This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MFE/uQ8hsUY7DGZfqpz16JkxubKkJpI.roa File: uQ8hsUY7DGZfqpz16JkxubKkJpI.roa (raw, json) Hash identifier: hlIYGe5ibb5uZtH6l3OpJskqeyQBazMQ/cdaDs7BMBg= Subject key identifier: B9:0F:21:B1:46:3B:0C:66:5F:AA:9C:F5:E8:99:31:B9:B2:A4:26:92 Certificate issuer: /CN=AB0CB3B24069501EB4E8A5C04E0EEC6511C2C91C Certificate serial: 35 Authority key identifier: AB:0C:B3:B2:40:69:50:1E:B4:E8:A5:C0:4E:0E:EC:65:11:C2:C9:1C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/uQ8hsUY7DGZfqpz16JkxubKkJpI.roa Signing time: Thu 25 Dec 2025 16:22:58 +0000 ROA not before: Thu 25 Dec 2025 16:22:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 13335 IP address blocks: 103.117.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 12:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB0CB3B24069501EB4E8A5C04E0EEC6511C2C91C Validity Not Before: Dec 25 16:22:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B90F21B1463B0C665FAA9CF5E89931B9B2A42692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:5b:06:96:d2:2e:8f:1b:32:99:ac:a3:28: 30:95:cf:8b:c7:16:27:8b:18:5d:e9:84:42:6d:ce: dc:c4:0e:9e:08:2b:bb:80:e1:f2:3b:11:2c:d5:a4: 4d:cd:0c:5f:15:08:ce:9a:77:94:fb:b2:44:ae:d2: dc:ba:41:91:eb:d5:f2:8e:e6:c5:36:28:54:20:01: 48:9f:0f:62:ef:06:f2:c5:10:96:81:b5:08:a2:fc: 2d:90:58:aa:d7:98:54:d0:1a:30:8d:8a:d4:58:3e: 7c:f6:c7:ea:dd:4e:d9:52:27:e5:a8:7b:9d:0d:e5: 03:33:3c:31:bc:bb:14:10:15:ff:be:dc:ca:c5:ae: 4e:e1:e7:f8:40:48:e3:26:7a:1d:a3:43:84:3d:f2: de:bd:c0:a3:dd:54:d2:4a:96:52:d6:90:54:1a:b6: 12:e3:c0:9d:bc:a7:c3:fd:42:22:87:d1:00:82:8f: 9e:e0:d1:46:f0:fc:94:74:dc:08:84:bf:2b:73:12: 43:20:4c:aa:dd:3e:45:1b:28:06:8d:e1:86:e3:27: ff:7f:41:7e:8f:8b:dd:95:b5:89:30:ec:a0:91:66: 10:df:c3:cd:35:e7:cb:fa:27:47:cc:b0:50:64:76: 61:b1:70:2d:40:8a:cd:c1:64:10:ef:e2:cd:e5:87: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0F:21:B1:46:3B:0C:66:5F:AA:9C:F5:E8:99:31:B9:B2:A4:26:92 X509v3 Authority Key Identifier: keyid:AB:0C:B3:B2:40:69:50:1E:B4:E8:A5:C0:4E:0E:EC:65:11:C2:C9:1C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/uQ8hsUY7DGZfqpz16JkxubKkJpI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.117.132.0/23 Signature Algorithm: sha256WithRSAEncryption b5:e9:8d:9a:1f:8c:1d:bd:8a:65:48:08:20:a3:46:a2:7f:d9: 49:43:93:78:dd:ac:d2:94:d9:af:bc:39:0c:4b:a1:c6:4b:73: 7f:0c:06:33:37:5f:ac:76:83:ba:78:53:03:44:a5:fe:d6:a7: 