This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer File: _HUspZ646u8j0iXcZ6oIUgHx95w.cer (raw, json) Hash identifier: uycl+E4qU9kixuOvw5rz4uRzY2Y3nke2iuMtZF4I3nc= Subject key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 4074 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 05 Jan 2026 00:21:30 +0000 Certificate not after: Wed 30 Dec 2026 15:30:20 +0000 Subordinate resources: IP: 2402:43e0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 05:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16500 (0x4074) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Jan 5 00:21:30 2026 GMT Not After : Dec 30 15:30:20 2026 GMT Subject: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:68:bd:56:20:be:db:da:9a:ee:f9:ce:54: cb:b8:13:c5:29:d9:dc:41:38:55:2a:c4:28:94:4c: 8d:bd:c7:61:f2:09:e0:a8:6c:04:1c:b2:a5:f1:87: 42:a9:8f:d1:fc:95:db:39:bd:3a:4a:c5:f5:a8:39: 85:48:60:4f:9b:db:c3:4b:66:28:cf:3f:8c:8d:30: 2d:44:f9:e9:64:b2:a3:38:63:52:7f:67:60:47:37: 0d:aa:7b:0e:ae:8b:4c:02:10:ca:0b:21:c4:cd:a3: 20:f9:38:43:31:96:77:88:a9:26:c8:83:79:37:7f: 5b:68:6a:04:25:5c:d1:e6:29:02:4b:1c:e6:8d:23: fa:ff:3f:1f:94:a4:4f:5e:41:ee:d8:12:8d:4e:ed: 7b:02:05:bb:42:ef:88:c6:f7:50:a2:5c:74:d8:c1: 8a:6b:65:42:6c:64:90:43:cb:da:e8:2f:31:ee:39: 1a:64:2b:56:e1:45:99:86:98:25:75:f4:c5:91:cd: a9:f9:24:f1:e8:68:6f:a9:13:4f:18:26:63:01:3b: e3:16:12:e5:1c:8f:15:0a:d9:e0:06:d5:33:53:7e: 36:e9:38:21:a4:ce:80:d2:dd:a5:43:f0:6e:2b:aa: 59:92:78:75:ed:85:9f:a6:60:10:b3:b3:71:ab:93: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:43e0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:05:65:da:da:8b:c1:77:0f:93:ee:78:f5:75:6a:ca:3f:a3: 3f:4c:fe:ee:51:31:8b:69:be:72:39:13:35:f0:df:e5:37:d9: 47:02:ae:78:9c:b0:90:39:20:77:a2:f6:3a:03:88:ed:fe:3a: 35:b2:79:c3:b3:a2:b1:b6:9a:8b:32:56:9f:96:d8:2a:0b:8b: 76:62:d5:0c:6e:75:65:57:96:5d:cb:33:d5:82:46:87:91:da: eb:06:d1:cf:a6:06:a7:db:14:6a:11:f1:f6:e2:be:b6:0f:bf: f2:c8:59:d4:20:c7:f4:ed:7e:d6:0e:87:3c:15:87:3a:0c:ec: 69:56:91:96:b3:48:f3:37:25:62:1c:f4:9c:56:d6:db:cb:d8: fe:97:fa:43:fb:1c:f4:1d:a4:b0:7c:4f:78:b1:82:7f:67:06: 49:cd:f7:8e:ad:5c:6e:9e:66:61:44:fc:48:87:6a:53:ad:fa: 2f:81:52:58:e0:44:11:18:22:06:d2:c2:af:8d:00:d2:6e:14: 6a:e4:9f:d4:13:11:7b:f9:ea:b8:e7:2b:5d:c9:11:8f:81:8a: 06:39:0e:9b:3e:bc:95:85:76:a3:10:64:b4:e4:1b:ba:ec:7e: c5:65:fd:74:75:40:71:16:44:92:50:9d:ca:58:98:21:02:2f: 5f:be:74:04 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQHQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI2MDEwNTAwMjEzMFoXDTI2MTIzMDE1MzAyMFowMzEx MC8GA1UEAxMoRkM3NTJDQTU5RUI4RUFFRjIzRDIyNURDNjdBQTA4NTIwMUYxRjc5 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJy3aL1WIL7b2pru+c5U y7gTxSnZ3EE4VSrEKJRMjb3HYfIJ4KhsBByypfGHQqmP0fyV2zm9OkrF9ag5hUhg T5vbw0tmKM8/jI0wLUT56WSyozhjUn9nYEc3Dap7Dq6LTAIQygshxM2jIPk4QzGW d4ipJsiDeTd/W2hqBCVc0eYpAksc5o0j+v8/H5SkT15B7tgSjU7tewIFu0LviMb3 UKJcdNjBimtlQmxkkEPL2ugvMe45GmQrVuFFmYaYJXX0xZHNqfkk8ehob6kTTxgm YwE74xYS5RyPFQrZ4AbVM1N+Nuk4IaTOgNLdpUPwbiuqWZJ4de2Fn6ZgELOzcauT tKECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBT8dSylnrjq7yPSJdxnqghSAfH3nDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU9URVJORVQv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQU9URVJORVQvX0hVc3BaNjQ2dThqMGlYY1o2b0lVZ0h4OTV3Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAg BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCQ+AwDQYJKoZIhvcNAQELBQAD ggEBABwFZdrai8F3D5PuePV1aso/oz9M/u5RMYtpvnI5EzXw3+U32UcCrnicsJA5 IHei9joDiO3+OjWyecOzorG2mosyVp+W2CoLi3Zi1QxudWVXll3LM9WCRoeR2usG 0c+mBqfbFGoR8fbivrYPv/LIWdQgx/TtftYOhzwVhzoM7GlWkZazSPM3JWIc9JxW 1tvL2P6X+kP7HPQdpLB8T3ixgn9nBknN946tXG6eZmFE/EiHalOt+i+BUljgRBEY IgbSwq+NANJuFGrkn9QTEXv56rjnK13JEY+BigY5Dps+vJWFdqMQZLTkG7rsfsVl /XR1QHEWRJJQncpYmCECL1++dAQ= -----END CERTIFICATE-----Generated at Thu Jan 22 01:59:36 2026 by rpki-client