This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BHIS/Lz4bgSi9fFdr5nfUg6LA5UQVvcw.roa File: Lz4bgSi9fFdr5nfUg6LA5UQVvcw.roa (raw, json) Hash identifier: DAqSYMoWmgxcDkqDXV7YErOSh2azZKHeTThf2jitM3A= Subject key identifier: 2F:3E:1B:81:28:BD:7C:57:6B:E6:77:D4:83:A2:C0:E5:44:15:BD:CC Certificate issuer: /CN=5E05E4E582956E266519FB8A0A97F289D68525D3 Certificate serial: 03 Authority key identifier: 5E:05:E4:E5:82:95:6E:26:65:19:FB:8A:0A:97:F2:89:D6:85:25:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XgXk5YKVbiZlGfuKCpfyidaFJdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/Lz4bgSi9fFdr5nfUg6LA5UQVvcw.roa Signing time: Tue 20 Jan 2026 01:05:30 +0000 ROA not before: Tue 20 Jan 2026 01:05:30 +0000 ROA not after: Tue 12 Jan 2027 15:30:19 +0000 asID: 152616 IP address blocks: 2402:4760::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/XgXk5YKVbiZlGfuKCpfyidaFJdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/XgXk5YKVbiZlGfuKCpfyidaFJdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XgXk5YKVbiZlGfuKCpfyidaFJdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 15:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E05E4E582956E266519FB8A0A97F289D68525D3 Validity Not Before: Jan 20 01:05:30 2026 GMT Not After : Jan 12 15:30:19 2027 GMT Subject: CN=2F3E1B8128BD7C576BE677D483A2C0E54415BDCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:d6:bb:1e:35:92:f1:1d:fb:ba:2e:3c:41: 2f:33:12:4d:e5:72:52:df:1a:ed:d3:d2:51:da:2b: 6a:a8:0d:bd:5c:eb:23:e4:c6:49:55:e7:ec:40:b3: f1:95:f6:cd:4d:da:f3:13:45:4b:90:4d:81:68:96: 1a:57:b2:9d:bd:f4:b2:e9:1e:41:16:b1:47:4a:c2: 7a:ab:6e:96:fe:00:a0:d7:d6:ce:4f:fc:35:bd:0f: ea:19:fa:a1:74:f4:3f:ee:d0:56:4c:13:0e:55:8b: b1:8a:8e:fb:27:c5:5c:73:b4:77:d5:f4:7d:08:64: 49:1f:ee:46:0e:19:78:df:ee:3e:d3:48:ce:4c:aa: b8:85:57:20:9a:80:f9:c0:bb:f7:cb:a6:41:28:3e: 6a:27:e7:23:3c:f3:89:e9:4f:87:e9:a7:59:3c:01: 8b:b6:69:40:3a:84:34:e9:06:db:9c:3c:27:3e:7a: b0:20:f4:b1:e0:f4:e2:d8:15:a8:52:02:3a:0b:b7: a3:d2:75:9a:22:62:0a:0a:42:33:99:f2:a2:ce:fd: d6:00:73:d3:01:f0:3b:c0:af:a3:56:24:72:fa:21: ae:a9:6b:83:91:c3:aa:c3:9e:7f:62:6b:4f:79:80: e2:4e:e8:ba:c8:44:d3:e4:84:84:a8:91:6c:f9:85: aa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3E:1B:81:28:BD:7C:57:6B:E6:77:D4:83:A2:C0:E5:44:15:BD:CC X509v3 Authority Key Identifier: keyid:5E:05:E4:E5:82:95:6E:26:65:19:FB:8A:0A:97:F2:89:D6:85:25:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/XgXk5YKVbiZlGfuKCpfyidaFJdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XgXk5YKVbiZlGfuKCpfyidaFJdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/Lz4bgSi9fFdr5nfUg6LA5UQVvcw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:4760::/32 