63:a2:14:c4:6f:88:a3:e2:19:1f:4e:7c:f9:b0:41:57:4c:a0: 42:7b:18:b1:46:d2:c8:18:4c:6e:19:74:35:fd:35:45:3e:c0: 1c:e9:8b:f6:43:89:e9:0c:87:9f:31:af:ad:3c:0d:81:8a:0f: fe:01:b9:6a:8c:96:08:9d:38:fb:8a:0e:d7:19:40:8d:b1:61: ab:47:23:a8:9e:5d:73:5b:1d:36:59:39:65:b5:78:2e:55:ab: 3f:14:f6:00:65:76:2e:ee:7a:ac:6a:af:d5:a9:ac:db:24:c7: 3f:f5:29:4e:07:17:35:a8:21:ad:b8:bc:82:eb:69:a3:cf:b7: 6e:f3:5c:f2:92:ea:3f:2e:b8:a7:78:85:8a:d6:22:45:2a:8b: 24:b2:2e:c6:6a:41:23:a7:1a:ec:4a:99:6c:30:73:70:8d:0c: 37:eb:50:4a:9b:c2:f4:9b:20:a7:e5:51:23:ff:fb:8e:64:81: ef:4b:2e:e9:a1:84:f4:3e:28:c1:04:f1:8e:82:66:68:f7:f3: be:52:d0:ab -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQjBD QjNCMjQwNjk1MDFFQjRFOEE1QzA0RTBFRUM2NTExQzJDOTFDMB4XDTI1MTIyNTE2 MjI1OFoXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoQjkwRjIxQjE0NjNCMEM2 NjVGQUE5Q0Y1RTg5OTMxQjlCMkE0MjY5MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKlQWwaW0i6PGzKZrKMoMJXPi8cWJ4sYXemEQm3O3MQOnggru4Dh 8jsRLNWkTc0MXxUIzpp3lPuyRK7S3LpBkevV8o7mxTYoVCABSJ8PYu8G8sUQloG1 CKL8LZBYqteYVNAaMI2K1Fg+fPbH6t1O2VIn5ah7nQ3lAzM8Mby7FBAV/77cysWu TuHn+EBI4yZ6HaNDhD3y3r3Ao91U0kqWUtaQVBq2EuPAnbynw/1CIofRAIKPnuDR RvD8lHTcCIS/K3MSQyBMqt0+RRsoBo3hhuMn/39Bfo+L3ZW1iTDsoJFmEN/DzTXn y/onR8ywUGR2YbFwLUCKzcFkEO/izeWHFAUCAwEAAaOCAegwggHkMB0GA1UdDgQW BBS5DyGxRjsMZl+qnPXomTG5sqQmkjAfBgNVHSMEGDAWgBSrDLOyQGlQHrTopcBO DuxlEcLJHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGA1UdHwRSMFAwTqBM oEqGSHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRkUvcXd5 enNrQnBVQjYwNktYQVRnN3NaUkhDeVJ3LmNybDBgBggrBgEFBQcBAQRUMFIwUAYI KwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9x d3l6c2tCcFVCNjA2S1hBVGc3c1pSSEN5UncuY2VyMA4GA1UdDwEB/wQEAwIHgDCB mQYIKwYBBQUHAQsEgYwwgYkwVAYIKwYBBQUHMAuGSHJzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS9NRkUvdVE4aHNVWTdER1pmcXB6MTZKa3h1Yktr SnBJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWd1hDANBgkq hkiG9w0BAQsFAAOCAQEAtemNmh+MHb2KZUgIIKNGon/ZSUOTeN2s0pTZr7w5DEuh xktzfwwGMzdfrHaDunhTA0Sl/tanY6IUxG+Io+IZH058+bBBV0ygQnsYsUbSyBhM bhl0Nf01RT7AHOmL9kOJ6QyHnzGvrTwNgYoP/gG5aoyWCJ04+4oO1xlAjbFhq0cj qJ5dc1sdNlk5ZbV4LlWrPxT2AGV2Lu56rGqv1ams2yTHP/UpTgcXNaghrbi8gutp o8+3bvNc8pLqPy64p3iFitYiRSqLJLIuxmpBI6ca7EqZbDBzcI0MN+tQSpvC9Jsg p+VRI//7jmSB70su6aGE9D4owQTxjoJmaPfzvlLQqw== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:07 2026 by rpki-client