This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dh2uoT7R4X-eFJqvaWXMhgpWiTU.roa File: dh2uoT7R4X-eFJqvaWXMhgpWiTU.roa (raw, json) Hash identifier: qsMKD5OS9GgX1ZMc0Jwz0JbROtOGihzl+W4LoMYEiEc= Subject key identifier: 76:1D:AE:A1:3E:D1:E1:7F:9E:14:9A:AF:69:65:CC:86:0A:56:89:35 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13CA Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dh2uoT7R4X-eFJqvaWXMhgpWiTU.roa Signing time: Fri 22 Aug 2025 08:57:17 +0000 ROA not before: Fri 22 Aug 2025 08:57:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 150.117.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 01:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5066 (0x13ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=761DAEA13ED1E17F9E149AAF6965CC860A568935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:df:c8:62:e8:d5:79:65:ce:a7:4c:b9:f5: 56:d9:86:5e:a8:d2:96:2d:f5:11:01:a9:1e:c7:87: 27:c5:f1:3d:41:1e:50:b5:23:3f:db:9d:c4:16:5d: 10:c1:9f:c8:2d:be:dd:73:20:f4:2e:a0:9d:98:e3: 02:b2:10:c7:06:74:9f:53:b0:14:9d:a7:98:8d:05: cb:23:52:bb:bf:5d:96:95:d5:d7:77:4f:58:4c:7a: ce:d7:44:f8:ff:98:29:b0:6e:7b:ae:15:d8:2d:0d: 9d:f3:69:83:14:e5:d0:8e:1d:30:1e:99:b3:cf:4a: 43:fb:ab:22:af:35:d4:d5:c8:da:4d:2e:40:cf:e2: 05:a9:4e:9f:ad:58:4e:cf:5a:0d:3e:71:f1:3c:b5: 0d:19:bb:d0:be:89:8f:a6:e5:9d:d7:70:09:94:90: 93:eb:51:2e:6a:77:29:d0:6b:02:95:50:11:81:7f: 97:4b:de:e6:37:e7:41:10:a0:d2:d1:c9:4b:f5:02: 18:ff:e9:85:45:1c:75:c4:e4:15:2f:65:4a:d8:2b: 68:fa:f2:80:83:aa:42:28:b8:aa:3e:f0:ce:17:43: bc:96:63:74:c7:f6:08:84:b1:de:87:c8:cb:f4:cd: ee:b9:4d:76:52:7d:48:c8:c3:08:a1:4b:c2:82:5a: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1D:AE:A1:3E:D1:E1:7F:9E:14:9A:AF:69:65:CC:86:0A:56:89:35 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dh2uoT7R4X-eFJqvaWXMhgpWiTU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.0.0/20 Signature Algorithm: sha256WithRSAEncryption 22:6b:ce:c2:aa:4c:13:86:31:3b:05:b5:ef:bb:ec:dc:b3:b2: 48:8b:b5:11:a6:04:19:81:cc:01:e0:94:97:4a:1d:64:94:e9: 67:97:73:3d:5c:08:0a:3c:70:77:32:a6:bb:27:1f:2c:11:66: ff:a6:51:70:de:61:43:98:44:35:75:06:05:a2:bf:cd:11:05: ab:d6:d9:bb:75:fb:8f:61:e1:54:50:4b:61:21:00:aa:9b:c5: 6f:8f:8b:d8:ff:1d:75:8d:c8:d9:b1:d8:5b:81:d0:01:b2:ae: d7:41:af:c8:ce:31:95:d9:b3:e9:88:b2:b4:ad:37:85:f2:e4: bf:e0:34:28:1a:ef:4d:f0:dd:d1:1d:ea:01:6a:3e:9b:f4:af: 5a:97:8b:bc:94:40:4a:dc:0b:fa:fe:13:43:81:9a:26:9a:54: 25:fa:29:2b:fc:80:23:a9:78:c8:c9:f3:00:61:d4:5b:68:f2: 2d:89:b4:58:28:02:36:54:0c:66:ba:32:a7:d9:b0:60:77:73: c5:ad:2d:99:f5:3e:6c:d1:dd:a3:ba:ff:ff:02:a4:60:44:53: c2:bf:43:d2:51:5d:44:7a:f6:e1:42:b0:b8:c1:2d:20:4f:1b: 81:87:f5:05:05:2c:1b:8a:2a:21:8a:26:56:70:fc:10:06:49: 8a:78:08:64 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc2MURBRUExM0VEMUUx N0Y5RTE0OUFBRjY5NjVDQzg2MEE1Njg5MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaud/IYujVeWXOp0y59VbZhl6o0pYt9REBqR7HhyfF8T1BHlC1 Iz/bncQWXRDBn8gtvt1zIPQuoJ2Y4wKyEMcGdJ9TsBSdp5iNBcsjUru/XZaV1dd3 T1hMes7XRPj/mCmwbnuuFdgtDZ3zaYMU5dCOHTAembPPSkP7qyKvNdTVyNpNLkDP 4gWpTp+tWE7PWg0+cfE8tQ0Zu9C+iY+m5Z3XcAmUkJPrUS5qdynQawKVUBGBf5dL 3uY350EQoNLRyUv1Ahj/6YVFHHXE5BUvZUrYK2j68oCDqkIouKo+8M4XQ7yWY3TH 9giEsd6HyMv0ze65TXZSfUjIwwihS8KCWo/pAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUdh2uoT7R4X+eFJqvaWXMhgpWiTUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9kaDJ1b1Q3UjRYLWVG SnF2YVdYTWhncFdpVFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnUAMA0GCSqGSIb3DQEBCwUAA4IBAQAia87CqkwThjE7BbXvu+zcs7JIi7UR pgQZgcwB4JSXSh1klOlnl3M9XAgKPHB3Mqa7Jx8sEWb/plFw3mFDmEQ1dQYFor/N EQWr1tm7dfuPYeFUUEthIQCqm8Vvj4vY/x11jcjZsdhbgdABsq7XQa/IzjGV2bPp iLK0rTeF8uS/4DQoGu9N8N3RHeoBaj6b9K9al4u8lEBK3Av6/hNDgZommlQl+ikr /IAjqXjIyfMAYdRbaPItibRYKAI2VAxmujKn2bBgd3PFrS2Z9T5s0d2juv//AqRg RFPCv0PSUV1EevbhQrC4wS0gTxuBh/UFBSwbiiohiiZWcPwQBkmKeAhk -----END CERTIFICATE-----Generated at Sat Dec 6 23:24:34 2025 by rpki-client