This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZUSO/7chVuaygaeyBc-ehv1AK5E83n1I.roa
File: 7chVuaygaeyBc-ehv1AK5E83n1I.roa (raw, json)
Hash identifier: WmVZKBg9Exizod7x4LJB0k7zYhghOZQ6YrEQPLsgHQ4=
Subject key identifier: ED:C8:55:B9:AC:A0:69:EC:81:73:E7:A1:BF:50:0A:E4:4F:37:9F:52
Certificate issuer: /CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20
Certificate serial: 024D
Authority key identifier: 96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/7chVuaygaeyBc-ehv1AK5E83n1I.roa
Signing time: Tue 03 Feb 2026 05:57:05 +0000
ROA not before: Tue 03 Feb 2026 05:57:05 +0000
ROA not after: Wed 07 Oct 2026 15:30:24 +0000
asID: 63900
IP address blocks: 138.252.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 19:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20
Validity
Not Before: Feb 3 05:57:05 2026 GMT
Not After : Oct 7 15:30:24 2026 GMT
Subject: CN=EDC855B9ACA069EC8173E7A1BF500AE44F379F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:9c:82:71:b3:0e:e6:fb:a2:92:84:e3:0a:
c9:63:af:45:49:3e:2a:1c:ca:2f:5d:4c:2c:10:8a:
2f:a5:8d:2c:71:16:7f:76:25:d0:8d:d2:11:e4:51:
6a:e8:5f:d1:d5:0f:98:a8:b0:b3:1e:a0:0a:bf:f3:
05:7a:54:28:b3:6b:7f:65:d6:f8:1e:14:96:f3:50:
c3:76:95:62:c6:a0:f5:47:08:44:02:10:f6:c8:94:
87:85:89:82:40:3d:e0:72:c9:01:be:c2:c1:7d:0e:
f0:04:d6:cd:c4:30:ba:dc:f9:d5:c2:65:40:63:94:
8a:34:52:29:6e:08:35:4c:1d:43:8c:ea:b4:1f:97:
b3:68:de:03:bc:88:6a:29:76:c4:5e:2b:91:4d:29:
67:d2:79:cd:fa:42:5a:0d:e3:5f:5b:4f:0b:e5:1d:
e1:3c:0c:13:1b:91:a2:e2:06:d4:3f:c5:c6:81:3f:
7b:7d:7e:8e:4a:be:2d:05:7a:3a:43:de:e6:64:57:
08:a5:de:d4:db:ae:a1:39:fe:41:0e:f1:aa:5b:90:
77:6a:ad:39:aa:91:a4:4c:7d:f8:47:8b:41:6b:4d:
05:01:f0:45:7e:df:cb:db:26:b0:a3:69:8e:e4:9a:
f8:b2:1a:b8:ab:6a:7d:9c:2f:ae:7d:ec:e8:7e:7e:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C8:55:B9:AC:A0:69:EC:81:73:E7:A1:BF:50:0A:E4:4F:37:9F:52
X509v3 Authority Key Identifier:
keyid:96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/7chVuaygaeyBc-ehv1AK5E83n1I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.12.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:62:c3:26:df:85:17:b6:24:9c:67:11:3d:21:4c:fc:23:39:
65:e8:e1:3c:60:14:41:4d:a9:ea:6d:6a:e8:c4:b4:b3:30:3e:
83:4a:7e:6f:52:43:aa:d4:a4:f5:54:0f:a7:18:f4:e9:cc:03:
90:99:14:89:f0:31:c0:ba:e8:5d:e5:14:91:5c:a4:f8:07:9d:
75:cc:d9:de:3e:cc:25:7f:3c:ed:00:78:37:5f:20:82:ba:10:
33:f2:2f:17:7e:6c:fb:09:25:b7:ed:a7:e6:bd:55:cc:d8:c2:
4b:c3:a3:33:5f:a4:c9:53:41:e9:51:b6:bd:38:b0:c4:ad:bb:
41:ab:d7:f0:1b:bf:bb:45:83:8e:b4:12:71:7f:ad:c9:fd:de:
35:70:db:16:3f:ca:db:e7:d1:97:84:12:95:83:b1:10:5f:0f:
b8:ec:7d:48:bf:b1:4d:0d:b2:91:d1:01:01:49:8f:3f:82:b4:
1e:9b:b6:58:45:30:44:6d:a8:30:cf:c1:04:1e:55:5f:92:4e:
72:22:4f:e7:06:37:33:28:22:ba:51:3a:84:4e:18:6e:23:0e:
e9:de:8d:ba:1a:1c:9c:44:19:38:85:d9:2c:eb:a6:c1:2b:1b:
e1:5a:e6:96:29:10:25:19:89:80:48:5d:f9:b5:7f:56:56:9c:
ea:85:9d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:38:26 2026 by rpki-client