This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/19q9YUE92E00MFv6mPOYRiJp_bs.cer File: 19q9YUE92E00MFv6mPOYRiJp_bs.cer (raw, json) Hash identifier: qvgcZ5sujC/VFoKDPMd/BcQ67GGdpEQF+ZfI/6JjZTg= Subject key identifier: D7:DA:BD:61:41:3D:D8:4D:34:30:5B:FA:98:F3:98:46:22:69:FD:BB Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Certificate serial: 1FB7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Tue 20 Jan 2026 01:01:57 +0000 Certificate not after: Tue 12 Jan 2027 15:30:19 +0000 Subordinate resources: IP: 151.158.6.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 10:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8119 (0x1fb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Validity Not Before: Jan 20 01:01:57 2026 GMT Not After : Jan 12 15:30:19 2027 GMT Subject: CN=D7DABD61413DD84D34305BFA98F398462269FDBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:24:e5:83:50:86:26:4d:f0:15:be:c4:75: 6a:69:a1:b2:62:16:ca:80:00:9f:0a:1a:22:2f:43: 2d:9f:65:5f:af:37:55:cd:40:fb:ec:c1:9b:e6:e6: 59:0d:51:48:4f:80:91:76:b4:fd:da:be:26:30:42: 29:36:49:5c:21:80:ec:66:24:ba:85:e7:bd:2b:67: fb:bd:58:13:6b:f1:8f:9d:99:69:17:64:b1:82:73: d3:19:5f:fb:1d:8b:42:8d:50:8a:c4:b7:dc:6c:9e: a3:be:6d:59:78:d8:38:51:d8:69:04:f4:36:67:09: c8:a3:d9:50:e9:68:77:b0:99:17:6c:87:92:91:78: 1e:e5:f9:1c:e3:e7:c2:67:3a:5e:33:6e:a2:6c:cf: 72:0c:0e:c4:18:ec:21:f6:49:af:bf:50:db:ab:51: 0a:55:84:99:02:ff:5d:5f:d5:83:ca:16:02:51:b6: f5:14:f7:bc:1c:a8:7f:06:36:54:f0:df:c3:07:70: e4:9e:1d:6d:c6:33:b4:7b:b9:cd:1d:c1:fd:ad:c3: 7d:9d:a4:e9:0c:a0:0b:33:f2:89:e1:42:8a:4a:18: 40:3d:c2:d6:1b:96:d3:9f:ae:e1:64:d8:6d:14:20: b6:0c:51:23:1d:a6:98:90:7b:a1:05:4c:c3:ae:e9: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DA:BD:61:41:3D:D8:4D:34:30:5B:FA:98:F3:98:46:22:69:FD:BB X509v3 Authority Key Identifier: keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 151.158.6.0/23 Signature Algorithm: sha256WithRSAEncryption 18:f5:7d:d7:32:7f:0c:80:77:26:d7:9b:57:13:28:46:7a:98: 5c:7e:4f:bb:ab:38:7d:f1:f2:46:c0:78:d2:4f:59:bd:9e:f7: ea:dc:a2:05:68:d1:94:07:6c:12:ec:09:fa:b1:33:51:96:db: 92:96:6a:22:47:d9:e3:d0:28:76:de:c6:82:2b:71:0b:74:6d: 49:7e:a8:4c:3c:cc:15:93:16:2e:51:fd:ee:24:07:ed:b2:06: 78:0a:3a:19:ce:96:f9:8e:48:e0:ed:c3:cc:f7:13:34:2d:cc: 13:43:80:b2:e0:5a:34:31:5f:4f:f2:3c:b4:d8:9a:bb:07:85: 00:ff:ae:09:5c:48:2e:1f:c9:b6:b2:29:fb:f3:77:4c:c1:cf: 80:67:99:9a:25:d2:19:92:b8:1d:0f:a2:e9:a4:f7:9b:ad:37: 57:c1:eb:c9:76:b3:8a:16:05:8e:a2:01:a0:fc:43:d0:02:cb: eb:cc:26:6a:44:eb:1d:e0:88:27:a1:54:60:25:ab:97:85:23: de:bf:71:00:05:18:19:30:56:b9:a6:df:e7:54:8a:7c:0b:0e: 5f:3b:50:89:d2:a8:e5:eb:3d:3a:75:c6:7b:43:29:68:8c:d6: 92:46:2c:87:f8:56:d9:a0:7b:51:82:23:17:eb:65:58:cf:6d: 24:ce:73:53 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICH7cwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhEMUQyRjU1QzI2REIyODUyMEE3OTk2RkY3MkVE MDEwNDIwMDc5OEEyMB4XDTI2MDEyMDAxMDE1N1oXDTI3MDExMjE1MzAxOVowMzEx MC8GA1UEAxMoRDdEQUJENjE0MTNERDg0RDM0MzA1QkZBOThGMzk4NDYyMjY5RkRC QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMU0JOWDUIYmTfAVvsR1 ammhsmIWyoAAnwoaIi9DLZ9lX683Vc1A++zBm+bmWQ1RSE+AkXa0/dq+JjBCKTZJ XCGA7GYkuoXnvStn+71YE2vxj52ZaRdksYJz0xlf+x2LQo1QisS33Gyeo75tWXjY OFHYaQT0NmcJyKPZUOlod7CZF2yHkpF4HuX5HOPnwmc6XjNuomzPcgwOxBjsIfZJ r79Q26tRClWEmQL/XV/Vg8oWAlG29RT3vByofwY2VPDfwwdw5J4dbcYztHu5zR3B /a3DfZ2k6QygCzPyieFCikoYQD3C1huW05+u4WTYbRQgtgxRIx2mmJB7oQVMw67p EyMCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBTX2r1hQT3YTTQwW/qY85hGImn9uzAf BgNVHSMEGDAWgBTR0vVcJtsoUgp5lv9y7QEEIAeYojAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wZEwxWENiYktGSUtlWmJfY3UwQkJDQUhtS0kuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYy LzBkTDFYQ2JiS0ZJS2VaYl9jdTBCQkNBSG1LSS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkhJUy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9C SElTLzE5cTlZVUU5MkUwME1GdjZtUE9ZUmlKcF9icy5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGXngYwDQYJKoZIhvcNAQELBQADggEBABj1fdcy fwyAdybXm1cTKEZ6mFx+T7urOH3x8kbAeNJPWb2e9+rcogVo0ZQHbBLsCfqxM1GW 25KWaiJH2ePQKHbexoIrcQt0bUl+qEw8zBWTFi5R/e4kB+2yBngKOhnOlvmOSODt w8z3EzQtzBNDgLLgWjQxX0/yPLTYmrsHhQD/rglcSC4fybayKfvzd0zBz4BnmZol 0hmSuB0Poumk95utN1fB68l2s4oWBY6iAaD8Q9ACy+vMJmpE6x3giCehVGAlq5eF I96/cQAFGBkwVrmm3+dUinwLDl87UInSqOXrPTp1xntDKWiM1pJGLIf4Vtmge1GC IxfrZVjPbSTOc1M= -----END CERTIFICATE-----Generated at Wed Jan 21 09:20:57 2026 by rpki-client