This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/SS9y9ImviTwF_EIpxB68WqHgiU0.roa File: SS9y9ImviTwF_EIpxB68WqHgiU0.roa (raw, json) Hash identifier: jnEpX4gTJi/ATXH671IIIz88ILb0ln5jGdox2habNRI= Subject key identifier: 49:2F:72:F4:89:AF:89:3C:05:FC:42:29:C4:1E:BC:5A:A1:E0:89:4D Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0E65 Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/SS9y9ImviTwF_EIpxB68WqHgiU0.roa Signing time: Mon 15 Dec 2025 10:00:29 +0000 ROA not before: Mon 15 Dec 2025 10:00:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18183 IP address blocks: 61.56.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 20:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3685 (0xe65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Dec 15 10:00:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=492F72F489AF893C05FC4229C41EBC5AA1E0894D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:c8:2b:27:a9:e8:ec:7a:26:ed:ea:a6:34: 60:08:36:93:4b:1a:61:53:e8:81:86:ce:82:61:ae: 9b:f8:ea:b9:f4:23:07:13:e1:db:ba:50:26:91:32: cd:bf:98:9e:07:4a:e0:93:79:0e:95:ed:48:cc:0d: ef:45:0e:1c:f5:97:f4:33:db:9c:fe:86:05:a3:1a: 1f:64:51:30:75:c5:30:90:4c:b4:64:1f:bc:d7:66: cc:b2:71:a0:5f:1a:5c:88:62:bd:c5:0c:86:85:30: 3d:91:e2:64:71:45:fe:e9:82:52:4e:b1:bc:45:de: 18:b4:57:62:65:b9:a1:6a:3f:32:95:b8:bf:4a:80: 50:6c:b7:2e:7e:1e:04:1a:53:e1:c9:94:3c:62:a0: 76:25:c6:a9:0e:3d:61:00:0f:60:ac:ee:ac:28:83: bb:3f:ab:5c:7d:06:8e:76:55:8a:ea:52:87:e1:b9: dc:10:e8:cf:3a:7f:5f:79:55:b6:bb:bc:b4:56:5a: ba:63:a0:29:b4:a8:3b:5c:f3:bb:bc:6a:4c:f9:4c: e5:96:71:6e:fc:c8:75:d5:a4:57:5d:f7:e6:f4:05: 55:92:70:0c:81:8a:4e:54:b3:de:9c:1d:e0:65:ef: 6e:d7:57:c9:f3:2d:5d:07:20:ca:90:f4:3a:39:10: a6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2F:72:F4:89:AF:89:3C:05:FC:42:29:C4:1E:BC:5A:A1:E0:89:4D X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/SS9y9ImviTwF_EIpxB68WqHgiU0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.0.0/20 Signature Algorithm: sha256WithRSAEncryption 13:0e:80:a8:b3:bb:77:f2:7b:16:49:ed:0c:e1:f0:ce:88:5f: 4a:e5:e2:92:30:60:36:98:b5:be:e2:b5:68:c4:1a:89:8f:2f: 4e:7a:47:d1:79:b5:10:c2:c2:e7:95:54:25:77:2c:ab:3a:96: 79:50:f9:11:54:92:74:aa:09:7f:42:0e:69:e1:bd:57:91:1c: 2f:3c:2f:cf:a5:b2:57:99:31:b2:8d:c5:b2:a2:6e:ee:3b:5d: 41:0d:57:4d:aa:ac:fb:b8:38:44:a9:ab:24:8d:78:c8:94:54: 7d:fb:93:de:f4:e8:a8:8d:c1:2b:88:1b:2d:6f:58:92:88:bc: bb:97:03:38:20:b8:b9:d6:07:40:ad:bb:41:33:11:73:fc:90: 1e:e4:57:a5:2c:b6:55:69:34:18:21:40:dc:8a:68:f1:a7:7f: 21:ed:c2:36:d6:b0:42:4d:ed:08:0c:14:06:dc:7b:51:0a:ec: 78:de:32:2d:ce:b9:fc:5e:67:f3:51:1e:fa:4e:07:8c:60:07: 63:bc:be:1a:75:98:15:d8:b1:35:f6:f7:60:8d:77:68:97:e3: 82:c2:06:5d:2c:c3:e8:4c:3d:85:dd:ac:d2:08:96:f7:e9:4d: 5c:ce:42:ba:9f:06:31:35:04:d9:da:5f:a0:b9:72:ec:ba:49: f0:84:6f:cb -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTEyMTUx MDAwMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ5MkY3MkY0ODlBRjg5 M0MwNUZDNDIyOUM0MUVCQzVBQTFFMDg5NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXOcgrJ6no7Hom7eqmNGAINpNLGmFT6IGGzoJhrpv46rn0IwcT 4du6UCaRMs2/mJ4HSuCTeQ6V7UjMDe9FDhz1l/Qz25z+hgWjGh9kUTB1xTCQTLRk H7zXZsyycaBfGlyIYr3FDIaFMD2R4mRxRf7pglJOsbxF3hi0V2JluaFqPzKVuL9K gFBsty5+HgQaU+HJlDxioHYlxqkOPWEAD2Cs7qwog7s/q1x9Bo52VYrqUofhudwQ 6M86f195Vba7vLRWWrpjoCm0qDtc87u8akz5TOWWcW78yHXVpFdd9+b0BVWScAyB ik5Us96cHeBl727XV8nzLV0HIMqQ9Do5EKZ5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUSS9y9ImviTwF/EIpxB68WqHgiU0wHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL1NTOXk5SW12aVR3Rl9FSXB4QjY4V3FI Z2lVMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9OAAwDQYJ KoZIhvcNAQELBQADggEBABMOgKizu3fyexZJ7Qzh8M6IX0rl4pIwYDaYtb7itWjE GomPL056R9F5tRDCwueVVCV3LKs6lnlQ+RFUknSqCX9CDmnhvVeRHC88L8+lsleZ MbKNxbKibu47XUENV02qrPu4OESpqySNeMiUVH37k9706KiNwSuIGy1vWJKIvLuX AzgguLnWB0Ctu0EzEXP8kB7kV6UstlVpNBghQNyKaPGnfyHtwjbWsEJN7QgMFAbc e1EK7HjeMi3OufxeZ/NRHvpOB4xgB2O8vhp1mBXYsTX292CNd2iX44LCBl0sw+hM PYXdrNIIlvfpTVzOQrqfBjE1BNnaX6C5cuy6SfCEb8s= -----END CERTIFICATE-----Generated at Tue Dec 16 18:56:51 2025 by rpki-client