This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/HiYDFNXjoO3R_nARDfkOvGQ2uPI.roa
File: HiYDFNXjoO3R_nARDfkOvGQ2uPI.roa (raw, json)
Hash identifier: TF1fudOlHBDp5k466LSEbSh2R9DYEJy4UKWKGkXgYwg=
Subject key identifier: 1E:26:03:14:D5:E3:A0:ED:D1:FE:70:11:0D:F9:0E:BC:64:36:B8:F2
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 12A8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/HiYDFNXjoO3R_nARDfkOvGQ2uPI.roa
Signing time: Tue 03 Feb 2026 08:50:55 +0000
ROA not before: Tue 03 Feb 2026 08:50:55 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18177
IP address blocks: 203.68.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 17:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4776 (0x12a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 3 08:50:55 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=1E260314D5E3A0EDD1FE70110DF90EBC6436B8F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:cb:4b:b3:db:9d:32:47:0a:5e:5c:b2:ac:
85:a8:34:6c:44:70:88:0f:21:3c:4d:8a:ac:75:f3:
38:3d:3b:87:49:c3:34:01:34:2b:86:d9:ff:59:4b:
95:59:eb:63:86:6e:b9:12:bc:06:62:58:73:3f:ca:
13:60:ce:6f:4e:41:a3:7d:e6:34:c5:08:4b:15:c3:
ad:95:fd:dc:dc:9d:dd:c4:66:e0:14:a1:2c:c0:7d:
40:7d:62:fe:19:b7:77:f4:80:a4:65:4a:f4:ac:02:
16:c9:f3:84:73:cb:a0:a3:7f:15:c6:aa:2e:be:4b:
9d:87:86:14:9a:a3:68:0b:77:78:65:a1:49:bc:45:
50:54:b3:8d:9b:e2:eb:e1:dd:10:37:4e:3d:2f:93:
f8:b7:0a:44:3f:e5:d0:ac:72:c7:13:f5:f3:f0:4d:
83:76:74:74:ed:2a:b3:7d:11:59:9f:38:e9:09:e1:
e8:d6:df:fd:19:ae:f0:c2:be:44:40:02:e9:2d:73:
51:57:26:87:32:8b:6f:8b:50:a9:a9:38:62:1f:fe:
7d:33:1d:ca:49:e8:ac:07:37:6f:63:35:53:22:20:
89:fb:ba:46:a4:8c:63:0a:73:f7:5d:ba:5f:2a:c2:
6a:ab:5a:fe:43:ac:46:4a:d1:78:d2:b1:39:83:8e:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:26:03:14:D5:E3:A0:ED:D1:FE:70:11:0D:F9:0E:BC:64:36:B8:F2
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/HiYDFNXjoO3R_nARDfkOvGQ2uPI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.68.160.0/22
Signature Algorithm: sha256WithRSAEncryption
53:a3:62:63:59:e7:d2:39:3f:36:63:e1:77:41:e0:c3:0e:f5:
ba:9e:25:f3:3e:33:49:6f:65:fd:ed:c5:fb:cb:ce:a7:80:de:
71:51:a2:33:ef:12:17:f3:44:9b:75:ae:42:e9:0e:5d:3e:0c:
b4:4b:7f:ea:ce:2f:9f:ed:73:9d:9e:d9:c0:2a:fb:db:07:1a:
24:02:75:22:c4:a4:19:4b:e1:84:b3:60:0c:55:76:7f:2e:54:
c5:e1:a6:46:a0:af:f5:2f:21:63:21:4e:f4:55:bd:a3:ef:db:
09:dc:a7:2b:54:3e:44:75:ad:6c:d8:33:5c:3a:2e:bc:9a:c4:
03:50:a4:04:ca:0f:d2:81:62:37:7e:f7:24:8b:74:c8:d4:25:
4b:b1:2b:d7:2a:3f:3e:33:f8:76:10:ae:b3:2d:62:05:7e:22:
9b:9b:3e:45:99:ad:48:10:26:f8:ea:9b:7a:da:3e:f0:87:06:
5e:a3:d0:f9:16:5a:65:7d:f1:e8:24:13:e4:d1:18:e1:e8:b7:
a7:a4:ea:34:50:23:17:96:b2:a0:a1:63:aa:be:ec:d1:70:49:
41:a1:05:63:b4:60:f6:c2:65:15:b6:de:b2:57:cb:b7:06:7d:
ab:34:ba:4e:ed:77:a1:1a:35:0c:b5:9c:43:16:65:5b:1c:52:
2e:aa:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:56 2026 by rpki-client