This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/JC0131RCTbuw5uzVEFEpLz2gfe0.roa
File:                     JC0131RCTbuw5uzVEFEpLz2gfe0.roa (raw, json)
Hash identifier:          qKRwYWU24k/8mciplr/1WSInTz0AiZbkubRoIGmLy18=
Subject key identifier:   24:2D:35:DF:54:42:4D:BB:B0:E6:EC:D5:10:51:29:2F:3D:A0:7D:ED
Certificate issuer:       /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial:       42
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/JC0131RCTbuw5uzVEFEpLz2gfe0.roa
Signing time:             Thu 15 Jan 2026 15:13:00 +0000
ROA not before:           Thu 15 Jan 2026 15:13:00 +0000
ROA not after:            Wed 30 Dec 2026 15:30:20 +0000
asID:                     152612
IP address blocks:        2402:43e0:2::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 04:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
        Validity
            Not Before: Jan 15 15:13:00 2026 GMT
            Not After : Dec 30 15:30:20 2026 GMT
        Subject: CN=242D35DF54424DBBB0E6ECD51051292F3DA07DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:d4:fd:bc:fe:1e:96:79:83:2a:25:e2:91:
                    b2:e4:92:95:d9:e6:6c:10:f9:81:17:2b:aa:48:75:
                    26:66:d0:82:1c:b6:09:41:b3:86:1a:1c:5e:0e:b6:
                    b7:05:19:26:90:4c:c4:58:a1:82:b3:bc:91:57:6c:
                    d0:c4:ed:77:2c:80:8e:81:68:d2:25:c5:93:80:b3:
                    25:81:f1:16:dc:39:32:90:3f:8c:d8:f8:b3:ba:37:
                    f6:fb:3b:0b:f4:cd:d6:d9:39:8c:47:d1:c8:4a:c4:
                    63:87:44:61:3f:f6:89:11:36:d3:1e:1f:04:3e:26:
                    a2:fc:dd:e2:2c:93:18:61:aa:00:07:01:64:95:98:
                    56:bb:61:01:9c:a0:b1:10:50:5f:ed:d9:c1:e8:d8:
                    00:1d:7c:2d:62:8e:ac:e8:62:1c:53:fe:e5:77:8b:
                    44:56:29:a4:eb:dc:77:fd:93:0b:0f:f7:05:b1:cc:
                    63:5b:02:1b:9c:fd:93:3d:b0:f3:db:89:1a:8d:0a:
                    c5:83:b6:22:d0:97:26:8b:ca:20:b5:ee:eb:a6:8f:
                    95:af:18:de:4f:b2:a5:a1:2e:26:79:c4:13:dc:62:
                    57:0b:e2:b0:79:35:5a:f8:42:76:7a:a7:1d:6f:e0:
                    77:50:ca:54:01:9a:4c:2f:7a:91:52:dc:b7:56:10:
                    2b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2D:35:DF:54:42:4D:BB:B0:E6:EC:D5:10:51:29:2F:3D:A0:7D:ED
            X509v3 Authority Key Identifier:
                keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/JC0131RCTbuw5uzVEFEpLz2gfe0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:43e0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:99:72:1a:15:db:5d:52:d1:b1:d8:bf:80:fc:5a:8f:8a:86:
         0f:a9:e7:41:fc:17:b5:30:65:57:09:d7:49:ce:85:91:79:90:
         ed:68:a6:a5:a7:e1:75:8b:60:0e:08:c9:86:c1:b0:d0:a3:d2:
         e6:be:c0:ea:ce:8d:37:b7:6a:89:2f:10:97:e8:65:2c:e1:8e:
         a9:65:1e:9c:cf:8d:bd:87:8d:f9:35:84:f8:b2:7d:a5:e8:81:
         5a:d9:d0:aa:95:f2:c1:94:d3:e7:1c:14:92:80:bd:6e:f5:43:
         9e:bc:c8:30:bc:28:8b:a1:64:f6:e1:b8:0d:b4:f2:8e:e9:48:
         24:27:b5:aa:90:19:54:ac:b4:ec:97:bf:fa:c0:0c:f1:1c:01:
         eb:05:e0:97:39:b2:e5:1b:39:17:16:d8:46:52:27:ac:f8:ee:
         35:ad:cf:ae:32:93:82:1b:4b:92:07:37:44:93:6c:e8:75:1d:
         b4:fa:b4:e2:89:20:ab:2f:c0:73:61:d4:50:9c:a9:d8:fe:3b:
         b2:ca:47:ca:59:58:f0:eb:e7:47:50:74:df:b9:aa:d6:fe:f9:
         ec:e1:c8:db:4d:0a:4e:86:89:41:49:2f:57:7d:fc:93:06:42:
         00:5b:98:c4:d6:b0:d4:1c:51:57:ee:50:3d:90:b4:07:37:1e:
         77:d7:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 00:31:12 2026 by rpki-client