This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/YPnhMYTTuH2SgqQt_jT5abvU5_I.roa
File: YPnhMYTTuH2SgqQt_jT5abvU5_I.roa (raw, json)
Hash identifier: UmX7HJBrzyrOQ5GcuWvDGD0yzeseArr+5fx4h5KscqA=
Subject key identifier: 60:F9:E1:31:84:D3:B8:7D:92:82:A4:2D:FE:34:F9:69:BB:D4:E7:F2
Certificate issuer: /CN=7DA2CB7F5943C8A41C0E2BD30C5E1F4A9F84C374
Certificate serial: 03
Authority key identifier: 7D:A2:CB:7F:59:43:C8:A4:1C:0E:2B:D3:0C:5E:1F:4A:9F:84:C3:74
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/faLLf1lDyKQcDivTDF4fSp-Ew3Q.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/YPnhMYTTuH2SgqQt_jT5abvU5_I.roa
Signing time: Mon 05 Jan 2026 02:47:43 +0000
ROA not before: Mon 05 Jan 2026 02:47:43 +0000
ROA not after: Thu 12 Nov 2026 15:30:20 +0000
asID: 131676
IP address blocks: 138.252.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/faLLf1lDyKQcDivTDF4fSp-Ew3Q.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/faLLf1lDyKQcDivTDF4fSp-Ew3Q.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/faLLf1lDyKQcDivTDF4fSp-Ew3Q.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DA2CB7F5943C8A41C0E2BD30C5E1F4A9F84C374
Validity
Not Before: Jan 5 02:47:43 2026 GMT
Not After : Nov 12 15:30:20 2026 GMT
Subject: CN=60F9E13184D3B87D9282A42DFE34F969BBD4E7F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:29:b5:b1:fc:e7:90:65:ea:6d:9e:f0:32:
1c:a6:49:fd:63:00:fa:73:82:7b:49:76:4f:7b:dc:
52:95:b9:69:ee:cb:33:33:d4:b5:bb:97:e9:cd:51:
cc:78:c6:a5:58:22:6e:85:54:dc:60:76:07:25:a9:
3b:17:ca:b8:9a:ef:89:34:3c:61:43:4d:73:48:64:
f4:af:ec:d1:10:24:87:72:33:a5:09:92:79:ae:0f:
62:ea:2d:5d:82:05:7c:84:a7:11:f7:c0:9c:da:61:
04:ec:37:d8:bf:35:f4:a3:d4:8d:21:5c:1f:b3:b8:
92:d5:77:e7:c1:90:05:08:8b:41:45:78:a4:55:01:
fb:d8:f3:98:82:b7:9b:28:4e:83:83:b9:ab:f8:05:
a8:f1:d8:ed:40:88:a8:12:a2:59:7f:ce:2d:9a:2f:
da:53:c3:a2:6c:1f:c7:7a:df:51:b8:11:44:45:84:
9f:21:69:ed:85:33:45:ff:40:ee:47:24:56:c9:0c:
84:df:5f:95:63:b3:d5:7f:3f:f1:09:5c:db:f0:c9:
27:91:95:41:9b:76:d3:37:5e:14:4d:e2:69:87:2f:
3e:bc:1f:7c:a2:17:40:5e:cc:c2:30:8a:b8:69:1f:
38:8e:e8:d1:14:88:20:c2:d5:fd:b7:d4:76:c3:1c:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F9:E1:31:84:D3:B8:7D:92:82:A4:2D:FE:34:F9:69:BB:D4:E7:F2
X509v3 Authority Key Identifier:
keyid:7D:A2:CB:7F:59:43:C8:A4:1C:0E:2B:D3:0C:5E:1F:4A:9F:84:C3:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/faLLf1lDyKQcDivTDF4fSp-Ew3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/faLLf1lDyKQcDivTDF4fSp-Ew3Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/YPnhMYTTuH2SgqQt_jT5abvU5_I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:27:53:54:f9:67:03:8d:ec:26:8e:4c:1d:17:5d:8c:3a:ba:
