqGSIb3DQEBCwUAA4IBAQBrdR4CnlD6VweXK45IBC/XxtH0QsiwId1vrNVxwK8N c6qj5lgHfiB04fQROlUDRzvq967KSW1oYTUH4M1/OUIBW87bAsn8eerLl2CDW9iC +mq5RenFkNzkHszrSh7jPjGtyc1wxgw0JuqGyPIpIGb9Od8iKfXw5GY3K04vLIhc yUA/n5r0vlEFAaYm4cudeGIyCB1GFkSkAl1kUGnXXE6WIdVx4Tk/wCHS9PSE/CNq m6A0sZArtInjb1Oo1UAQxJ/kIBFc82HYzXJ3Pxhw3FW5goUezxII3L+2sLBmwonu qeZ5UQTyX8WQu8rQDRzB5EWNxx19nZoysPz6MfZU/1Cd -----END CERTIFICATE-----Generated at Wed Jan 21 06:09:35 2026 by rpki-client