This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZUSO/Ko-I0bR43afh3c0h2NhVHp19Hxk.roa File: Ko-I0bR43afh3c0h2NhVHp19Hxk.roa (raw, json) Hash identifier: CGK9ysT5oSzty3RqTlIoHe/Y5XDhbSjESKuaBW+QPT0= Subject key identifier: 2A:8F:88:D1:B4:78:DD:A7:E1:DD:CD:21:D8:D8:55:1E:9D:7D:1F:19 Certificate issuer: /CN=F7E9EA4822723D47E3042F9D8FB6E42B6D0A6683 Certificate serial: 010B Authority key identifier: F7:E9:EA:48:22:72:3D:47:E3:04:2F:9D:8F:B6:E4:2B:6D:0A:66:83 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/Ko-I0bR43afh3c0h2NhVHp19Hxk.roa Signing time: Thu 04 Dec 2025 07:40:48 +0000 ROA not before: Thu 04 Dec 2025 07:40:48 +0000 ROA not after: Wed 07 Oct 2026 15:30:24 +0000 asID: 131638 IP address blocks: 2402:30e0:fecb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 06:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7E9EA4822723D47E3042F9D8FB6E42B6D0A6683 Validity Not Before: Dec 4 07:40:48 2025 GMT Not After : Oct 7 15:30:24 2026 GMT Subject: CN=2A8F88D1B478DDA7E1DDCD21D8D8551E9D7D1F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:b8:5a:62:59:e8:f5:27:45:fc:47:04:00: a7:58:65:31:0f:39:16:ef:ff:86:d5:21:53:bd:bd: 19:30:2d:c5:1c:75:c7:73:44:a6:73:3c:20:15:80: ed:8b:2a:cd:8b:28:7a:ae:f4:7a:ec:f6:2e:b5:59: 28:88:26:83:5d:a6:af:2b:2d:14:04:0e:b4:d5:43: 43:21:19:6d:fc:ae:03:b0:9d:c7:3d:ec:c8:9a:45: ac:c8:a4:46:38:19:c9:9c:98:88:c6:b2:5e:99:bb: ed:82:cb:08:1d:aa:8e:ea:e3:44:0e:f7:27:ac:2d: 89:26:e4:51:72:16:96:0a:dc:a3:62:bd:8f:3a:b2: 4d:57:38:dd:69:50:49:8c:7a:5f:a3:c5:e5:77:33: b4:0e:e6:e7:c0:6d:40:80:8c:13:57:84:05:3d:9c: 72:20:aa:44:85:bd:36:12:d9:a9:be:ec:c9:6c:05: 22:83:b4:fb:7f:27:12:6e:81:76:af:4e:fb:5a:77: dd:c1:36:ae:67:e4:11:1d:29:b3:a8:0d:eb:e4:d5: b3:70:14:49:1a:53:d0:f8:bb:92:b4:c2:35:e4:11: ca:00:45:94:75:94:16:fb:51:2b:10:1c:0f:5c:a4: 7e:50:c5:1a:48:8b:4b:b5:64:15:ee:98:a2:a0:59: cd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8F:88:D1:B4:78:DD:A7:E1:DD:CD:21:D8:D8:55:1E:9D:7D:1F:19 X509v3 Authority Key Identifier: keyid:F7:E9:EA:48:22:72:3D:47:E3:04:2F:9D:8F:B6:E4:2B:6D:0A:66:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/Ko-I0bR43afh3c0h2NhVHp19Hxk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:30e0:fecb::/48 Signature Algorithm: sha256WithRSAEncryption a1:c0:a6:7f:90:f3:28:df:18:d2:b1:92:e4:0c:be:bc:de:33: 