This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/NKJEbiuYAqG-3Z0Q4EdNzmY3MB8.roa
File: NKJEbiuYAqG-3Z0Q4EdNzmY3MB8.roa (raw, json)
Hash identifier: 49EHz9B4nGd+JXdGqFcHhEppaFM8xwNGVG0MfdAmws4=
Subject key identifier: 34:A2:44:6E:2B:98:02:A1:BE:DD:9D:10:E0:47:4D:CE:66:37:30:1F
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 114A
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/NKJEbiuYAqG-3Z0Q4EdNzmY3MB8.roa
Signing time: Tue 03 Feb 2026 03:19:39 +0000
ROA not before: Tue 03 Feb 2026 03:19:39 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17713
IP address blocks: 192.192.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 19:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4426 (0x114a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 3 03:19:39 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=34A2446E2B9802A1BEDD9D10E0474DCE6637301F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:69:fb:ca:75:1e:e6:a9:0d:ef:ec:55:ad:
57:64:c5:f4:fa:27:5e:13:3c:1d:21:67:75:5f:63:
f2:dd:e9:0a:52:dc:5b:34:1b:dd:be:60:fa:f2:15:
f6:68:87:71:d8:d6:05:ac:3c:23:6e:76:31:c7:9b:
cb:7c:4a:5f:d0:b8:d4:34:53:8c:9c:41:05:27:52:
9a:bd:ec:d8:58:b2:db:26:a7:62:8e:9e:9e:66:a9:
44:c1:60:16:27:62:ff:2b:cb:d2:b7:5e:ab:3d:70:
d9:bd:3a:f8:f0:5a:91:ad:ab:38:22:a4:50:99:9d:
8b:3c:43:0a:22:e7:a9:43:52:21:cc:aa:15:4d:23:
e1:5c:6f:98:38:4e:9d:66:3d:36:d0:56:56:e3:3b:
a1:5e:b5:6f:8e:91:9f:b3:d9:4e:a1:8c:fe:7d:6f:
e3:c5:34:dd:23:95:b3:0b:1f:3f:d8:fb:bf:2c:44:
96:ed:1b:29:00:92:23:19:d8:e9:69:e6:41:e2:b6:
13:aa:e0:28:0d:98:fc:1e:8d:9c:0e:44:ee:49:05:
c5:36:f0:34:ba:fb:6b:98:e0:d3:52:1b:24:2b:d8:
73:dd:5e:3f:9a:0c:ec:c6:98:e5:05:34:0b:af:d9:
b8:a2:48:b1:86:07:d2:bf:7d:99:09:8c:12:80:33:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:44:6E:2B:98:02:A1:BE:DD:9D:10:E0:47:4D:CE:66:37:30:1F
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/NKJEbiuYAqG-3Z0Q4EdNzmY3MB8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:29:a9:0f:5e:56:36:31:7b:01:55:e2:9b:ec:44:b6:41:1e:
dc:2b:70:9d:f3:41:7d:15:aa:55:e5:8a:8e:7b:cf:9b:e9:db:
a3:c5:6e:9c:0e:fc:2f:69:57:6e:92:8c:46:40:ba:2e:de:44:
9c:37:cd:ae:71:f3:f1:ab:37:38:ce:cb:76:35:9b:d5:9e:53:
4f:d0:d4:0b:52:51:c1:e8:50:50:4d:3f:04:fa:17:eb:44:fe:
e4:b0:29:ce:5d:8c:44:e0:a6:af:54:fc:ba:43:22:70:c2:4d:
74:5c:76:70:42:4a:4c:4f:0a:85:cc:8e:17:e3:5b:41:70:76:
bc:00:5a:6a:bd:42:d4:71:5a:36:85:d2:a6:4f:44:25:12:f1:
ae:4e:8d:59:40:f1:de:51:5b:93:d9:91:22:34:77:cc:60:25:
8e:6e:83:6e:bd:9a:f2:f7:44:b6:61:ac:23:cf:d0:75:c5:4a:
7a:74:56:20:ed:76:2a:d2:05:28:45:5f:19:ca:68:ec:94:8b:
c3:b8:4f:bc:f3:c2:6c:21:98:0f:ba:15:ee:a1:44:d0:98:1d:
f3:14:e0:c9:1e:6e:55:ba:d1:e9:3d:25:22:10:a9:fd:eb:ad:
9c:89:b6:e0:4b:33:88:07:cc:ee:e4:75:90:e0:2f:85:52:0e:
17:4a:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:39:28 2026 by rpki-client