This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer File: Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer (raw, json) Hash identifier: GLyAGYZEtykK2F8M1VPYXOGOO3lLljjyfCnPOzLCQsY= Subject key identifier: 46:3A:AF:9D:F9:F6:55:8C:60:E4:81:6D:A0:24:85:62:F6:90:05:07 Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Certificate serial: 1FB5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Tue 20 Jan 2026 00:44:40 +0000 Certificate not after: Fri 15 Jan 2027 15:30:19 +0000 Subordinate resources: IP: 151.158.26.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 10:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8117 (0x1fb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Validity Not Before: Jan 20 00:44:40 2026 GMT Not After : Jan 15 15:30:19 2027 GMT Subject: CN=463AAF9DF9F6558C60E4816DA0248562F6900507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:83:4f:0d:fc:ef:91:c2:88:2d:79:a6:8f: 57:4d:c6:94:08:80:70:11:e1:d9:b8:ee:69:7e:05: 8f:09:72:50:8b:9d:eb:1c:69:f0:6a:17:0f:b7:3d: c1:a4:bc:a5:30:a0:07:9b:84:d7:18:8a:17:99:5f: 4e:d2:cf:0d:a5:a2:e2:7b:d2:e1:a0:2e:18:d4:71: b3:90:be:24:52:ce:b1:61:37:45:bb:18:9a:a7:46: c0:d7:ab:88:37:24:6b:d1:fd:a7:ea:46:c7:56:b6: e1:38:9b:c8:33:34:6e:bd:90:2f:bd:b3:9f:5c:92: 6d:98:e2:d1:04:29:68:7f:ab:4a:8a:1e:bf:c6:3a: 09:5d:ad:b1:2e:68:d4:f5:a4:d1:96:24:59:a0:f2: 12:d6:d5:36:f4:c4:c6:d8:e8:1d:fd:6f:ca:15:d8: b3:90:19:63:db:17:43:d2:df:4b:0c:28:ef:48:5b: 1e:86:0d:5a:45:4e:82:e9:5c:95:a4:05:95:88:4d: 18:a6:27:36:53:5d:0c:30:71:7a:0a:c7:5a:60:37: fb:2c:4e:02:ec:92:bf:0d:80:39:e7:16:db:0a:95: cb:51:89:fc:93:90:38:be:4f:f2:35:60:5c:d8:b9: 54:3f:5b:ea:7c:a0:3c:7a:dc:4f:03:5d:5e:40:97: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3A:AF:9D:F9:F6:55:8C:60:E4:81:6D:A0:24:85:62:F6:90:05:07 X509v3 Authority Key Identifier: keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 151.158.26.0/23 Signature Algorithm: sha256WithRSAEncryption 74:3e:16:dd:4d:0a:59:2c:9e:18:1c:c0:29:ae:78:c0:1a:b1: 86:c8:49:07:51:39:7b:ab:ee:f2:04:e7:c9:ba:28:96:a9:ad: d5:fb:2c:51:d5:bf:26:dc:20:fa:96:9f:df:ea:1c:c4:34:bd: 24:9e:e5:0b:eb:5d:a2:14:f6:0c:35:cf:2e:03:3d:f2:e4:1b: eb:0a:98:3e:0e:b0:e2:14:8c:2b:64:26:9c:d0:cf:25:35:69: 33:d7:d7:27:23:24:3f:03:28:f3:19:92:32:bb:2c:43:68:e4: 24:dd:11:d4:51:9d:4f:5d:d5:a0:af:63:78:ed:9c:cf:b1:b4: 87:c2:89:d5:5e:e7:88:62:ff:c1:4d:18:f3:4c:1f:2a:8b:be: db:04:d1:7d:c5:57:af:02:1a:c2:92:e3:30:3d:d5:65:84:bb: 7d:4f:79:8b:2f:0e:7b:60:83:c4:7d:41:76:a6:81:2a:4b:0a: 68:1b:5f:b1:e5:bd:31:35:08:51:c3:4f:a5:ec:d2:9b:02:29: 94:f3:40:86:6d:33:be:72:c2:29:47:1a:e8:31:12:95:72:9a: db:dd:ff:7c:4f:e2:e5:e8:0d:13:6f:54:6d:e7:35:dc:d9:cb: 23:43:8b:98:c0:38:da:7f:00:cf:71:c0:7e:8b:f2:f9:e4:fd: 59:ac:f0:7d -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICH7UwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhEMUQyRjU1QzI2REIyODUyMEE3OTk2RkY3MkVE MDEwNDIwMDc5OEEyMB4XDTI2MDEyMDAwNDQ0MFoXDTI3MDExNTE1MzAxOVowMzEx MC8GA1UEAxMoNDYzQUFGOURGOUY2NTU4QzYwRTQ4MTZEQTAyNDg1NjJGNjkwMDUw NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKW6g08N/O+RwogteaaP V03GlAiAcBHh2bjuaX4FjwlyUIud6xxp8GoXD7c9waS8pTCgB5uE1xiKF5lfTtLP DaWi4nvS4aAuGNRxs5C+JFLOsWE3RbsYmqdGwNeriDcka9H9p+pGx1a24TibyDM0 br2QL72zn1ySbZji0QQpaH+rSooev8Y6CV2tsS5o1PWk0ZYkWaDyEtbVNvTExtjo Hf1vyhXYs5AZY9sXQ9LfSwwo70hbHoYNWkVOgulclaQFlYhNGKYnNlNdDDBxegrH WmA3+yxOAuySvw2AOecW2wqVy1GJ/JOQOL5P8jVgXNi5VD9b6nygPHrcTwNdXkCX y/8CAwEAAaOCAlIwggJOMB0GA1UdDgQWBBRGOq+d+fZVjGDkgW2gJIVi9pAFBzAf BgNVHSMEGDAWgBTR0vVcJtsoUgp5lv9y7QEEIAeYojAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wZEwxWENiYktGSUtlWmJfY3UwQkJDQUhtS0kuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYy LzBkTDFYQ2JiS0ZJS2VaYl9jdTBCQkNBSG1LSS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FOUkFZUy8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9LQU5SQVlTL1JqcXZuZm4yVll4ZzVJRnRvQ1NGWXZhUUJRYy5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGXnhowDQYJKoZIhvcNAQELBQADggEB AHQ+Ft1NClksnhgcwCmueMAasYbISQdROXur7vIE58m6KJaprdX7LFHVvybcIPqW n9/qHMQ0vSSe5QvrXaIU9gw1zy4DPfLkG+sKmD4OsOIUjCtkJpzQzyU1aTPX1ycj JD8DKPMZkjK7LENo5CTdEdRRnU9d1aCvY3jtnM+xtIfCidVe54hi/8FNGPNMHyqL vtsE0X3FV68CGsKS4zA91WWEu31PeYsvDntgg8R9QXamgSpLCmgbX7HlvTE1CFHD T6Xs0psCKZTzQIZtM75ywilHGugxEpVymtvd/3xP4uXoDRNvVG3nNdzZyyNDi5jA ONp/AM9xwH6L8vnk/Vms8H0= -----END CERTIFICATE-----Generated at Wed Jan 21 09:20:57 2026 by rpki-client