This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/-Nj2XjGcbr4BOI0D9w0EdXGF_YQ.roa File: -Nj2XjGcbr4BOI0D9w0EdXGF_YQ.roa (raw, json) Hash identifier: bXJHswMk1qdpQz23mccm2PIkVc6RZM1pBqr87SKGl6M= Subject key identifier: F8:D8:F6:5E:31:9C:6E:BE:01:38:8D:03:F7:0D:04:75:71:85:FD:84 Certificate issuer: /CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8 Certificate serial: 01FD Authority key identifier: 1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/-Nj2XjGcbr4BOI0D9w0EdXGF_YQ.roa Signing time: Fri 14 Nov 2025 04:14:08 +0000 ROA not before: Fri 14 Nov 2025 04:14:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 198954 IP address blocks: 2401:e3e0:300::/44 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8 Validity Not Before: Nov 14 04:14:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F8D8F65E319C6EBE01388D03F70D04757185FD84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:91:1c:df:14:ce:dd:fd:5e:26:14:ac:63: 3e:7d:e2:3d:fc:a3:33:4e:f5:77:bf:9e:11:7a:c9: 1d:0d:b7:70:96:18:bd:1b:33:4d:80:08:2b:d5:26: 58:aa:bd:81:05:06:c8:1a:71:7c:98:62:d1:24:08: 83:94:b4:ec:43:23:05:09:69:82:bd:ce:9f:f2:6d: db:77:46:fb:9f:c0:eb:b7:52:d3:25:be:6f:8e:18: cb:15:38:48:c3:d9:9e:12:65:36:8e:b4:ba:b3:c5: 79:80:d2:a0:bc:ff:43:56:65:2a:b2:de:7b:12:26: a6:45:b9:90:80:f6:d5:a2:31:e1:95:c6:fd:60:92: 80:7e:47:b7:c4:97:d3:be:20:0b:93:80:e6:c8:dd: df:13:59:0c:58:b6:67:be:e4:e2:15:1c:9b:a8:51: 54:b7:16:8c:8e:97:01:f2:e7:fd:85:54:67:eb:6f: b0:8e:73:49:29:7a:da:61:e0:47:48:a5:2b:c9:0d: e0:0f:2a:07:7b:3b:16:9d:47:06:dd:1b:f7:32:5e: e5:15:fa:72:25:4d:2c:83:ae:69:b8:2f:dc:c9:3c: c9:6a:e0:b9:2e:cf:c2:0a:65:ab:43:9f:63:c5:5b: ae:8e:3e:b3:15:52:2d:f3:3f:99:2a:a2:11:bf:67: a6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D8:F6:5E:31:9C:6E:BE:01:38:8D:03:F7:0D:04:75:71:85:FD:84 X509v3 Authority Key Identifier: keyid:1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/-Nj2XjGcbr4BOI0D9w0EdXGF_YQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:e3e0:300::/44 Signature Algorithm: sha256WithRSAEncryption 10:ee:4c:a7:d2:14:fa:bd:1d:25:16:2f:64:7b:53:36:a9:b4: 48:3f:99:8a:eb:bc:17:03:10:e6:66:91:8e:c2:2c:c3:99:77: f8:99:ae:22:86:82:0f:df:cc:bf:88:4c:91:77:ba:18:ba:fa: 97:e0:81:dd:e8:aa:a5:92:d4:ee:59:ef:5b:2e:da:92:d6:08: c1:a8:52:c0:9a:c8:b7:37:2c:41:55:57:10:c5:4e:4f:9d:ba: 6f:56:87:09:0d:ed:6c:d4:9b:eb:c7:e1:64:2e:7a:03:62:aa: c1:15:2b:75:d1:55:0d:f4:c1:82:51:71:e8:f3:27:a7:51:73: 8f:18:e2:81:ff:20:74:3c:36:e8:16:07:29:d3:8c:99:ce:0d: 00:75:5e:8c:5b:11:5c:ab:4e:b3:ae:15:6d:d2:6e:37:1e:f6: c3:54:7b:30:61:8a:3f:d5:6a:f1:66:3c:ab:12:19:c8:3a:20: ef:53:c6:63:c2:f0:ee:15:e1:07:81:fd:3c:d0:44:a1:2b:f3: cd:ef:1f:e4:dd:a1:b5:b4:0d:f0:75:fe:5e:af:48:60:fc:84: 30:2f:86:83:b5:90:b0:cc:0c:c6:f2:aa:a6:0c:c1:ef:11:e8: cd:cd:18:19:3c:32:92:5b:a1:5c:55:56:53:e3:70:6d:df:0f: 5e:df:43:a1 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY3 RDYyN0ZFMzZBMkVCRjY5ODA5QkM4NDdCNTQzM0JGNDNFMzdFODAeFw0yNTExMTQw NDE0MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY4RDhGNjVFMzE5QzZF QkUwMTM4OEQwM0Y3MEQwNDc1NzE4NUZEODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCulZEc3xTO3f1eJhSsYz594j38ozNO9Xe/nhF6yR0Nt3CWGL0b M02ACCvVJliqvYEFBsgacXyYYtEkCIOUtOxDIwUJaYK9zp/ybdt3RvufwOu3UtMl vm+OGMsVOEjD2Z4SZTaOtLqzxXmA0qC8/0NWZSqy3nsSJqZFuZCA9tWiMeGVxv1g koB+R7fEl9O+IAuTgObI3d8TWQxYtme+5OIVHJuoUVS3FoyOlwHy5/2FVGfrb7CO c0kpetph4EdIpSvJDeAPKgd7OxadRwbdG/cyXuUV+nIlTSyDrmm4L9zJPMlq4Lku z8IKZatDn2PFW66OPrMVUi3zP5kqohG/Z6ZxAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQU+Nj2XjGcbr4BOI0D9w0EdXGF/YQwHwYDVR0jBBgwFoAUH31if+NqLr9pgJvI R7VDO/Q+N+gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVkVSWUZB U1QvSDMxaWYtTnFMcjlwZ0p2SVI3VkRPX1EtTi1nLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9IMzFpZi1OcUxyOXBnSnZJUjdWRE9fUS1OLWcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9WRVJZRkFTVC8tTmoyWGpHY2JyNEJP STBEOXcwRWRYR0ZfWVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEJAHj4AMAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ7kyn0hT6vR0lFi9ke1M2qbRI P5mK67wXAxDmZpGOwizDmXf4ma4ihoIP38y/iEyRd7oYuvqX4IHd6KqlktTuWe9b LtqS1gjBqFLAmsi3NyxBVVcQxU5PnbpvVocJDe1s1Jvrx+FkLnoDYqrBFSt10VUN 9MGCUXHo8yenUXOPGOKB/yB0PDboFgcp04yZzg0AdV6MWxFcq06zrhVt0m43HvbD VHswYYo/1WrxZjyrEhnIOiDvU8ZjwvDuFeEHgf080EShK/PN7x/k3aG1tA3wdf5e r0hg/IQwL4aDtZCwzAzG8qqmDMHvEejNzRgZPDKSW6FcVVZT43Bt3w9e30Oh -----END CERTIFICATE-----Generated at Mon Dec 8 00:27:12 2025 by rpki-client