This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Pn352wxt6CNKGQxGz_1V3K0Bqgc.roa
File: Pn352wxt6CNKGQxGz_1V3K0Bqgc.roa (raw, json)
Hash identifier: YfBdnUK93BoGOJkCj3VKJsycgK47xJFRW2bROK4TIdI=
Subject key identifier: 3E:7D:F9:DB:0C:6D:E8:23:4A:19:0C:46:CF:FD:55:DC:AD:01:AA:07
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 1145
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Pn352wxt6CNKGQxGz_1V3K0Bqgc.roa
Signing time: Tue 03 Feb 2026 02:01:35 +0000
ROA not before: Tue 03 Feb 2026 02:01:35 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 1659
IP address blocks: 203.71.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 17:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4421 (0x1145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 3 02:01:35 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=3E7DF9DB0C6DE8234A190C46CFFD55DCAD01AA07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:46:44:5d:72:06:86:a1:c9:ae:a0:3b:51:
74:3e:38:78:d0:17:06:b2:79:99:0f:7b:32:6a:2d:
d5:03:7a:65:ae:1a:8a:84:a2:88:dc:e3:40:ec:12:
b6:2f:39:4b:12:bb:66:14:6b:0a:d2:36:94:74:7b:
03:b8:8d:f7:71:d4:6b:ab:63:4e:13:ba:34:c9:30:
ee:76:b2:9a:25:ce:3e:50:8e:f0:38:f0:16:a5:79:
1c:a9:df:01:3e:5d:2b:e2:ab:96:9d:2d:04:da:39:
04:01:b0:d9:04:d2:e3:06:41:67:2c:99:63:a4:42:
b5:ce:ae:8b:34:74:92:2c:20:da:fc:3d:c0:81:45:
5d:d2:41:c5:a1:4d:7e:41:9f:0d:ff:01:8a:46:cf:
48:1a:7d:ec:2d:b9:a1:35:7b:15:6f:f1:1d:0c:3d:
f2:75:f9:26:39:3b:75:df:5a:9f:89:3b:45:35:8d:
cd:ad:4e:b7:4f:8b:48:6d:3a:dd:b0:a7:24:4f:5c:
22:b0:d5:9c:51:c9:4e:8a:fa:f3:8d:a3:6d:0b:18:
49:01:f8:d1:c0:a0:d0:81:ff:87:79:32:1f:bb:c2:
a3:da:0a:72:5e:71:19:50:51:21:98:a2:56:ac:ae:
94:bc:41:31:bc:01:7d:ef:87:fb:17:6c:a0:c6:fe:
e3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:F9:DB:0C:6D:E8:23:4A:19:0C:46:CF:FD:55:DC:AD:01:AA:07
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Pn352wxt6CNKGQxGz_1V3K0Bqgc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.71.2.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c7:d8:6a:14:19:dd:e2:6d:6f:e2:34:63:7b:1c:a0:31:d9:
5a:0d:b7:04:43:b9:5b:37:28:0c:4d:5e:a0:26:02:78:be:f5:
99:17:8a:1f:63:b5:3e:b0:5c:38:10:3c:5c:66:d5:ae:31:f1:
01:48:9d:bd:94:9c:dc:a9:62:c1:30:9e:a7:26:d6:31:3c:87:
44:b5:a6:74:53:69:a6:f3:06:f8:cf:51:92:8d:ca:00:aa:35:
3c:d5:31:6d:5c:97:99:37:66:02:f6:99:ec:a5:78:4c:23:87:
27:60:2a:66:bb:e8:ec:48:f9:8f:44:fc:a5:aa:e0:47:3c:e2:
29:44:84:fe:e3:b4:55:69:32:5a:39:9e:53:83:85:2b:da:ff:
b1:52:43:1f:23:2f:5f:84:90:4b:e4:dc:b0:a3:b3:0d:e6:e4:
bf:7b:a9:41:3e:e7:94:ea:8d:3e:49:16:11:bd:d6:87:bf:47:
c6:e7:2c:41:65:59:a0:b3:50:85:50:a1:04:19:76:96:47:99:
c2:1a:87:02:4e:4d:70:c1:f6:36:bc:85:85:95:3f:d7:82:e8:
59:32:82:4c:5e:42:2d:96:e7:a8:19:f3:66:12:54:62:53:ce:
f3:6f:41:11:d2:da:eb:9c:c2:36:4e:63:17:3a:ef:43:50:f6:
d4:fc:fd:f2
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MjAxMzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNFN0RGOURCMEM2REU4
MjM0QTE5MEM0NkNGRkQ1NURDQUQwMUFBMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGgUZEXXIGhqHJrqA7UXQ+OHjQFwayeZkPezJqLdUDemWuGoqE
oojc40DsErYvOUsSu2YUawrSNpR0ewO4jfdx1GurY04TujTJMO52spolzj5QjvA4
8BaleRyp3wE+XSviq5adLQTaOQQBsNkE0uMGQWcsmWOkQrXOros0dJIsINr8PcCB
RV3SQcWhTX5Bnw3/AYpGz0gafewtuaE1exVv8R0MPfJ1+SY5O3XfWp+JO0U1jc2t
TrdPi0htOt2wpyRPXCKw1ZxRyU6K+vONo20LGEkB+NHAoNCB/4d5Mh+7wqPaCnJe
cRlQUSGYolasrpS8QTG8AX3vh/sXbKDG/uMlAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUPn352wxt6CNKGQxGz/1V3K0BqgcwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9QbjM1Mnd4dDZDTktHUXhHel8x
VjNLMEJxZ2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0cC
MA0GCSqGSIb3DQEBCwUAA4IBAQCTx9hqFBnd4m1v4jRjexygMdlaDbcEQ7lbNygM
TV6gJgJ4vvWZF4ofY7U+sFw4EDxcZtWuMfEBSJ29lJzcqWLBMJ6nJtYxPIdEtaZ0
U2mm8wb4z1GSjcoAqjU81TFtXJeZN2YC9pnspXhMI4cnYCpmu+jsSPmPRPylquBH
POIpRIT+47RVaTJaOZ5Tg4Ur2v+xUkMfIy9fhJBL5Nywo7MN5uS/e6lBPueU6o0+
SRYRvdaHv0fG5yxBZVmgs1CFUKEEGXaWR5nCGocCTk1wwfY2vIWFlT/XguhZMoJM
XkItlueoGfNmElRiU87zb0ER0trrnMI2TmMXOu9DUPbU/P3y
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:27 2026 by rpki-client