This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/Nz-X8rR7Phcap4SiInP5wET3C3c.roa
File: Nz-X8rR7Phcap4SiInP5wET3C3c.roa (raw, json)
Hash identifier: YbGHDs96xLfvMmG5LaEkGYi22GhQO8pYdk4DOlpnQSE=
Subject key identifier: 37:3F:97:F2:B4:7B:3E:17:1A:A7:84:A2:22:73:F9:C0:44:F7:0B:77
Certificate issuer: /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial: 09D7
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/Nz-X8rR7Phcap4SiInP5wET3C3c.roa
Signing time: Mon 08 Dec 2025 12:33:17 +0000
ROA not before: Mon 08 Dec 2025 12:33:17 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 7536
IP address blocks: 103.148.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2519 (0x9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Validity
Not Before: Dec 8 12:33:17 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=373F97F2B47B3E171AA784A22273F9C044F70B77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:fe:20:61:23:ba:ed:03:48:18:e4:24:f0:
02:d8:c8:15:0a:b6:7d:91:34:87:0b:e7:24:c8:34:
41:df:04:13:25:4d:b3:47:e0:38:62:a7:58:37:7b:
b6:ef:25:55:7d:40:bc:ae:18:0e:a5:8e:28:bb:ae:
ca:1a:c9:1f:84:8a:06:78:3d:f5:f7:27:24:c9:5b:
a1:4b:4f:80:f5:d8:e4:14:98:bf:8f:aa:48:ca:d0:
e9:f5:17:5d:2b:1f:a3:c1:7c:90:8d:6e:f4:1f:db:
c8:8c:f9:36:05:17:7a:61:69:2f:f1:d7:42:1f:44:
9d:b1:2d:19:20:c7:e4:d1:d7:5d:8b:6a:57:3c:b3:
59:5c:6a:e0:7c:99:f8:99:2b:95:e2:50:c0:da:08:
9e:a1:6b:eb:8c:54:ba:29:74:34:f0:cb:8e:98:8d:
b0:5e:21:8b:2d:98:96:02:98:62:63:6c:03:04:36:
01:80:31:05:bb:da:07:1a:d7:65:dc:e3:85:0e:be:
c5:38:f9:1b:04:a3:d4:c5:0a:34:5d:1f:37:64:3d:
b2:c7:bd:ee:72:3f:59:42:84:03:da:66:4a:5a:3a:
1c:9a:54:3d:29:79:2d:1a:78:85:22:aa:b8:58:ac:
9f:df:92:29:37:9d:27:c9:1b:0b:30:76:de:0f:d4:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3F:97:F2:B4:7B:3E:17:1A:A7:84:A2:22:73:F9:C0:44:F7:0B:77
X509v3 Authority Key Identifier:
keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/Nz-X8rR7Phcap4SiInP5wET3C3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:58:f0:d7:fd:12:8e:de:e2:3d:fd:aa:e5:8e:5a:6c:f4:39:
03:8f:bf:87:a4:fd:84:e2:8c:53:f5:cd:d9:bf:6a:d5:7b:97:
9e:85:86:8e:6b:6e:c8:1a:67:26:95:65:05:9f:1e:87:b4:dc:
6e:56:d3:59:7a:b9:af:e8:35:3e:8a:3c:a2:89:94:5c:a6:45:
19:76:cc:51:e8:bc:bc:ad:54:da:9a:ec:f5:bf:64:7b:2f:ec:
46:70:9c:d9:6d:11:ff:70:43:08:1a:48:56:e4:fe:09:33:e2:
ac:36:26:b6:a6:e2:0f:23:1a:1f:ac:ab:57:97:35:de:f0:de:
3c:a4:da:d6:38:ed:99:22:92:3c:c9:9c:5e:c6:5c:7f:e5:9b:
67:bf:ea:49:9c:fb:63:b9:50:04:08:4b:43:b7:43:1c:df:36:
8c:85:7c:20:d8:fa:7e:5f:fa:44:00:3b:50:d3:e2:18:c9:f7:
86:26:af:09:9a:5e:e4:98:01:f0:52:35:51:17:8b:60:5a:e3:
71:54:1b:97:76:23:b4:49:48:7a:05:be:19:77:67:1a:1e:ee:
ea:d1:c7:e1:d2:89:c8:12:51:ae:e5:4b:42:3c:ed:88:f2:dd:
ff:13:84:1e:a6:4d:e0:54:60:98:e4:28:a4:a6:75:ea:13:8d:
a7:be:fd:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 12 02:41:37 2025 by rpki-client