This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/thIdaR2Z61WG4vsVSESFpih9bPQ.cer File: thIdaR2Z61WG4vsVSESFpih9bPQ.cer (raw, json) Hash identifier: p8bPTRsoZSnpdFJsmLDY621fou31mOjsGzt7EHrUC2U= Subject key identifier: B6:12:1D:69:1D:99:EB:55:86:E2:FB:15:48:44:85:A6:28:7D:6C:F4 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 402F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEARNING36/thIdaR2Z61WG4vsVSESFpih9bPQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEARNING36/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Wed 24 Dec 2025 09:40:03 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 103.64.22.0/23 IP: 2401:2760::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16431 (0x402f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Dec 24 09:40:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B6121D691D99EB5586E2FB15484485A6287D6CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:b2:b6:67:25:c0:f1:69:57:93:94:65:03: d0:43:ae:38:3e:ac:fd:ac:1b:8d:18:48:b2:17:3e: d7:49:5d:3f:8d:69:03:40:38:12:a3:91:64:6a:86: 8a:25:cc:1e:a4:3a:95:46:6d:1e:4e:ef:26:13:04: de:90:45:77:5a:24:13:1f:65:c2:95:7a:64:f4:a0: 90:4a:6a:3e:e8:47:6b:d8:ea:69:49:cd:10:f6:06: df:1a:c0:fb:83:0c:44:53:ee:21:01:b4:4b:11:7a: 44:bf:ab:df:67:9a:f4:40:88:55:6e:51:80:4f:49: 3b:dd:7c:7d:c8:c1:c0:c3:85:23:01:91:89:21:6b: 3e:1e:e0:c6:97:ee:35:7e:fa:28:57:18:01:dc:d0: 9d:36:f9:da:1b:d0:19:57:73:0a:a7:b1:b0:e0:00: 03:6c:1e:12:8d:b0:19:17:73:3a:7e:84:84:87:11: 27:25:3b:9d:5e:e5:35:ed:fe:df:99:ee:49:56:b1: de:f6:ac:49:46:02:4e:92:01:3d:b6:60:73:1b:b9: e6:de:62:c0:d9:d1:3c:3c:99:8b:aa:8b:d7:14:58: 69:6b:ff:8c:69:d1:fc:99:c8:7a:12:0c:33:02:91: f0:e3:41:36:67:49:45:9f:09:99:fd:ac:0a:95:21: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:12:1D:69:1D:99:EB:55:86:E2:FB:15:48:44:85:A6:28:7D:6C:F4 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEARNING36/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEARNING36/thIdaR2Z61WG4vsVSESFpih9bPQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.64.22.0/23 IPv6: 2401:2760::/32 Signature Algorithm: sha256WithRSAEncryption 89:29:f3:00:0a:01:92:49:0f:4c:5e:93:be:0d:73:c2:35:b2: 16:fd:6b:b1:f7:cf:dc:4e:4d:21:4d:56:f2:b6:e5:fc:3f:92: 6b:4b:c4:97:a9:f5:89:c3:79:5c:8a:e7:14:5e:07:25:00:bd: 09:39:1c:49:c8:c3:1a:14:c6:0f:6d:3e:74:00:fd:38:fd:78: 71:91:b6:a3:0a:30:61:cf:f5:27:a2:2f:c4:de:cf:9d:6e:7b: 4c:6a:ba:d6:50:a8:10:a7:42:7d:d4:5f:39:d7:a0:ce:65:68: 85:87:7e:cb:39:5f:0c:fe:cb:f5:df:1d:d9:f4:95:11:21:a1: 8e:68:36:31:df:70:ca:f8:c5:d4:44:0a:83:3d:e9:9d:31:3b: c0:6d:01:b9:34:99:de:b3:d7:a9:e3:a7:f3:83:98:0f:39:a3: a4:78:b2:a5:42:cd:1d:1d:22:12:d9:6b:91:6c:a7:a6:96:23: ae:3e:9d:24:09:4a:26:b1:4e:2d:74:0c:96:d4:ee:7b:2f:24: a4:a8:60:13:8f:6b:9a:1c:ca:2c:eb:6d:9b:87:ad:85:78:2f: 6b:5a:91:e9:86:9b:fc:e6:01:aa:f0:13:2c:b7:3e:5d:ac:b9: 10:2a:d9:49:5c:b4:7c:d0:e2:b8:25:63:94:e7:68:10:76:81: 2c:f5:93:ab -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICQC8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MTIyNDA5NDAwM1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoQjYxMjFENjkxRDk5RUI1NTg2RTJGQjE1NDg0NDg1QTYyODdENkNG NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANC0srZnJcDxaVeTlGUD 0EOuOD6s/awbjRhIshc+10ldP41pA0A4EqORZGqGiiXMHqQ6lUZtHk7vJhME3pBF d1okEx9lwpV6ZPSgkEpqPuhHa9jqaUnNEPYG3xrA+4MMRFPuIQG0SxF6RL+r32ea 9ECIVW5RgE9JO918fcjBwMOFIwGRiSFrPh7gxpfuNX76KFcYAdzQnTb52hvQGVdz CqexsOAAA2weEo2wGRdzOn6EhIcRJyU7nV7lNe3+35nuSVax3vasSUYCTpIBPbZg cxu55t5iwNnRPDyZi6qL1xRYaWv/jGnR/JnIehIMMwKR8ONBNmdJRZ8Jmf2sCpUh IdUCAwEAAaOCAmcwggJjMB0GA1UdDgQWBBS2Eh1pHZnrVYbi+xVIRIWmKH1s9DAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVBUk5JTkcz Ni8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MRUFSTklORzM2L3RoSWRhUjJaNjFXRzR2c1ZTRVNGcGloOWJQUS5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnQBYwDQQCAAIwBwMFACQB J2AwDQYJKoZIhvcNAQELBQADggEBAIkp8wAKAZJJD0xek74Nc8I1shb9a7H3z9xO TSFNVvK25fw/kmtLxJep9YnDeVyK5xReByUAvQk5HEnIwxoUxg9tPnQA/Tj9eHGR tqMKMGHP9SeiL8Tez51ue0xqutZQqBCnQn3UXznXoM5laIWHfss5Xwz+y/XfHdn0 lREhoY5oNjHfcMr4xdRECoM96Z0xO8BtAbk0md6z16njp/ODmA85o6R4sqVCzR0d IhLZa5Fsp6aWI64+nSQJSiaxTi10DJbU7nsvJKSoYBOPa5ocyizrbZuHrYV4L2ta kemGm/zmAarwEyy3Pl2suRAq2UlctHzQ4rglY5TnaBB2gSz1k6s= -----END CERTIFICATE-----Generated at Sat Dec 27 20:58:56 2025 by rpki-client