This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/c9qOVGJ8TYv0UxixaXI7bGV32Fc.roa
File: c9qOVGJ8TYv0UxixaXI7bGV32Fc.roa (raw, json)
Hash identifier: PIewwWx+sK84HzjMp463jVjDUtzcK4RQCQyNLfew8vk=
Subject key identifier: 73:DA:8E:54:62:7C:4D:8B:F4:53:18:B1:69:72:3B:6C:65:77:D8:57
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 125F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/c9qOVGJ8TYv0UxixaXI7bGV32Fc.roa
Signing time: Fri 22 Aug 2025 08:49:16 +0000
ROA not before: Fri 22 Aug 2025 08:49:16 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17809
IP address blocks: 203.222.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 09:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4703 (0x125f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 22 08:49:16 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=73DA8E54627C4D8BF45318B169723B6C6577D857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:4a:46:2f:6e:5a:eb:70:38:24:b2:b2:aa:
b6:38:6e:85:c5:50:fd:36:25:af:c6:0f:bf:6a:17:
6c:d7:be:1d:48:20:7f:4b:da:b1:5f:6f:cd:5f:59:
eb:24:22:54:0f:eb:2e:a8:b6:aa:02:d9:80:a4:cb:
0b:54:ed:d9:75:fa:e1:07:37:50:17:a9:cf:5b:ab:
49:b5:84:32:73:49:05:28:72:c9:3d:7f:0b:c2:4b:
57:13:ad:f3:1d:8a:01:50:1c:d3:71:3d:26:ad:37:
34:a7:7d:b2:d0:67:2f:1e:1c:4f:47:36:9b:bb:79:
82:59:21:ce:57:88:02:72:98:48:81:f6:2b:65:8a:
95:50:b8:ff:eb:9e:32:92:86:c8:6d:e2:90:4e:03:
f0:ed:51:17:73:31:70:b3:e3:00:36:fc:33:50:9e:
c6:de:12:38:89:0e:5b:e6:f0:3d:25:d4:82:42:00:
82:52:dd:4a:87:99:6c:c0:36:fe:18:e7:5f:6a:6d:
e4:e4:e3:98:5c:0d:94:d2:28:bb:01:31:12:54:c3:
ab:55:12:93:36:51:fd:98:05:9a:ff:f6:5f:6c:2e:
e1:ac:25:3b:b0:68:4a:9f:11:85:dc:55:12:0a:82:
58:15:c7:b5:7e:c8:a7:e8:15:37:78:ef:7c:73:f5:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DA:8E:54:62:7C:4D:8B:F4:53:18:B1:69:72:3B:6C:65:77:D8:57
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/c9qOVGJ8TYv0UxixaXI7bGV32Fc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.0.0/19
Signature Algorithm: sha256WithRSAEncryption
af:98:0a:3f:38:bf:0f:cc:50:54:8d:8a:f4:b6:7a:1d:a6:2d:
a8:83:b4:af:3d:5e:54:ec:8f:eb:29:2f:15:1e:4a:ba:8d:88:
78:37:7b:e2:35:ed:dc:51:2e:c4:d5:6b:db:08:1a:6a:1a:36:
ee:ed:00:58:f4:a7:74:f2:6d:29:8e:d4:59:a3:ba:be:6e:34:
1b:72:5e:3d:8b:43:25:91:49:a6:fb:e6:95:1c:b3:ca:dd:67:
ca:ab:79:10:bf:78:42:30:21:29:f5:4f:ce:80:9b:2c:20:1c:
4b:9b:20:f5:61:63:3d:30:c9:43:52:2f:55:31:12:ed:cc:0b:
d4:d6:e2:7e:80:09:8b:be:5f:1b:a6:28:86:a0:bf:aa:bc:5c:
24:c7:94:c1:e8:97:86:8b:0d:ff:0d:d3:d7:52:d3:10:08:02:
1b:cb:da:87:92:dc:e9:85:37:a9:64:39:e5:44:69:5b:00:81:
b8:cf:ec:99:93:d7:1b:02:9a:0f:82:24:ad:39:8d:c7:6c:f9:
62:c2:9c:79:d9:19:38:66:70:66:dd:96:9f:c5:51:84:de:d5:
a9:35:6f:54:bb:86:68:36:46:9f:4d:22:d9:87:1d:58:55:9e:
a8:c4:c8:58:e4:51:6f:a6:44:8b:c6:9e:35:40:4c:6a:d4:41:
1b:6c:df:80
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw
ODQ5MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDczREE4RTU0NjI3QzRE
OEJGNDUzMThCMTY5NzIzQjZDNjU3N0Q4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6jkpGL25a63A4JLKyqrY4boXFUP02Ja/GD79qF2zXvh1IIH9L
2rFfb81fWeskIlQP6y6otqoC2YCkywtU7dl1+uEHN1AXqc9bq0m1hDJzSQUocsk9
fwvCS1cTrfMdigFQHNNxPSatNzSnfbLQZy8eHE9HNpu7eYJZIc5XiAJymEiB9itl
ipVQuP/rnjKShsht4pBOA/DtURdzMXCz4wA2/DNQnsbeEjiJDlvm8D0l1IJCAIJS
3UqHmWzANv4Y519qbeTk45hcDZTSKLsBMRJUw6tVEpM2Uf2YBZr/9l9sLuGsJTuw
aEqfEYXcVRIKglgVx7V+yKfoFTd473xz9eY3AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUc9qOVGJ8TYv0UxixaXI7bGV32FcwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvYzlxT1ZHSjhUWXYwVXhpeGFYSTdi
R1YzMkZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcveADAN
BgkqhkiG9w0BAQsFAAOCAQEAr5gKPzi/D8xQVI2K9LZ6HaYtqIO0rz1eVOyP6ykv
FR5Kuo2IeDd74jXt3FEuxNVr2wgaaho27u0AWPSndPJtKY7UWaO6vm40G3JePYtD
JZFJpvvmlRyzyt1nyqt5EL94QjAhKfVPzoCbLCAcS5sg9WFjPTDJQ1IvVTES7cwL
1NbifoAJi75fG6YohqC/qrxcJMeUweiXhosN/w3T11LTEAgCG8vah5Lc6YU3qWQ5
5URpWwCBuM/smZPXGwKaD4IkrTmNx2z5YsKcedkZOGZwZt2Wn8VRhN7VqTVvVLuG
aDZGn00i2YcdWFWeqMTIWORRb6ZEi8aeNUBMatRBG2zfgA==
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:15:28 2025 by rpki-client