Signature Algorithm: sha256WithRSAEncryption 93:a4:56:2e:e2:03:11:a1:4a:6e:b4:90:9c:3c:04:c8:2a:54: 68:0a:37:b6:1b:bb:f5:6b:c5:54:5b:9e:c2:c7:7e:75:0d:0e: 46:33:f2:d5:ef:99:d2:c5:57:a0:fb:9f:ce:9c:f7:b3:90:ab: 37:89:9b:22:b5:f5:4f:13:de:4e:74:1c:5b:b4:31:de:49:9f: b2:5f:16:30:a5:17:56:95:fa:a7:26:b2:36:c6:f2:f2:64:32: 18:25:5d:c9:35:4c:5a:29:ab:91:95:8e:e0:6c:2c:a1:65:96: 60:f8:c9:ad:94:3c:ca:3f:db:01:04:a2:67:8d:7d:4c:63:c3: b6:f7:94:33:6b:be:0a:38:04:ce:0d:0d:a6:6f:d7:3d:a5:f3: 4c:13:61:12:5a:f2:e5:d7:6d:af:56:60:72:e2:8a:db:c2:7c: 27:f2:16:1c:60:72:e0:75:4a:94:35:82:bb:2d:f3:aa:3b:f4: 8f:e2:f1:e5:22:5e:0d:a0:68:c9:f7:6b:4a:33:64:aa:b5:58: 83:20:0e:0c:ed:ee:80:6d:91:6f:b9:9c:3f:ee:31:45:24:95: e2:b9:ab:71:1d:83:0e:c0:24:48:5a:ad:1d:4e:26:01:d4:c4: 5e:c1:f3:f2:31:6c:31:d9:b3:27:42:27:db:7b:c6:3b:d7:c7: e5:fa:d7:41 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTA1 RTRFNTgyOTU2RTI2NjUxOUZCOEEwQTk3RjI4OUQ2ODUyNUQzMB4XDTI2MDEyMDAx MDUzMFoXDTI3MDExMjE1MzAxOVowMzExMC8GA1UEAxMoMkYzRTFCODEyOEJEN0M1 NzZCRTY3N0Q0ODNBMkMwRTU0NDE1QkRDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOZQ1rseNZLxHfu6LjxBLzMSTeVyUt8a7dPSUdoraqgNvVzrI+TG SVXn7ECz8ZX2zU3a8xNFS5BNgWiWGleynb30sukeQRaxR0rCeqtulv4AoNfWzk/8 Nb0P6hn6oXT0P+7QVkwTDlWLsYqO+yfFXHO0d9X0fQhkSR/uRg4ZeN/uPtNIzkyq uIVXIJqA+cC798umQSg+aifnIzzzielPh+mnWTwBi7ZpQDqENOkG25w8Jz56sCD0 seD04tgVqFICOgu3o9J1miJiCgpCM5nyos791gBz0wHwO8Cvo1Ykcvohrqlrg5HD qsOef2JrT3mA4k7oushE0+SEhKiRbPmFqm0CAwEAAaOCAeswggHnMB0GA1UdDgQW BBQvPhuBKL18V2vmd9SDosDlRBW9zDAfBgNVHSMEGDAWgBReBeTlgpVuJmUZ+4oK l/KJ1oUl0zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CSElTL1hn WGs1WUtWYmlabEdmdUtDcGZ5aWRhRkpkTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev WGdYazVZS1ZiaVpsR2Z1S0NwZnlpZGFGSmRNLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvQkhJUy9MejRiZ1NpOWZGZHI1bmZVZzZMQTVV UVZ2Y3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJHYDAN BgkqhkiG9w0BAQsFAAOCAQEAk6RWLuIDEaFKbrSQnDwEyCpUaAo3thu79WvFVFue wsd+dQ0ORjPy1e+Z0sVXoPufzpz3s5CrN4mbIrX1TxPeTnQcW7Qx3kmfsl8WMKUX VpX6pyayNsby8mQyGCVdyTVMWimrkZWO4GwsoWWWYPjJrZQ8yj/bAQSiZ419TGPD tveUM2u+CjgEzg0Npm/XPaXzTBNhElry5ddtr1ZgcuKK28J8J/IWHGBy4HVKlDWC uy3zqjv0j+Lx5SJeDaBoyfdrSjNkqrVYgyAODO3ugG2Rb7mcP+4xRSSV4rmrcR2D DsAkSFqtHU4mAdTEXsHz8jFsMdmzJ0In23vGO9fH5frXQQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:40:57 2026 by rpki-client