This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKH/nxPOB_142Cw5aIl7fWRINXa_Loc.roa File: nxPOB_142Cw5aIl7fWRINXa_Loc.roa (raw, json) Hash identifier: oZQg3Mac5DRiFP+QaVGaZceQPEXpPsPnqOS7dI/2mA4= Subject key identifier: 9F:13:CE:07:FD:78:D8:2C:39:68:89:7B:7D:64:48:35:76:BF:2E:87 Certificate issuer: /CN=BBF8E5352240971787806A3E53A8904859A9F0E7 Certificate serial: 01E8 Authority key identifier: BB:F8:E5:35:22:40:97:17:87:80:6A:3E:53:A8:90:48:59:A9:F0:E7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/nxPOB_142Cw5aIl7fWRINXa_Loc.roa Signing time: Fri 26 Dec 2025 15:40:20 +0000 ROA not before: Fri 26 Dec 2025 15:40:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131645 IP address blocks: 161.248.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 22:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBF8E5352240971787806A3E53A8904859A9F0E7 Validity Not Before: Dec 26 15:40:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9F13CE07FD78D82C3968897B7D64483576BF2E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:bb:38:11:74:80:67:88:cf:7f:3b:aa:29: d2:bd:46:c8:10:a6:03:ae:65:1f:1c:e7:bb:4f:ee: a6:07:a1:d5:d8:21:b4:99:01:e4:1b:60:be:0a:4f: a8:4a:be:04:61:54:c8:c0:ef:2f:c9:09:df:48:ac: b1:e4:cf:2c:df:16:c8:65:92:a2:72:fb:09:27:68: 14:24:ee:76:f1:28:a6:be:af:68:05:8b:af:69:14: c1:07:4f:fd:77:c5:e4:df:e3:67:5c:13:94:f4:7a: e9:e7:d6:22:0e:6b:3f:35:36:ae:a4:b0:9b:30:75: f8:d6:1f:0a:3b:cd:72:31:27:4c:dc:b3:26:7b:9c: c7:6b:fb:fd:68:2c:62:c7:ea:05:77:f2:58:f5:b2: f0:a1:89:0b:4a:de:42:ff:93:33:80:50:99:bd:50: 27:72:50:d0:9c:ca:cb:e2:8f:ca:88:09:14:d6:2a: 63:7b:6d:93:5c:cc:e9:ab:34:a7:a2:4a:be:7f:33: da:55:0f:bc:3e:4f:e6:fa:96:c6:0c:7c:20:e4:db: e6:bb:83:f5:5e:55:3f:e4:e7:a3:8b:f3:f6:47:7b: 75:25:a6:8b:d9:d6:45:ec:df:f6:fd:2a:68:3a:23: 98:cb:ac:23:bb:bf:7a:3f:4e:9f:c1:db:33:fd:e3: 85:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:13:CE:07:FD:78:D8:2C:39:68:89:7B:7D:64:48:35:76:BF:2E:87 X509v3 Authority Key Identifier: keyid:BB:F8:E5:35:22:40:97:17:87:80:6A:3E:53:A8:90:48:59:A9:F0:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/nxPOB_142Cw5aIl7fWRINXa_Loc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.128.0/23 Signature Algorithm: sha256WithRSAEncryption 26:32:9b:c7:80:51:5b:1b:7c:cc:6d:c9:3c:28:0a:e1:a6:58: 9b:66:87:59:e9:a3:2e:fb:75:fa:47:7a:f7:24:f2:11:8b:05: 6a:8d:ac:59:3c:a2:76:cf:3c:85:02:7c:71:0c:01:63:87:e0: c7:ba:8f:40:e0:35:67:f6:e7:5c:50:44:eb:62:e2:3e:44:9f: e1:84:88:06:b6:d8:4b:dc:ba:e3:87:54:21:8b:3d:75:fb:05: 68:0b:68:39:72:e8:9d:1d:a0:d3:63:ad:ad:59:16:29:96:39: d5:14:56:f6:69:44:89:9b:e6:96:6a:46:e4:f8:fc:61:a6:fb: 48:14:d8:18:48:29:56:d3:69:16:12:73:7f:0e:7d:c7:ce:e0: 93:c5:24:cb:5a:c9:4c:68:13:0f:ce:f4:4c:5a:58:b7:c4:4e: 78:2e:b6:ab:a5:aa:a5:9d:1f:04:f7:4b:f8:c5:9e:b8:dd:9d: 49:6c:ea:20:c1:32:b4:ef:4c:01:92:72:47:b2:8e:6b:41:2c: 05:10:a1:17:bd:8c:91:af:b2:37:f0:26:63:89:4f:d4:1a:a3: 47:fd:b1:88:24:42:3d:68:1f:7b:77:ce:e6:9b:7e:7c:b5:06: 77:e5:77:48:fe:a2:f6:b7:57:66:54:65:7e:4a:ff:d8:5d:c5: 02:f5:60:50 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJG OEU1MzUyMjQwOTcxNzg3ODA2QTNFNTNBODkwNDg1OUE5RjBFNzAeFw0yNTEyMjYx NTQwMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlGMTNDRTA3RkQ3OEQ4 MkMzOTY4ODk3QjdENjQ0ODM1NzZCRjJFODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1K7s4EXSAZ4jPfzuqKdK9RsgQpgOuZR8c57tP7qYHodXYIbSZ AeQbYL4KT6hKvgRhVMjA7y/JCd9IrLHkzyzfFshlkqJy+wknaBQk7nbxKKa+r2gF i69pFMEHT/13xeTf42dcE5T0eunn1iIOaz81Nq6ksJswdfjWHwo7zXIxJ0zcsyZ7 nMdr+/1oLGLH6gV38lj1svChiQtK3kL/kzOAUJm9UCdyUNCcysvij8qICRTWKmN7 bZNczOmrNKeiSr5/M9pVD7w+T+b6lsYMfCDk2+a7g/VeVT/k56OL8/ZHe3UlpovZ 1kXs3/b9Kmg6I5jLrCO7v3o/Tp/B2zP944XxAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUnxPOB/142Cw5aIl7fWRINXa/LocwHwYDVR0jBBgwFoAUu/jlNSJAlxeHgGo+ U6iQSFmp8OcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tIL3Vf amxOU0pBbHhlSGdHby1VNmlRU0ZtcDhPYy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev dV9qbE5TSkFseGVIZ0dvLVU2aVFTRm1wOE9jLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0tIL254UE9CXzE0MkN3NWFJbDdmV1JJTlhh X0xvYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGh+IAwDQYJ KoZIhvcNAQELBQADggEBACYym8eAUVsbfMxtyTwoCuGmWJtmh1npoy77dfpHevck 8hGLBWqNrFk8onbPPIUCfHEMAWOH4Me6j0DgNWf251xQROti4j5En+GEiAa22Evc uuOHVCGLPXX7BWgLaDly6J0doNNjra1ZFimWOdUUVvZpRImb5pZqRuT4/GGm+0gU 2BhIKVbTaRYSc38OfcfO4JPFJMtayUxoEw/O9ExaWLfETngutqulqqWdHwT3S/jF nrjdnUls6iDBMrTvTAGSckeyjmtBLAUQoRe9jJGvsjfwJmOJT9Qao0f9sYgkQj1o H3t3zuabfny1Bnfld0j+ova3V2ZUZX5K/9hdxQL1YFA= -----END CERTIFICATE-----Generated at Wed Jan 21 21:04:24 2026 by rpki-client