This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CTII/s-G0KgqsE6I7c89jp-hO6AdPhuM.roa
File: s-G0KgqsE6I7c89jp-hO6AdPhuM.roa (raw, json)
Hash identifier: PptvIywQiCDU2StsTjkRMAyT1xOlFS5zTOJ3vVRxdfU=
Subject key identifier: B3:E1:B4:2A:0A:AC:13:A2:3B:73:CF:63:A7:E8:4E:E8:07:4F:86:E3
Certificate issuer: /CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A
Certificate serial: 13F6
Authority key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/s-G0KgqsE6I7c89jp-hO6AdPhuM.roa
Signing time: Mon 15 Dec 2025 01:24:32 +0000
ROA not before: Mon 15 Dec 2025 01:24:32 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 133948
IP address blocks: 103.130.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 21:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5110 (0x13f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A
Validity
Not Before: Dec 15 01:24:32 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B3E1B42A0AAC13A23B73CF63A7E84EE8074F86E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:27:10:97:0f:ed:e5:e0:4b:87:b4:60:eb:
b3:9e:ac:c5:52:71:29:e9:a3:d6:c7:03:57:b7:19:
df:1d:79:fb:6c:77:27:ec:4a:35:9a:b7:6c:77:ec:
e8:b1:c1:60:dc:ad:44:37:6b:ed:4c:ed:ea:09:af:
f3:e0:02:22:aa:b8:51:ab:a8:bc:c8:a4:8a:20:9f:
24:05:22:70:2d:42:2b:3a:1d:4f:5b:b1:63:5c:a2:
69:36:a6:90:a9:93:be:e4:ad:b6:2a:a9:bd:2a:e9:
10:ae:a9:42:32:1c:01:6e:34:5e:7e:4d:4f:eb:7f:
f1:2e:4a:9f:e6:13:f2:00:9e:99:f9:69:19:68:ae:
3c:25:f4:0c:de:5d:80:f5:8e:19:ed:19:5d:f3:f6:
14:c6:39:6e:d4:d7:1e:b3:3c:7e:11:21:05:28:87:
ec:a1:04:8a:6f:21:69:be:4d:77:ac:46:f8:37:0d:
fd:1a:ae:1b:f0:86:c3:24:ad:7d:5c:ce:b1:6d:e6:
d9:5a:62:63:a1:42:89:36:df:3c:4d:94:7f:f2:40:
ee:ba:3d:3b:c9:11:30:5d:b9:0d:18:82:3b:28:19:
2f:c7:f2:b1:d6:7c:c4:08:2f:63:68:51:26:4c:30:
85:4d:d1:0a:bb:f9:63:9a:b8:e6:52:28:7b:36:63:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E1:B4:2A:0A:AC:13:A2:3B:73:CF:63:A7:E8:4E:E8:07:4F:86:E3
X509v3 Authority Key Identifier:
keyid:FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/s-G0KgqsE6I7c89jp-hO6AdPhuM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0e:95:88:c6:16:1e:52:a0:22:2c:a7:ed:99:99:10:a5:67:
29:7a:83:77:6f:cd:1c:bb:19:4b:95:c7:8a:61:76:35:2d:2a:
dc:56:6f:a5:07:a4:51:b6:e4:fa:1a:a1:cd:ec:38:c9:26:2f:
73:45:0c:bb:ae:87:20:cd:83:06:a8:dd:37:1c:dc:ca:b7:88:
19:dd:36:d7:df:fa:3f:d1:85:25:cd:ce:03:5e:02:2f:10:b5:
86:64:05:ac:0c:72:3c:c9:0a:c5:31:5d:6e:3a:43:94:55:8d:
2c:0f:ef:4a:66:03:70:1e:e3:e2:31:3b:21:ec:84:d6:8e:18:
6c:14:8c:ee:5d:6c:b6:5d:b2:ec:f6:b7:59:cf:88:be:15:6b:
53:09:22:22:3e:12:3c:5b:a0:09:c5:8e:3c:0e:22:61:c6:50:
98:ca:47:2c:e3:12:be:e1:7e:75:6b:3d:81:59:ff:61:61:01:
a4:aa:7b:f7:e4:21:2d:76:21:e2:b0:c1:ac:dd:44:2b:9f:ed:
3a:64:b5:65:12:8e:94:ac:12:4a:1f:f3:32:cd:f5:dc:40:c3:
37:46:96:c4:54:24:aa:4e:06:08:53:e8:21:75:c2:37:d6:e1:
15:e8:59:be:13:89:36:0b:33:22:ab:d5:7c:df:f3:3e:9d:b1:
53:98:75:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:47:14 2025 by rpki-client