This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/BL-sf_uzOcY1hv4mhHE7WMNDdqA.roa
File: BL-sf_uzOcY1hv4mhHE7WMNDdqA.roa (raw, json)
Hash identifier: jMnzgLxGEiKVsbBsDqVO+GY8clc8JA4KedeyGoUojEc=
Subject key identifier: 04:BF:AC:7F:FB:B3:39:C6:35:86:FE:26:84:71:3B:58:C3:43:76:A0
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 108D
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/BL-sf_uzOcY1hv4mhHE7WMNDdqA.roa
Signing time: Tue 03 Feb 2026 01:53:15 +0000
ROA not before: Tue 03 Feb 2026 01:53:15 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 1659
IP address blocks: 192.192.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 19:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4237 (0x108d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 3 01:53:15 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=04BFAC7FFBB339C63586FE2684713B58C34376A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:ef:bf:3f:9c:02:6f:11:47:0c:3b:36:94:
08:60:b4:a5:78:ed:71:4d:a1:ef:29:eb:07:f6:10:
a8:0d:ea:7a:ca:1a:1f:58:f1:66:de:c2:0c:3d:38:
e1:3d:2e:bf:0a:d4:c1:6b:36:9e:cb:91:08:ac:4d:
13:d1:77:0f:34:d4:c7:b3:66:4a:ce:7c:b4:fc:41:
a9:ac:2e:c6:b9:a4:51:18:f7:f8:fd:01:00:d4:3b:
ff:d6:fc:d7:1e:95:95:46:1c:80:22:c1:e7:98:b8:
59:83:12:60:21:86:19:87:49:0c:b4:42:a7:55:1b:
69:f8:07:7f:40:56:1a:f2:5c:09:95:5d:fb:71:c3:
78:56:ad:f0:6d:1f:11:c8:5f:2a:d4:0d:c1:ad:10:
14:16:b8:fb:3b:4b:55:7f:b0:6c:12:2e:e4:cb:93:
d8:5f:02:91:51:0e:ee:4f:2a:c5:af:98:05:2b:03:
fe:78:43:cc:0a:84:67:d0:45:d1:be:fb:68:ed:62:
90:d7:80:29:07:5f:81:87:66:5c:7d:3a:de:c7:57:
df:05:48:a3:ad:5a:7c:33:1c:92:27:bf:fe:02:44:
01:06:38:fd:5e:f3:f7:cc:58:29:50:c9:70:3d:0e:
46:e9:2d:29:08:5c:d1:b3:3f:df:d2:eb:40:da:d7:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BF:AC:7F:FB:B3:39:C6:35:86:FE:26:84:71:3B:58:C3:43:76:A0
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/BL-sf_uzOcY1hv4mhHE7WMNDdqA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.192.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:cc:0d:5e:78:96:7a:43:0b:67:2b:4b:5d:54:a0:90:a2:6f:
3c:e4:07:b1:03:e0:29:95:23:5b:ed:eb:af:df:7c:0c:de:61:
ed:94:65:ed:ce:af:db:e5:6c:42:84:03:66:e1:a6:d3:60:4b:
cd:75:36:8c:7f:64:bc:70:ef:be:8c:6a:be:21:16:85:b7:4a:
2a:08:6e:9c:1f:6b:8b:af:04:57:b3:51:f2:9d:7b:cd:bd:75:
fc:59:c1:a0:0f:15:6f:2b:16:44:d1:7b:7b:b2:32:28:65:3d:
ad:be:cd:84:c2:c0:8d:15:4e:40:6b:99:6c:ab:56:33:95:c2:
aa:5b:c0:0d:a3:22:db:7b:30:80:97:3d:20:02:c2:d8:e7:d9:
ed:33:0b:7e:1f:99:d3:b9:d4:5b:c6:fe:8b:ff:a9:5e:24:3f:
9b:36:70:67:14:dd:e4:5d:2b:17:84:13:8a:ee:85:55:da:74:
56:69:3d:f9:f0:80:bf:6b:5f:57:8a:df:36:33:7b:1e:b9:24:
f1:e0:77:5f:d4:3d:88:c5:ec:ff:27:4c:7f:be:c2:53:3f:78:
17:3c:39:1c:6c:94:5c:09:8e:08:79:3b:58:6c:b0:e8:ae:1c:
a7:d0:14:d8:d4:47:76:85:ef:4b:28:c1:d2:0a:f1:27:98:80:
c6:40:19:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:42:57 2026 by rpki-client