This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer File: q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer (raw, json) Hash identifier: x1HRExNKQPsvOanmW/TmckycB9NtWs5eyCB+kL37NdQ= Subject key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3F24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 06 Nov 2025 07:51:58 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 9678 AS: 134522 IP: 45.123.117.0/24 IP: 103.98.72.0/22 IP: 103.150.36.0/23 IP: 103.152.150.0/23 IP: 211.76.178.0/23 IP: 223.26.0.0/23 IP: 2401:95c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 20:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16164 (0x3f24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Nov 6 07:51:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:70:88:ba:44:6f:9f:8e:38:8d:f0:00:cd: 37:ee:1a:4d:3a:31:27:8c:7c:2d:bd:f1:2b:3d:dd: d6:78:f7:86:99:84:02:17:0a:40:0e:3d:76:c6:cf: 40:e3:5b:29:dd:27:df:c5:b0:60:61:aa:56:e4:15: ed:38:e2:be:22:59:a1:02:88:05:12:f3:ca:78:c8: f6:53:1e:a5:71:f5:1b:32:69:03:cd:8a:92:ac:40: c4:97:7e:21:09:56:34:19:37:6d:b2:b6:e7:83:36: 19:5a:14:9b:cd:29:84:05:27:e8:df:c4:c8:79:96: f7:63:1d:29:f3:a3:b6:2b:9e:83:15:d2:25:5d:bb: bd:a7:cb:3f:67:f5:bc:35:fe:8f:0d:39:57:0d:f9: c0:69:a4:18:d1:96:7b:af:54:2c:a4:c6:9a:ac:68: cc:e9:20:12:b4:54:1c:a9:06:43:3f:1f:93:28:83: 95:65:c6:92:29:33:40:e7:9f:25:af:04:68:5d:93: 20:02:8f:de:87:ac:8a:b7:8f:f7:43:a7:95:05:38: 46:f1:2d:d9:96:90:be:50:f4:e1:09:1f:30:4f:ac: 09:c9:82:0e:e6:5c:96:a8:2d:bb:86:55:b0:f1:21: 63:b1:7b:98:84:31:a1:44:b5:d0:cf:73:15:f9:56: 0b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9678 134522 sbgp-ipAddrBlock: critical IPv4: 45.123.117.0/24 103.98.72.0/22 103.150.36.0/23 103.152.150.0/23 211.76.178.0/23 223.26.0.0/23 IPv6: 2401:95c0::/32 Signature Algorithm: sha256WithRSAEncryption 5a:80:fd:74:92:54:2c:dc:1a:cb:92:b6:b3:a4:e0:d1:87:94: b9:e1:a6:83:18:ee:23:8e:2c:32:37:08:cb:96:0f:13:34:59: bd:cd:c1:4e:bd:64:50:85:6c:c2:57:b3:b4:eb:f2:0a:0b:ad: e2:bc:e2:01:27:81:4a:3c:26:b3:f2:da:20:ad:ea:0f:cc:f0: 7f:b4:bb:b4:7e:bf:34:fc:49:0a:21:2e:8a:53:90:85:b7:5c: 4b:e9:59:6a:48:02:7e:5b:96:7f:19:5c:92:ca:d3:b8:f3:30: 18:0a:a6:1a:a8:fa:ff:19:f5:43:4e:97:c9:c6:09:43:43:df: 23:75:5b:0e:d7:9f:c1:16:fa:9a:9a:1b:55:59:b3:54:05:05: 79:de:f2:96:99:6f:b1:f0:51:bf:93:95:05:fe:ca:0a:07:a9: a6:27:b7:97:50:1a:95:9d:96:33:c1:7e:b1:9a:38:fc:d2:55: c8:14:50:e0:3e:22:1b:31:5f:0b:3c:0a:51:db:b3:ad:8b:04: ae:03:a6:9e:1a:d1:77:71:c1:02:c6:88:51:78:7d:81:d4:ee: 1e:a4:e2:17:77:0f:96:f8:95:92:a0:45:b2:c1:8b:50:ab:4e: 29:e3:3f:95:d2:24:6d:3d:f4:af:07:96:68:d7:b1:60:97:ed: 9b:96:fb:b5 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICPyQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MTEwNjA3NTE1OFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoQUJFRDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOQCcIi6RG+fjjiN8ADN N+4aTToxJ4x8Lb3xKz3d1nj3hpmEAhcKQA49dsbPQONbKd0n38WwYGGqVuQV7Tji viJZoQKIBRLzynjI9lMepXH1GzJpA82KkqxAxJd+IQlWNBk3bbK254M2GVoUm80p hAUn6N/EyHmW92MdKfOjtiuegxXSJV27vafLP2f1vDX+jw05Vw35wGmkGNGWe69U LKTGmqxozOkgErRUHKkGQz8fkyiDlWXGkikzQOefJa8EaF2TIAKP3oesireP90On lQU4RvEt2ZaQvlD04QkfME+sCcmCDuZclqgtu4ZVsPEhY7F7mIQxoUS10M9zFflW C+cCAwEAAaOCAp0wggKZMB0GA1UdDgQWBBSr7Sj/zAQONgMsQmFUlVYrzG70XDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0hPU1RJTi9xLTBvXzh3RURqWURMRUpoVkpWV0s4eHU5RncubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB4GCCsG AQUFBwEIAQH/BA8wDaALMAkCAiXOAgMCDXowTAYIKwYBBQUHAQcBAf8EPTA7MCoE AgABMCQDBAAte3UDBAJnYkgDBAFnliQDBAFnmJYDBAHTTLIDBAHfGgAwDQQCAAIw BwMFACQBlcAwDQYJKoZIhvcNAQELBQADggEBAFqA/XSSVCzcGsuStrOk4NGHlLnh poMY7iOOLDI3CMuWDxM0Wb3NwU69ZFCFbMJXs7Tr8goLreK84gEngUo8JrPy2iCt 6g/M8H+0u7R+vzT8SQohLopTkIW3XEvpWWpIAn5bln8ZXJLK07jzMBgKphqo+v8Z 9UNOl8nGCUND3yN1Ww7Xn8EW+pqaG1VZs1QFBXne8paZb7HwUb+TlQX+ygoHqaYn t5dQGpWdljPBfrGaOPzSVcgUUOA+IhsxXws8ClHbs62LBK4Dpp4a0XdxwQLGiFF4 fYHU7h6k4hd3D5b4lZKgRbLBi1CrTinjP5XSJG099K8HlmjXsWCX7ZuW+7U= -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:12 2025 by rpki-client