This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/aLGrE43TpFcrrUwAw8DGgSAq8c4.roa
File: aLGrE43TpFcrrUwAw8DGgSAq8c4.roa (raw, json)
Hash identifier: 99kJ0sQ5iTkVeslgaXDKlj5Kn2Oh0+rdeV6Q1wFbxZw=
Subject key identifier: 68:B1:AB:13:8D:D3:A4:57:2B:AD:4C:00:C3:C0:C6:81:20:2A:F1:CE
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 11FD
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/aLGrE43TpFcrrUwAw8DGgSAq8c4.roa
Signing time: Tue 03 Feb 2026 02:55:04 +0000
ROA not before: Tue 03 Feb 2026 02:55:04 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17711
IP address blocks: 203.68.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 17:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4605 (0x11fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 3 02:55:04 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=68B1AB138DD3A4572BAD4C00C3C0C681202AF1CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:44:88:b6:b1:99:91:3c:92:96:0c:64:36:
90:ee:2a:51:d2:4c:04:da:e1:57:9e:cc:ef:ba:01:
f0:0f:79:82:c1:01:01:a3:61:94:0a:de:b2:96:61:
b7:2b:22:9b:54:80:40:38:96:a2:a6:bd:70:71:65:
be:9a:13:71:11:56:fe:13:43:1d:e2:aa:a3:e4:8d:
21:3a:a1:06:95:5c:b3:18:92:ba:53:07:bb:03:c0:
85:df:a5:ef:a8:ea:1a:2d:03:7e:8b:80:e8:db:f2:
cb:bc:bd:3a:b6:cd:5d:54:0c:ac:da:93:5c:88:6d:
7d:0a:5b:54:19:86:10:e7:da:fd:2c:fa:2c:39:3d:
46:13:ef:cd:3a:d6:c9:db:74:b9:89:42:52:9e:f8:
34:85:ab:f4:58:9b:68:3f:49:71:1a:f9:c3:07:30:
6d:d0:ff:1d:86:02:69:53:f4:15:88:3e:ae:25:84:
84:5a:de:07:6c:63:c3:5c:71:10:8c:9b:3c:7d:a9:
a1:89:59:04:14:11:45:57:c8:7d:5c:33:30:87:d2:
f1:45:0d:23:fc:06:0a:f0:24:d9:69:66:3a:42:d2:
53:a8:5b:21:b9:bd:08:ec:f2:f9:5e:9e:74:fd:51:
a0:20:b2:05:49:93:51:5b:45:2c:79:b5:c3:c0:af:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B1:AB:13:8D:D3:A4:57:2B:AD:4C:00:C3:C0:C6:81:20:2A:F1:CE
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/aLGrE43TpFcrrUwAw8DGgSAq8c4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.68.154.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:e5:83:32:b1:ce:10:1e:41:2a:dc:6f:34:d1:bf:a8:c4:1d:
fc:d8:ad:47:a7:5e:6a:ea:e7:57:8b:ce:ce:50:50:75:cf:15:
48:bc:8f:62:24:a6:03:54:20:28:80:d7:88:cb:dc:dd:25:f7:
89:8a:cf:53:5d:da:dd:7a:fd:8d:8a:2b:c4:a0:7d:2d:18:98:
10:b4:6c:51:f9:f0:ce:8c:53:37:a2:df:d0:02:08:4e:e0:8b:
8d:52:b8:e8:ad:89:b4:2d:f2:5d:8b:31:8c:a3:49:09:f2:b0:
37:6d:f0:e0:c9:a9:ec:c5:c8:f5:c3:7c:02:18:c2:2e:93:9c:
2a:be:78:1c:cc:02:71:18:19:f1:4a:94:7c:40:f5:7e:d3:68:
38:b7:1f:b5:25:a7:1e:02:41:f5:0a:55:a5:88:7d:36:a8:15:
de:e5:90:3f:65:c8:e7:0c:86:85:08:e0:7c:59:9d:8a:c6:32:
db:a4:67:a8:4b:aa:be:f5:8a:1d:a8:5d:41:4a:d2:59:e2:97:
f8:69:01:ca:8c:0b:7e:61:83:d7:ac:cd:fa:ec:11:c4:71:c4:
1e:54:0c:89:14:ea:9c:76:f7:14:9c:c4:0a:16:71:b5:94:0a:
0a:23:bc:99:60:b5:1a:17:a5:99:d7:4d:e7:01:b5:e3:5c:77:
70:83:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:29 2026 by rpki-client