This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/YPrfDOvbaWwTBQh83FDQR4bljig.roa
File: YPrfDOvbaWwTBQh83FDQR4bljig.roa (raw, json)
Hash identifier: mdZ/pS667HT7nasTrAeRj0hweBDwP5zLS4KhdRCdXac=
Subject key identifier: 60:FA:DF:0C:EB:DB:69:6C:13:05:08:7C:DC:50:D0:47:86:E5:8E:28
Certificate issuer: /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC
Certificate serial: 0A1A
Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/YPrfDOvbaWwTBQh83FDQR4bljig.roa
Signing time: Thu 06 Nov 2025 07:41:17 +0000
ROA not before: Thu 06 Nov 2025 07:41:17 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9678
IP address blocks: 2405:fbc0:112::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 15:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2586 (0xa1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC
Validity
Not Before: Nov 6 07:41:17 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=60FADF0CEBDB696C1305087CDC50D04786E58E28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:b4:45:e8:d7:cf:60:3e:e2:27:1e:cc:52:
9e:40:73:13:ec:c6:79:e2:2c:9a:de:6d:1a:4d:46:
7b:9a:0e:f8:98:07:a4:68:56:c3:dc:08:54:b1:22:
db:b3:50:b6:80:94:de:7f:1b:2d:56:1c:4f:4a:b1:
73:84:33:d1:85:01:32:c4:fa:7a:fc:0b:ff:8d:d0:
9b:24:43:66:cc:91:db:b8:85:25:bb:a3:92:01:85:
75:06:28:a7:a9:f7:f0:0e:34:66:7b:16:da:70:19:
84:a2:75:48:d1:2b:6a:80:1d:88:09:cb:9b:5e:57:
2c:81:ec:8f:17:5f:20:81:d6:64:a3:97:56:03:94:
90:bf:55:2c:ce:78:14:d4:47:ec:75:bf:f6:cb:d9:
22:36:c2:a8:fb:1a:6e:c1:12:76:bf:68:e0:7d:2b:
2f:0f:aa:3f:84:9e:bb:f3:79:84:e7:6f:be:19:37:
fb:86:06:43:f4:72:9d:7e:57:56:6d:0d:4e:05:7b:
e9:1e:ff:ca:c3:2d:0f:e7:91:1f:1f:dd:90:cc:92:
36:cf:d1:fe:78:6d:06:d9:d2:4b:7c:0b:80:86:9f:
07:11:e4:1f:e5:2f:e4:ac:8e:80:88:2a:16:74:43:
df:41:ae:85:a0:83:c7:60:61:f9:ba:fa:03:b7:89:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:DF:0C:EB:DB:69:6C:13:05:08:7C:DC:50:D0:47:86:E5:8E:28
X509v3 Authority Key Identifier:
keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/YPrfDOvbaWwTBQh83FDQR4bljig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:fbc0:112::/48
Signature Algorithm: sha256WithRSAEncryption
1e:c4:0a:6e:b5:ff:b4:b3:69:5c:0a:23:7e:e1:eb:fa:64:66:
ab:d5:10:29:0f:8a:92:0c:94:24:2d:5a:c8:f6:cb:70:76:04:
87:b1:86:9d:35:e7:51:df:70:5c:64:f5:2c:a5:ce:52:a4:f1:
ca:d5:e1:12:ea:fc:8b:83:54:32:76:d8:dc:73:66:e4:31:ba:
d5:24:6a:fa:83:75:20:a3:5a:0d:d0:f3:27:09:11:50:a2:aa:
6b:9a:1b:b5:3f:02:38:44:dc:33:9d:c1:05:da:83:0a:2d:d9:
82:17:9c:7e:15:6d:9e:98:80:3a:9c:25:6e:03:56:8d:d3:b5:
0f:f2:1b:9b:99:65:07:cd:73:4e:a6:29:b1:e9:9c:c7:53:be:
17:f0:f8:d6:2d:3c:dd:f3:12:c6:c3:04:28:0c:79:02:a0:4f:
24:00:16:89:e8:cb:a6:78:c5:45:64:67:2f:f3:cd:f7:b0:5e:
f1:cf:43:bf:5a:1d:44:6e:c3:16:3d:08:a2:a9:91:90:65:07:
24:a6:21:57:fc:00:b3:e8:7e:60:ef:8e:d0:ab:c4:a9:3a:38:
46:0f:b8:ac:5f:2d:9b:7f:37:6b:b6:38:65:d1:59:75:45:d5:
71:50:63:57:41:a7:7e:5e:ed:ca:3f:a3:3f:b2:e1:89:77:a7:
5f:13:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:43:02 2025 by rpki-client