This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/I6nkNa9rDeNSxvqeKt-e7ufBf3c.roa
File: I6nkNa9rDeNSxvqeKt-e7ufBf3c.roa (raw, json)
Hash identifier: Gba91SUvxGLQxat7+zKgk0aaFNGCHgI8m38yJgXpn3g=
Subject key identifier: 23:A9:E4:35:AF:6B:0D:E3:52:C6:FA:9E:2A:DF:9E:EE:E7:C1:7F:77
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0840
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/I6nkNa9rDeNSxvqeKt-e7ufBf3c.roa
Signing time: Thu 06 Nov 2025 07:52:21 +0000
ROA not before: Thu 06 Nov 2025 07:52:21 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9678
IP address blocks: 103.152.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 15:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Nov 6 07:52:21 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=23A9E435AF6B0DE352C6FA9E2ADF9EEEE7C17F77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:b4:f1:b0:68:f2:7f:58:ec:b1:e2:ba:a9:
7c:13:1c:9f:7b:8f:92:75:eb:4b:74:bd:eb:d4:32:
61:99:de:32:1a:5a:94:93:53:ef:a1:a0:28:4d:de:
42:32:f2:6e:0a:99:71:9c:12:e8:d1:79:be:52:01:
77:d5:59:2b:7a:5b:87:33:b2:7f:64:89:2f:2a:c3:
2f:fc:3b:39:aa:00:01:41:d6:cd:b2:02:d6:f5:c2:
b4:3f:1f:8b:f8:c1:e0:89:9b:b6:a7:28:df:bc:b4:
eb:28:f7:71:7c:0b:0e:e2:e1:02:48:69:a0:53:be:
31:43:d1:e4:f4:71:c2:e4:e3:7a:24:e2:5d:5c:ae:
be:b8:96:6b:60:11:ee:36:3d:0a:c1:48:a6:bc:57:
3a:13:4a:a5:9b:19:ae:ed:fe:1e:c0:18:0f:35:a6:
e1:df:34:e0:f5:62:04:dd:6b:2a:36:0f:bc:3c:8c:
bd:07:0b:c3:29:42:b7:54:70:a1:ff:17:03:00:29:
7a:79:b0:8e:63:fc:e1:30:ef:a1:79:b9:b3:1a:48:
9b:02:25:df:26:e0:35:a4:f7:26:cf:4e:79:5a:56:
d0:ca:db:d6:22:9b:d0:27:1f:3b:9b:57:30:f6:cd:
d0:c1:3f:a6:73:ef:e4:62:c3:51:09:61:be:a6:b8:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A9:E4:35:AF:6B:0D:E3:52:C6:FA:9E:2A:DF:9E:EE:E7:C1:7F:77
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/I6nkNa9rDeNSxvqeKt-e7ufBf3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:64:ff:98:ef:f3:7b:c1:32:35:90:81:84:0a:b1:4b:66:b2:
2a:84:56:10:6c:4e:8e:d4:dc:ab:f0:e5:21:fc:18:96:78:05:
1f:45:c0:53:a9:2c:42:f0:b9:99:51:b2:15:d4:89:15:9a:fe:
1b:0b:41:42:26:55:41:81:14:97:e7:02:52:46:e9:35:38:6f:
7a:3a:d9:38:a0:2d:63:58:34:8e:02:b4:e0:b7:b0:36:cf:e0:
d0:52:08:e7:7c:5e:ff:32:56:f1:0f:30:a5:40:52:37:aa:6b:
17:a0:3c:2f:4f:1b:82:0c:ae:48:fb:2f:be:83:ef:36:94:87:
b4:78:89:81:a5:7e:d7:63:e7:f9:78:69:0a:6e:37:ce:da:fa:
00:c8:ec:ad:86:e3:93:0c:81:f3:ac:28:c4:5d:03:7e:ce:03:
c8:48:8c:53:c1:52:4c:d7:0b:d2:42:5b:a6:c8:df:44:99:bf:
60:60:13:47:82:fa:cb:f4:c5:53:95:da:e1:64:16:45:9c:54:
bb:5e:20:01:18:e5:59:e5:4b:2d:e4:a2:3c:e3:03:8b:91:06:
4b:fe:c8:b4:be:b3:70:65:aa:34:4c:de:1f:75:8d:dc:61:17:
cf:3a:20:e1:0c:16:52:94:26:dd:7f:70:95:f7:45:7f:7b:b9:
0f:d8:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:02:53 2025 by rpki-client