a8:d7:5f:a6:bc:2a:89:2b:f1:9d:f6:ca:a2:e6:7e:2b:2e:8c:
96:21:5e:c9:bf:c1:94:25:94:51:45:21:fe:d0:40:3c:cc:b7:
00:a1:0b:9d:85:04:6a:5a:9f:1c:92:61:d6:92:4c:f5:80:f7:
2f:49:c4:38:56:0c:52:49:d7:2b:5e:98:bb:04:95:36:d9:c9:
08:0e:5d:3b:01:18:a0:5a:e8:ee:56:65:00:e1:a4:79:8b:46:
88:40:91:f7:ee:fd:c3:41:03:ba:0a:7d:fd:61:02:54:7f:90:
10:db:a1:66:12:bf:e7:a5:c5:97:c3:ec:dc:f5:f7:40:36:b2:
fe:bc:2b:66:05:b0:f1:63:a4:4d:62:e5:58:17:f8:b3:35:b3:
c1:40:cd:1a:b0:26:cf:36:fb:d3:55:ba:d7:0a:c9:12:ab:5b:
6d:0a:ae:e8:2b:50:03:e9:77:9c:7c:f8:d3:e0:67:f2:67:55:
11:ba:08:fd:df:eb:94:71:73:c8:a9:41:47:79:87:9a:74:19:
d4:90:ce:a7:c1:1e:e9:e0:92:18:df:54:78:89:95:a9:31:e4:
6c:76:0d:53:da:9a:49:6b:65:da:4c:f0:09:76:8e:c7:14:36:
7b:bd:0c:66
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3REEy
Q0I3RjU5NDNDOEE0MUMwRTJCRDMwQzVFMUY0QTlGODRDMzc0MB4XDTI2MDEwNTAy
NDc0M1oXDTI2MTExMjE1MzAyMFowMzExMC8GA1UEAxMoNjBGOUUxMzE4NEQzQjg3
RDkyODJBNDJERkUzNEY5NjlCQkQ0RTdGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANwAKbWx/OeQZeptnvAyHKZJ/WMA+nOCe0l2T3vcUpW5ae7LMzPU
tbuX6c1RzHjGpVgiboVU3GB2ByWpOxfKuJrviTQ8YUNNc0hk9K/s0RAkh3IzpQmS
ea4PYuotXYIFfISnEffAnNphBOw32L819KPUjSFcH7O4ktV358GQBQiLQUV4pFUB
+9jzmIK3myhOg4O5q/gFqPHY7UCIqBKiWX/OLZov2lPDomwfx3rfUbgRREWEnyFp
7YUzRf9A7kckVskMhN9flWOz1X8/8Qlc2/DJJ5GVQZt20zdeFE3iaYcvPrwffKIX
QF7MwjCKuGkfOI7o0RSIIMLV/bfUdsMccJUCAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBRg+eExhNO4fZKCpC3+NPlpu9Tn8jAfBgNVHSMEGDAWgBR9ost/WUPIpBwOK9MM
Xh9Kn4TDdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GA1UdHwRXMFUwU6BR
oE+GTXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HTUlDTE9V
RC9mYUxMZjFsRHlLUWNEaXZUREY0ZlNwLUV3M1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2ZhTExmMWxEeUtRY0RpdlRERjRmU3AtRXczUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGeBggrBgEFBQcBCwSBkTCBjjBZBggrBgEFBQcwC4ZNcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0dNSUNMT1VEL1lQbmhNWVRUdUgyU2dx
UXRfalQ1YWJ2VTVfSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25p
Yy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACK/MAwDQYJKoZIhvcNAQELBQADggEBAKcnU1T5ZwON7CaOTB0XXYw6uqjXX6a8
Kokr8Z32yqLmfisujJYhXsm/wZQllFFFIf7QQDzMtwChC52FBGpanxySYdaSTPWA
9y9JxDhWDFJJ1ytemLsElTbZyQgOXTsBGKBa6O5WZQDhpHmLRohAkffu/cNBA7oK
ff1hAlR/kBDboWYSv+elxZfD7Nz190A2sv68K2YFsPFjpE1i5VgX+LM1s8FAzRqw
Js82+9NVutcKyRKrW20KrugrUAPpd5x8+NPgZ/JnVRG6CP3f65Rxc8ipQUd5h5p0
GdSQzqfBHungkhjfVHiJlakx5Gx2DVPamklrZdpM8Al2jscUNnu9DGY=
-----END CERTIFICATE-----
Generated at Wed Jan 21 21:05:49 2026 by rpki-client