This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CTII/XSQfoxuiHePtoMHvKwjtWym1FAk.roa File: XSQfoxuiHePtoMHvKwjtWym1FAk.roa (raw, json) Hash identifier: ImpRgszzaONcA6VnVCA257G0YheZJLSsM060vbAcYhw= Subject key identifier: 5D:24:1F:A3:1B:A2:1D:E3:ED:A0:C1:EF:2B:08:ED:5B:29:B5:14:09 Certificate issuer: /CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A Certificate serial: 13F2 Authority key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/XSQfoxuiHePtoMHvKwjtWym1FAk.roa Signing time: Mon 15 Dec 2025 01:23:37 +0000 ROA not before: Mon 15 Dec 2025 01:23:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 133948 IP address blocks: 103.130.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 21:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5106 (0x13f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A Validity Not Before: Dec 15 01:23:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5D241FA31BA21DE3EDA0C1EF2B08ED5B29B51409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:78:b5:7f:27:04:b1:8c:79:5f:ff:e3:14: 80:95:64:ef:86:6d:49:37:27:bd:6c:9b:60:ac:5e: 45:f5:4b:a4:f3:df:f3:28:66:58:a8:ef:0d:0c:40: 36:43:00:ce:93:71:17:0b:11:38:8c:d3:c7:85:28: 4f:34:4b:4c:a5:e4:73:35:58:5e:64:3b:81:44:b9: d4:ea:55:28:60:71:d7:db:cb:e3:b3:a8:4a:01:70: 1e:6a:2b:9e:93:c6:e2:41:ac:f5:96:6b:6e:0f:eb: a8:51:ba:40:f5:a3:bb:ed:c6:f4:b8:27:42:de:43: 3d:42:67:ee:b9:cb:5b:3e:3a:0a:f7:d1:b8:73:d7: 22:4c:ef:b9:65:b0:0c:64:69:30:c9:92:e0:58:a4: 45:b9:0c:53:9b:b7:e3:44:d8:68:ec:31:76:f9:3e: e0:43:60:61:76:b3:28:39:ef:5c:72:a6:77:f0:c8: 5e:ad:0a:3d:15:ce:1e:fb:65:81:29:c2:05:c8:dc: 84:80:b4:5b:04:ae:13:61:2a:02:01:5b:06:43:5a: 3c:c5:32:5e:49:c2:bd:c6:d8:63:76:ce:1c:9e:e5: 92:dd:14:a0:08:79:15:c7:35:e3:3b:b8:49:ac:49: b8:2b:b3:2d:59:b5:4f:d1:35:d8:0a:7b:7f:df:79: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:24:1F:A3:1B:A2:1D:E3:ED:A0:C1:EF:2B:08:ED:5B:29:B5:14:09 X509v3 Authority Key Identifier: keyid:FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/XSQfoxuiHePtoMHvKwjtWym1FAk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.248.0/24 Signature Algorithm: sha256WithRSAEncryption 27:9d:3e:f1:6d:88:9d:c4:df:1c:6d:72:94:b9:22:64:72:c8: 62:f5:c9:63:ed:9e:a7:90:4b:b3:c6:62:88:6a:bd:e4:c1:0f: cd:4f:2b:9c:85:b8:66:d0:7b:e1:4a:8e:62:17:db:52:45:1c: 83:a1:66:cd:8e:08:cd:13:6f:70:47:c8:3d:81:40:ff:6b:e7: 8d:05:2f:23:d2:f5:84:c7:df:4f:a1:4e:28:2e:56:2f:48:46: dd:b6:bf:68:2b:2c:2e:ef:8d:f3:6b:70:34:5e:ff:ab:31:c8: 77:98:a7:ca:19:18:1e:5d:11:5a:2e:3d:8d:7a:72:91:07:d7: 17:dc:73:ea:15:fe:19:23:c9:50:84:8d:f3:a1:44:60:07:c8: 00:c4:e4:94:cb:a8:03:a8:ef:1b:54:db:5d:1d:15:e4:9f:2d: 7c:0d:74:52:ec:15:c8:d9:24:48:e7:7b:1c:6b:5e:5b:86:33: bc:51:a9:53:25:bb:d4:87:af:0d:ab:71:25:b2:fa:79:a0:53: c3:03:9c:a1:82:45:37:92:6f:a1:0e:55:78:4e:e2:39:bc:dd: 56:76:4f:dc:67:59:23:8f:a3:9c:0d:b1:47:d7:d0:70:62:ff: 7b:4c:78:f5:2d:69:9d:77:47:b8:5b:f3:8f:a0:7d:fb:23:50: 2d:22:f9:75 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJE M0FDOUZDNDRDM0REMkFCN0I1RDIwQkMxNThDODJEODNEMjYwQTAeFw0yNTEyMTUw MTIzMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVEMjQxRkEzMUJBMjFE RTNFREEwQzFFRjJCMDhFRDVCMjlCNTE0MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRmni1fycEsYx5X//jFICVZO+GbUk3J71sm2CsXkX1S6Tz3/Mo Zlio7w0MQDZDAM6TcRcLETiM08eFKE80S0yl5HM1WF5kO4FEudTqVShgcdfby+Oz qEoBcB5qK56TxuJBrPWWa24P66hRukD1o7vtxvS4J0LeQz1CZ+65y1s+Ogr30bhz 1yJM77llsAxkaTDJkuBYpEW5DFObt+NE2GjsMXb5PuBDYGF2syg571xypnfwyF6t Cj0Vzh77ZYEpwgXI3ISAtFsErhNhKgIBWwZDWjzFMl5Jwr3G2GN2zhye5ZLdFKAI eRXHNeM7uEmsSbgrsy1ZtU/RNdgKe3/feedHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUXSQfoxuiHePtoMHvKwjtWym1FAkwHwYDVR0jBBgwFoAU+9Osn8RMPdKre10g vBWMgtg9JgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1RJSS8t OU9zbjhSTVBkS3JlMTBndkJXTWd0ZzlKZ28uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Ly05T3NuOFJNUGRLcmUxMGd2QldNZ3RnOUpnby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0NUSUkvWFNRZm94dWlIZVB0b01Idkt3anRX eW0xRkFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeC+DAN BgkqhkiG9w0BAQsFAAOCAQEAJ50+8W2IncTfHG1ylLkiZHLIYvXJY+2ep5BLs8Zi iGq95MEPzU8rnIW4ZtB74UqOYhfbUkUcg6FmzY4IzRNvcEfIPYFA/2vnjQUvI9L1 hMffT6FOKC5WL0hG3ba/aCssLu+N82twNF7/qzHId5inyhkYHl0RWi49jXpykQfX F9xz6hX+GSPJUISN86FEYAfIAMTklMuoA6jvG1TbXR0V5J8tfA10UuwVyNkkSOd7 HGteW4YzvFGpUyW71IevDatxJbL6eaBTwwOcoYJFN5JvoQ5VeE7iObzdVnZP3GdZ I4+jnA2xR9fQcGL/e0x49S1pnXdHuFvzj6B9+yNQLSL5dQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:49:04 2025 by rpki-client