This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/SPphzStB0oJlgIV-CrnME_FMAgo.roa
File: SPphzStB0oJlgIV-CrnME_FMAgo.roa (raw, json)
Hash identifier: hc/hSdtiFeyxtwZULJoTj6p2RJQlJ8Caph5iIXaVSms=
Subject key identifier: 48:FA:61:CD:2B:41:D2:82:65:80:85:7E:0A:B9:CC:13:F1:4C:02:0A
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 10ED
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/SPphzStB0oJlgIV-CrnME_FMAgo.roa
Signing time: Tue 03 Feb 2026 02:33:02 +0000
ROA not before: Tue 03 Feb 2026 02:33:02 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17713
IP address blocks: 140.133.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 19:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4333 (0x10ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 3 02:33:02 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=48FA61CD2B41D2826580857E0AB9CC13F14C020A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:ea:38:86:10:51:f1:d0:0a:a7:36:35:61:
27:8d:b2:41:24:68:cc:cf:81:d5:fe:51:ba:83:47:
2c:1f:57:6d:1b:01:af:fe:00:6a:9a:13:57:29:ed:
77:05:04:45:35:8d:8e:d6:4e:4f:7f:6d:19:8f:07:
cb:48:ba:be:d4:48:f5:39:84:89:4b:f4:f8:a9:a4:
4b:24:8e:f9:5d:79:08:c7:40:7e:d4:7a:cd:e0:81:
82:97:f7:55:e7:67:fe:25:8c:28:f4:24:3a:23:b5:
ca:47:68:0b:2e:54:99:4e:60:13:ef:bf:81:d6:62:
8a:9a:cd:f3:e4:26:40:a3:0a:31:69:fb:2d:ea:0f:
c2:45:b6:27:bd:ec:cf:93:d3:5a:2b:90:0e:a2:73:
98:0a:89:0d:d0:66:6b:ac:fa:83:a1:bb:da:f6:8e:
9b:24:c6:37:61:02:33:dd:2b:e2:96:7b:67:45:b0:
39:8f:06:ab:ed:bb:48:d1:73:5a:79:e7:ac:aa:0e:
f4:7b:ec:60:e8:8b:4f:00:42:6b:99:d5:ed:25:b4:
00:63:61:ba:7e:e3:c7:8c:cc:d0:a1:8d:7c:0a:45:
71:be:e9:f2:91:bb:8e:b4:ba:38:4f:53:69:06:a3:
11:1d:2e:5e:36:1b:ad:82:c2:7d:e3:96:f3:80:11:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:61:CD:2B:41:D2:82:65:80:85:7E:0A:B9:CC:13:F1:4C:02:0A
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/SPphzStB0oJlgIV-CrnME_FMAgo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.133.88.0/22
Signature Algorithm: sha256WithRSAEncryption
25:02:18:73:96:1a:96:0a:ae:a3:d4:b0:6b:66:6f:f7:bf:a3:
42:24:73:30:2a:cc:89:5d:d9:84:86:12:96:26:3f:c8:0c:bc:
89:94:7a:71:47:ff:8c:c2:79:4a:f5:86:9b:f8:8f:5d:b3:46:
c4:a0:8b:63:a1:6a:35:bb:ad:c3:94:4f:ff:98:d7:87:44:f6:
33:e5:ba:be:c4:11:1f:72:cb:7e:29:a4:e4:d9:92:05:4a:a0:
1c:e2:17:f4:07:df:99:12:ee:03:3d:1e:76:d9:d0:fd:8c:cd:
e0:3d:ea:71:01:d1:37:03:04:a4:2c:c5:79:1f:2a:a1:9a:b8:
73:96:39:40:e6:01:2f:75:3b:43:95:9a:f6:be:0f:9e:0d:6e:
6a:f2:ee:d4:7c:0a:fd:da:e6:c9:c6:56:f6:eb:b3:df:8c:20:
66:95:d9:7b:a4:13:60:c5:e1:c8:1c:c2:55:ae:84:d3:60:a4:
26:7d:d8:fb:f5:6f:1b:c4:02:09:2f:8e:7f:45:4b:01:59:41:
2a:d3:b6:0a:49:f3:ec:a8:cc:56:0e:26:68:5b:e2:bf:c1:eb:
53:87:ef:84:1f:01:12:ad:9b:93:4a:27:32:7c:a4:9c:67:76:
2a:a1:23:64:5c:46:f7:88:d4:08:af:12:5f:bf:b6:ca:d0:4d:
d7:c5:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:53 2026 by rpki-client