This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKH/aDEfBpv3M_J2d5qjQVTW6AViuyU.roa File: aDEfBpv3M_J2d5qjQVTW6AViuyU.roa (raw, json) Hash identifier: uUwZjNGpelrGUnZbVxeVowuVP9o5hqPbYvrVVF3rQiQ= Subject key identifier: 68:31:1F:06:9B:F7:33:F2:76:77:9A:A3:41:54:D6:E8:05:62:BB:25 Certificate issuer: /CN=DD87446D4150D1453C4A142A49EBA107DA5D1999 Certificate serial: 01E7 Authority key identifier: DD:87:44:6D:41:50:D1:45:3C:4A:14:2A:49:EB:A1:07:DA:5D:19:99 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/aDEfBpv3M_J2d5qjQVTW6AViuyU.roa Signing time: Fri 26 Dec 2025 15:40:20 +0000 ROA not before: Fri 26 Dec 2025 15:40:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131645 IP address blocks: 2401:e760::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 00:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD87446D4150D1453C4A142A49EBA107DA5D1999 Validity Not Before: Dec 26 15:40:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=68311F069BF733F276779AA34154D6E80562BB25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:65:40:fc:2d:6f:00:46:8a:a2:47:07:e4: 06:7f:1c:76:f4:7d:42:70:a5:16:43:69:2f:a9:61: 57:6a:2d:55:0e:70:8b:05:48:4d:89:9b:31:16:4b: 72:63:20:96:14:18:2e:b7:27:04:63:73:82:48:51: f5:5a:46:58:ba:cf:30:94:93:f0:8c:62:df:07:85: 0d:94:da:29:52:74:c7:89:ea:fc:c4:d4:99:89:51: ad:2e:bf:08:68:44:e5:df:a8:e9:c1:97:fa:0a:5d: f1:13:e2:b0:bf:be:6b:ad:8c:3d:c5:60:d7:b9:f1: dd:f0:a7:40:41:df:d9:9f:98:61:f1:c7:e3:f7:a4: 56:cf:2d:af:e8:e9:cb:5a:4e:0d:ac:58:f5:16:a4: e2:74:2b:ef:7d:2a:3a:35:ad:d2:67:84:b9:de:83: 27:ac:32:5a:10:9d:43:87:9e:9d:98:31:4b:ca:a3: 8e:88:95:3f:d1:9e:94:f1:f8:23:ff:e9:bf:c6:0d: 8e:76:0e:e9:e5:65:ec:30:cb:c3:c1:d6:25:61:3b: a5:ff:44:1c:a9:b8:13:61:1e:3d:02:18:83:c8:a9: 20:25:0a:30:fb:d5:04:35:bb:75:bf:3c:a2:92:48: 78:d8:e4:c8:ee:93:0d:5f:1b:82:4a:1c:3d:9a:5d: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:31:1F:06:9B:F7:33:F2:76:77:9A:A3:41:54:D6:E8:05:62:BB:25 X509v3 Authority Key Identifier: keyid:DD:87:44:6D:41:50:D1:45:3C:4A:14:2A:49:EB:A1:07:DA:5D:19:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/aDEfBpv3M_J2d5qjQVTW6AViuyU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:e760::/32 Signature Algorithm: sha256WithRSAEncryption 38:0b:99:06:06:44:90:ad:93:29:51:4a:f9:5c:44:84:80:12: 04:93:d3:4f:8d:cb:39:39:80:6d:90:38:b1:74:e6:7f:8e:6d: 5b:48:af:46:6d:fc:58:3c:e8:20:04:91:85:c3:aa:24:b9:ac: 19:32:64:01:4a:b8:1c:0c:cc:2f:e6:eb:44:c5:75:3a:a3:0b: 66:9a:2e:95:3b:0a:9f:1f:c0:61:6e:9f:e3:70:44:66:0a:e4: 7c:ed:1a:55:c7:5e:a5:29:c9:b7:12:ee:85:9a:4d:8f:19:db: 6a:98:12:b3:ee:f8:8c:8e:9b:ac:52:6c:50:81:e4:f3:5c:66: 87:0d:4e:be:b1:60:56:4f:0d:3d:88:c6:5e:c5:f8:54:4a:1a: 81:32:4d:09:92:66:ef:e3:f8:df:d3:0e:db:30:e1:0a:47:43: f9:f0:e8:d0:e6:27:6f:24:3d:19:1b:fd:98:77:d5:5b:65:0d: 08:c7:25:21:17:67:07:5b:d8:5f:58:38:b9:9e:aa:6a:bf:b9: 8a:ed:69:fb:61:62:0b:24:6d:6e:38:1b:c2:1f:92:da:a2:14: 87:ef:20:12:ea:52:6b:41:61:5f:63:89:9a:73:48:e2:9c:21: 23:1b:e9:00:7b:6b:11:71:66:a1:cb:5c:48:12:aa:8b:39:ca: ea:97:e8:e8 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICAecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREQ4 NzQ0NkQ0MTUwRDE0NTNDNEExNDJBNDlFQkExMDdEQTVEMTk5OTAeFw0yNTEyMjYx NTQwMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY4MzExRjA2OUJGNzMz RjI3Njc3OUFBMzQxNTRENkU4MDU2MkJCMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGS2VA/C1vAEaKokcH5AZ/HHb0fUJwpRZDaS+pYVdqLVUOcIsF SE2JmzEWS3JjIJYUGC63JwRjc4JIUfVaRli6zzCUk/CMYt8HhQ2U2ilSdMeJ6vzE 1JmJUa0uvwhoROXfqOnBl/oKXfET4rC/vmutjD3FYNe58d3wp0BB39mfmGHxx+P3 pFbPLa/o6ctaTg2sWPUWpOJ0K+99Kjo1rdJnhLnegyesMloQnUOHnp2YMUvKo46I lT/RnpTx+CP/6b/GDY52DunlZewwy8PB1iVhO6X/RBypuBNhHj0CGIPIqSAlCjD7 1QQ1u3W/PKKSSHjY5Mjukw1fG4JKHD2aXWE9AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUaDEfBpv3M/J2d5qjQVTW6AViuyUwHwYDVR0jBBgwFoAU3YdEbUFQ0UU8ShQq SeuhB9pdGZkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tILzNZ ZEViVUZRMFVVOFNoUXFTZXVoQjlwZEdaay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev M1lkRWJVRlEwVVU4U2hRcVNldWhCOXBkR1prLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0tIL2FERWZCcHYzTV9KMmQ1cWpRVlRXNkFW aXV5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAedgMA0G CSqGSIb3DQEBCwUAA4IBAQA4C5kGBkSQrZMpUUr5XESEgBIEk9NPjcs5OYBtkDix dOZ/jm1bSK9GbfxYPOggBJGFw6okuawZMmQBSrgcDMwv5utExXU6owtmmi6VOwqf H8Bhbp/jcERmCuR87RpVx16lKcm3Eu6Fmk2PGdtqmBKz7viMjpusUmxQgeTzXGaH DU6+sWBWTw09iMZexfhUShqBMk0Jkmbv4/jf0w7bMOEKR0P58OjQ5idvJD0ZG/2Y d9VbZQ0IxyUhF2cHW9hfWDi5nqpqv7mK7Wn7YWILJG1uOBvCH5LaohSH7yAS6lJr QWFfY4mac0jinCEjG+kAe2sRcWahy1xIEqqLOcrql+jo -----END CERTIFICATE-----Generated at Thu Jan 22 00:20:48 2026 by rpki-client