52:c3:1f:49:8d:69:90:cf:30:8d:d6:ea:e7:4b:75:c5:fa:f7: 50:53:5a:52:29:82:75:5f:34:ee:fa:77:25:4b:14:2e:9d:0f: ab:0a:a3:bb:31:46:30:18:77:a0:a3:8e:49:b6:ea:7b:e5:e4: 80:4b:30:25:88:7b:04:6d:da:51:81:68:f2:b8:d6:3f:65:17: b9:ab:77:6f:1e:dd:4b:0c:5d:1c:60:e1:ae:e3:9c:af:b1:d6: 2e:c4:84:c1:7b:6b:19:a2:e0:49:09:ae:a9:fd:65:4d:6b:86: 48:66:89:14:e2:8b:13:56:e1:0d:3e:d5:35:6a:a7:35:12:3e: 01:b5:7d:ce:88:8c:87:38:b1:a1:9e:34:bb:20:dc:d6:5d:40: af:e2:21:5e:aa:9e:fa:72:39:60:5d:7c:f3:4c:08:63:43:90: 3c:d7:1c:8e:72:1b:dd:27:5a:5e:e0:55:94:eb:b9:f2:ce:e3: 7c:1a:cd:f6:2e:f8:d2:ba:0a:2a:14:48:23:a8:f1:be:fb:f3: 88:5c:6b:fd:8e:ef:86:25:fe:34:dd:01:31:a8:6c:7e:5d:fc: 71:98:c9:87:f1:2f:83:92:f9:05:26:ac:e7:1c:cf:7c:ea:e5: c2:3b:aa:01 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICAQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjdF OUVBNDgyMjcyM0Q0N0UzMDQyRjlEOEZCNkU0MkI2RDBBNjY4MzAeFw0yNTEyMDQw NzQwNDhaFw0yNjEwMDcxNTMwMjRaMDMxMTAvBgNVBAMTKDJBOEY4OEQxQjQ3OERE QTdFMUREQ0QyMUQ4RDg1NTFFOUQ3RDFGMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5MrhaYlno9SdF/EcEAKdYZTEPORbv/4bVIVO9vRkwLcUcdcdz RKZzPCAVgO2LKs2LKHqu9Hrs9i61WSiIJoNdpq8rLRQEDrTVQ0MhGW38rgOwncc9 7MiaRazIpEY4GcmcmIjGsl6Zu+2Cywgdqo7q40QO9yesLYkm5FFyFpYK3KNivY86 sk1XON1pUEmMel+jxeV3M7QO5ufAbUCAjBNXhAU9nHIgqkSFvTYS2am+7MlsBSKD tPt/JxJugXavTvtad93BNq5n5BEdKbOoDevk1bNwFEkaU9D4u5K0wjXkEcoARZR1 lBb7USsQHA9cpH5QxRpIi0u1ZBXumKKgWc1TAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUKo+I0bR43afh3c0h2NhVHp19HxkwHwYDVR0jBBgwFoAU9+nqSCJyPUfjBC+d j7bkK20KZoMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWlVTTy85 LW5xU0NKeVBVZmpCQy1kajdia0syMEtab00uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzktbnFTQ0p5UFVmakJDLWRqN2JrSzIwS1pvTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1pVU08vS28tSTBiUjQzYWZoM2MwaDJOaFZI cDE5SHhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCMOD+ yzANBgkqhkiG9w0BAQsFAAOCAQEAocCmf5DzKN8Y0rGS5Ay+vN4zUsMfSY1pkM8w jdbq50t1xfr3UFNaUimCdV807vp3JUsULp0PqwqjuzFGMBh3oKOOSbbqe+XkgEsw JYh7BG3aUYFo8rjWP2UXuat3bx7dSwxdHGDhruOcr7HWLsSEwXtrGaLgSQmuqf1l TWuGSGaJFOKLE1bhDT7VNWqnNRI+AbV9zoiMhzixoZ40uyDc1l1Ar+IhXqqe+nI5 YF1880wIY0OQPNccjnIb3SdaXuBVlOu58s7jfBrN9i740roKKhRII6jxvvvziFxr /Y7vhiX+NN0BMahsfl38cZjJh/Evg5L5BSas5xzPfOrlwjuqAQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:54:43 2025 by rpki-client