This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCHC/DWTB2-GvtgHvhD1RHF9hA3KqZ4M.roa File: DWTB2-GvtgHvhD1RHF9hA3KqZ4M.roa (raw, json) Hash identifier: btiRYmHpBssMnZ3TvWOh3+TWy3+TcgnUa0i6iczhd5o= Subject key identifier: 0D:64:C1:DB:E1:AF:B6:01:EF:84:3D:51:1C:5F:61:03:72:AA:67:83 Certificate issuer: /CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891 Certificate serial: 0DA2 Authority key identifier: ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/DWTB2-GvtgHvhD1RHF9hA3KqZ4M.roa Signing time: Fri 22 Aug 2025 08:54:26 +0000 ROA not before: Fri 22 Aug 2025 08:54:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7539 IP address blocks: 211.79.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 20:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3490 (0xda2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891 Validity Not Before: Aug 22 08:54:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0D64C1DBE1AFB601EF843D511C5F610372AA6783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:9b:2d:93:f9:62:72:17:5f:bb:09:b5:58: e9:c6:8f:35:d9:8f:65:a2:4f:2e:a3:e1:6a:58:fb: 4b:3b:1c:a3:73:72:05:e1:90:e2:e6:c2:2c:c1:1a: 50:a1:5c:46:69:fe:a3:fe:17:03:c3:63:67:3f:21: 03:cf:fe:e2:17:f3:f4:e6:49:7f:8c:03:b7:1c:98: 3b:d8:f0:1d:87:48:a0:53:2f:0e:9d:9b:ef:2d:b3: bc:b1:8a:7d:20:e7:2d:12:ab:06:b1:39:82:48:54: 54:cb:a7:6c:bb:fe:00:fd:2b:d3:54:6a:64:26:c2: a9:64:3a:4e:48:25:f4:9e:ed:85:ad:8b:be:6c:16: bc:f4:1c:3a:49:9b:a3:8b:3a:91:b7:d9:39:9f:78: 65:1c:ec:d9:d5:d3:14:be:f2:ff:1c:ba:eb:ee:46: 1d:5b:2b:56:f2:62:e3:7b:07:2e:e6:5a:2b:89:3d: 65:89:9f:d5:63:d3:f7:31:6c:33:f0:87:9f:4c:b7: 07:42:59:8e:76:00:ea:ac:a6:25:85:64:ba:7e:12: 25:53:f4:fa:7a:17:31:08:d3:4b:09:ef:6c:cd:ed: d3:e6:90:21:fd:89:56:ed:a7:16:1f:4f:ca:ff:ef: 1f:c8:1d:53:d8:0b:ad:18:25:48:98:a0:5f:69:a5: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:64:C1:DB:E1:AF:B6:01:EF:84:3D:51:1C:5F:61:03:72:AA:67:83 X509v3 Authority Key Identifier: keyid:ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/DWTB2-GvtgHvhD1RHF9hA3KqZ4M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.48.0/20 Signature Algorithm: sha256WithRSAEncryption 4d:92:1e:36:f7:cb:0c:b7:35:02:d9:6b:35:e0:35:8f:96:92: cb:fd:ea:db:38:15:08:ee:c5:d4:37:0f:9d:1a:d0:83:d0:22: 35:cf:10:1c:07:52:77:a5:e2:cd:b0:e5:0b:4d:99:ea:cc:14: 50:89:e4:50:b1:a9:ec:c2:bd:bb:c1:52:d9:80:bd:22:79:89: ee:c3:a1:77:27:1c:01:1c:52:7c:0c:83:69:c7:29:55:c7:d6: a0:05:00:bf:7f:a8:24:63:66:dd:02:8a:e3:12:71:de:1f:b4: 76:52:ad:1a:d9:e8:33:d7:e1:56:ef:c8:92:67:29:c7:07:a5: b1:a2:f3:31:f1:e6:4a:0e:68:4d:b6:8d:d4:57:37:b2:57:a6: 42:67:58:47:00:e7:9b:06:bc:ca:56:31:b2:ac:ff:08:d1:c4: 0c:e9:08:75:b6:7a:40:02:26:44:3d:f5:18:ca:17:46:0d:81: 46:7e:83:82:e3:34:b7:ab:89:d0:41:0c:7b:1d:85:8e:45:dd: f6:d5:97:53:9d:8f:5b:59:d9:1b:38:68:55:68:7d:47:4d:8a: 06:33:72:86:7d:f6:35:6b:f6:05:95:82:16:cd:c2:94:43:7e: 6b:ff:a1:80:36:83:d7:47:53:8c:fd:3b:18:ac:2c:5f:eb:e8: d2:00:71:b4 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQz ODY4NUZGM0VBMUY0NjY4NURFNUY1N0M2QTRCODEwNDQ4MTg5MTAeFw0yNTA4MjIw ODU0MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBENjRDMURCRTFBRkI2 MDFFRjg0M0Q1MTFDNUY2MTAzNzJBQTY3ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKC5stk/lichdfuwm1WOnGjzXZj2WiTy6j4WpY+0s7HKNzcgXh kOLmwizBGlChXEZp/qP+FwPDY2c/IQPP/uIX8/TmSX+MA7ccmDvY8B2HSKBTLw6d m+8ts7yxin0g5y0SqwaxOYJIVFTLp2y7/gD9K9NUamQmwqlkOk5IJfSe7YWti75s Frz0HDpJm6OLOpG32TmfeGUc7NnV0xS+8v8cuuvuRh1bK1byYuN7By7mWiuJPWWJ n9Vj0/cxbDPwh59MtwdCWY52AOqspiWFZLp+EiVT9Pp6FzEI00sJ72zN7dPmkCH9 iVbtpxYfT8r/7x/IHVPYC60YJUiYoF9ppf/lAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUDWTB2+GvtgHvhD1RHF9hA3KqZ4MwHwYDVR0jBBgwFoAU7ThoX/PqH0ZoXeX1 fGpLgQRIGJEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNIQy83 VGhvWF9QcUgwWm9YZVgxZkdwTGdRUklHSkUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzdUaG9YX1BxSDBab1hlWDFmR3BMZ1FSSUdKRS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSEMvRFdUQjItR3Z0Z0h2aEQxUkhGOWhB M0txWjRNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNNPMDAN BgkqhkiG9w0BAQsFAAOCAQEATZIeNvfLDLc1AtlrNeA1j5aSy/3q2zgVCO7F1DcP nRrQg9AiNc8QHAdSd6XizbDlC02Z6swUUInkULGp7MK9u8FS2YC9InmJ7sOhdycc ARxSfAyDaccpVcfWoAUAv3+oJGNm3QKK4xJx3h+0dlKtGtnoM9fhVu/Ikmcpxwel saLzMfHmSg5oTbaN1Fc3slemQmdYRwDnmwa8ylYxsqz/CNHEDOkIdbZ6QAImRD31 GMoXRg2BRn6DguM0t6uJ0EEMex2FjkXd9tWXU52PW1nZGzhoVWh9R02KBjNyhn32 NWv2BZWCFs3ClEN+a/+hgDaD10dTjP07GKwsX+vo0gBxtA== -----END CERTIFICATE-----Generated at Sun Dec 7 17:43:14 2025 by rpki-client