This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/faLLf1lDyKQcDivTDF4fSp-Ew3Q.cer File: faLLf1lDyKQcDivTDF4fSp-Ew3Q.cer (raw, json) Hash identifier: as4URCKMouX4Z+SSXpI3G1L1wv6XW3YDOfCwl5+0cRg= Subject key identifier: 7D:A2:CB:7F:59:43:C8:A4:1C:0E:2B:D3:0C:5E:1F:4A:9F:84:C3:74 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 20C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/faLLf1lDyKQcDivTDF4fSp-Ew3Q.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 05 Jan 2026 01:11:14 +0000 Certificate not after: Thu 12 Nov 2026 15:30:20 +0000 Subordinate resources: IP: 138.252.192.0/24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8385 (0x20c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Jan 5 01:11:14 2026 GMT Not After : Nov 12 15:30:20 2026 GMT Subject: CN=7DA2CB7F5943C8A41C0E2BD30C5E1F4A9F84C374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:a0:fe:90:c4:27:91:61:85:2f:9f:0a:0b: 58:01:e0:a4:40:98:c8:e2:fe:c7:ad:42:81:e6:b8: 17:11:49:9d:5a:4c:a6:3d:e8:52:21:c4:01:bc:d1: 06:1f:3a:85:09:8e:c4:5b:17:07:a5:c8:83:21:d7: 4e:5e:6e:c5:37:13:85:c2:a9:0e:21:56:60:fe:3a: 99:8d:99:e7:79:9c:ac:02:fe:d1:01:23:b9:d2:f7: 07:6c:aa:6d:88:18:4f:55:54:d7:69:81:0a:b5:9f: 3c:c9:0f:64:ee:23:e3:ec:4d:c4:8f:fa:71:90:85: 49:e6:fb:9f:1f:f7:97:12:45:62:d8:a5:10:50:66: 1f:7e:8e:cd:79:80:b5:78:30:94:7f:79:6e:e0:bf: d9:3f:72:97:de:2b:95:d1:1d:05:71:78:c9:07:98: 9c:c2:f4:42:9e:c4:5d:81:30:37:1d:13:8c:6a:66: a8:48:70:01:0b:43:72:0a:01:a4:6f:9c:93:c4:27: 0b:52:ad:11:4d:ee:14:f0:03:38:e5:bc:64:f7:cf: 16:ee:44:1f:0c:62:e5:02:1a:a1:f1:62:13:ae:93: 91:e8:31:7c:72:39:8f:de:2c:a9:5c:6c:92:db:49: a3:48:7a:b9:ab:06:34:37:25:ed:d3:ac:df:c3:55: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:CB:7F:59:43:C8:A4:1C:0E:2B:D3:0C:5E:1F:4A:9F:84:C3:74 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/faLLf1lDyKQcDivTDF4fSp-Ew3Q.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.192.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:43:b5:5e:9b:78:a4:8a:34:36:17:8f:d2:df:cd:a0:d7:98: 15:ce:84:10:e0:09:bf:70:30:3f:b8:bb:15:25:e8:78:0e:9d: f5:34:3e:a2:d2:13:c6:1a:a8:31:61:6c:c6:1f:ec:48:4a:e7: b4:87:e9:80:4e:7e:9b:ca:06:5b:22:32:e5:c6:55:60:2e:59: 83:01:56:01:28:05:a1:7f:0f:2b:7d:46:2d:4f:1d:1c:24:95: 77:52:42:a6:12:0e:76:b4:50:16:6b:02:59:16:3d:8d:b3:32: 90:3a:9a:ba:c9:52:b4:0d:1c:7b:1f:06:5e:2e:36:f2:a2:c0: e2:fb:5f:59:dc:e7:65:5c:fb:98:a3:88:09:27:e0:70:ae:99: de:b2:9b:b1:c7:b5:a4:b8:0a:f5:d9:f2:1c:4c:cd:5f:db:e3: 37:8a:06:46:82:30:c0:99:98:da:d4:fc:1e:ec:72:fa:f0:a6: 1a:6d:29:62:11:a0:2d:d8:02:a0:0b:0d:4a:0f:27:e5:90:0b: 11:fe:6b:d1:7b:46:a3:ab:6c:e7:52:1c:f3:25:33:6b:eb:1a: a1:5a:f7:22:f2:d5:57:20:05:b0:f1:92:5f:99:2d:96:ca:bd: 13:4f:83:e7:a5:90:45:ce:d6:a6:0f:01:90:1f:bd:4d:d4:76: b3:49:cd:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIMEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI2MDEwNTAxMTExNFoXDTI2MTExMjE1MzAyMFowMzEx MC8GA1UEAxMoN0RBMkNCN0Y1OTQzQzhBNDFDMEUyQkQzMEM1RTFGNEE5Rjg0QzM3 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMmnoP6QxCeRYYUvnwoL WAHgpECYyOL+x61Cgea4FxFJnVpMpj3oUiHEAbzRBh86hQmOxFsXB6XIgyHXTl5u xTcThcKpDiFWYP46mY2Z53mcrAL+0QEjudL3B2yqbYgYT1VU12mBCrWfPMkPZO4j 4+xNxI/6cZCFSeb7nx/3lxJFYtilEFBmH36OzXmAtXgwlH95buC/2T9yl94rldEd BXF4yQeYnML0Qp7EXYEwNx0TjGpmqEhwAQtDcgoBpG+ck8QnC1KtEU3uFPADOOW8 ZPfPFu5EHwxi5QIaofFiE66TkegxfHI5j94sqVxskttJo0h6uasGNDcl7dOs38NV z6ECAwEAAaOCAlQwggJQMB0GA1UdDgQWBBR9ost/WUPIpBwOK9MMXh9Kn4TDdDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR01JQ0xPVUQv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvR01JQ0xPVUQvZmFMTGYxbER5S1FjRGl2VERGNGZTcC1FdzNRLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr8wDANBgkqhkiG9w0BAQsFAAOC AQEAmkO1Xpt4pIo0NheP0t/NoNeYFc6EEOAJv3AwP7i7FSXoeA6d9TQ+otITxhqo MWFsxh/sSErntIfpgE5+m8oGWyIy5cZVYC5ZgwFWASgFoX8PK31GLU8dHCSVd1JC phIOdrRQFmsCWRY9jbMykDqauslStA0cex8GXi428qLA4vtfWdznZVz7mKOICSfg cK6Z3rKbsce1pLgK9dnyHEzNX9vjN4oGRoIwwJmY2tT8Huxy+vCmGm0pYhGgLdgC oAsNSg8n5ZALEf5r0XtGo6ts51Ic8yUza+saoVr3IvLVVyAFsPGSX5ktlsq9E0+D 56WQRc7Wpg8BkB+9TdR2s0nN3g== -----END CERTIFICATE-----Generated at Wed Jan 21 18:05:55 2026 by rpki-client