This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/bl1GWnJeG5Y69MG6Sps-AH_63FM.roa
File:                     bl1GWnJeG5Y69MG6Sps-AH_63FM.roa (raw, json)
Hash identifier:          K4C1AmF6VbHmlS9l3hUigO8r+Cs57eg9jRWMBpHktgU=
Subject key identifier:   6E:5D:46:5A:72:5E:1B:96:3A:F4:C1:BA:4A:9B:3E:00:7F:FA:DC:53
Certificate issuer:       /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial:       0F
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/bl1GWnJeG5Y69MG6Sps-AH_63FM.roa
Signing time:             Tue 06 Jan 2026 04:38:28 +0000
ROA not before:           Tue 06 Jan 2026 04:38:28 +0000
ROA not after:            Wed 30 Dec 2026 15:30:20 +0000
asID:                     152612
IP address blocks:        2402:43e0::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 00:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
        Validity
            Not Before: Jan  6 04:38:28 2026 GMT
            Not After : Dec 30 15:30:20 2026 GMT
        Subject: CN=6E5D465A725E1B963AF4C1BA4A9B3E007FFADC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:06:7c:ec:81:ae:51:cd:46:8e:ca:b9:01:
                    76:95:53:e6:85:1f:97:f8:f2:6e:40:7b:ce:a9:c5:
                    fc:ab:57:3a:f6:98:50:97:65:55:b0:da:29:62:81:
                    d8:c9:d9:4d:f6:2e:ad:30:e7:59:26:c5:69:05:e9:
                    bc:a6:ab:21:4c:1c:2d:12:51:be:9b:80:ac:4f:13:
                    0e:b7:2b:5a:b7:d5:74:20:0d:31:d3:8f:2c:58:d4:
                    dc:e2:fa:51:e3:0f:1c:06:7a:c6:55:60:ef:2a:eb:
                    3c:f5:d4:a3:60:be:c8:67:f7:f7:eb:aa:f1:cf:22:
                    c1:5a:2c:f3:11:7f:20:d4:df:04:f0:2b:3c:b7:f9:
                    5d:26:5a:d7:31:6c:31:1b:d1:5f:37:0f:5c:e1:2b:
                    c5:10:a8:a2:0b:61:cf:68:48:a3:a6:3a:06:4a:81:
                    ff:df:0a:10:53:ab:61:58:29:5c:77:cf:a5:e6:76:
                    9b:c4:69:c8:fe:ab:fb:ee:bd:fb:95:52:f0:dc:ab:
                    9d:b2:2c:82:55:20:f4:79:f4:76:35:5b:af:60:4e:
                    a5:09:0f:b1:fd:cd:c8:2c:d8:9f:cf:03:b3:df:3b:
                    fc:6d:91:fe:61:a7:8b:80:ff:cb:97:46:f1:fc:a8:
                    86:03:46:94:e9:7d:4f:83:59:e7:23:83:7d:40:e8:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5D:46:5A:72:5E:1B:96:3A:F4:C1:BA:4A:9B:3E:00:7F:FA:DC:53
            X509v3 Authority Key Identifier:
                keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/bl1GWnJeG5Y69MG6Sps-AH_63FM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:43e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:f8:47:b2:46:4f:14:ec:e3:d6:7b:2d:c3:1a:3b:59:01:88:
         cf:ab:c0:5e:46:46:91:46:54:e2:54:49:92:b1:f0:a2:f8:18:
         22:a2:07:0b:08:be:ac:c0:0c:ae:36:84:5c:39:a8:36:03:67:
         19:9d:dd:c9:c3:da:e0:39:22:6d:bb:44:78:08:ff:36:48:ea:
         a0:52:e6:52:98:21:60:a7:ee:d9:0d:79:19:8d:b4:1c:4f:d1:
         df:13:9c:af:e8:a9:6f:68:ee:6c:4e:2a:2d:77:4c:f4:e6:5a:
         89:81:fb:1c:28:d4:ea:f6:9d:e7:09:94:69:c7:df:50:27:92:
         10:ca:18:d5:7f:7f:11:cb:eb:cc:da:2b:66:38:06:13:e0:e8:
         28:a5:b6:df:31:46:e6:8e:73:46:34:05:57:52:bc:48:30:2f:
         a8:64:45:df:54:e6:84:6a:ce:46:2d:f5:cf:00:f2:6d:f9:47:
         20:df:20:c7:4f:81:6e:13:1c:ce:51:a6:68:8a:56:77:88:91:
         19:cd:8d:d8:bb:9f:0d:fa:fd:40:39:25:2e:fe:bb:6f:f2:f4:
         25:bd:ff:7c:2a:53:8c:3c:70:8a:b8:fd:f3:9c:c0:0f:f1:69:
         e1:0d:25:98:11:8f:97:85:81:2b:33:a8:8c:c7:a6:1c:16:04:
         a7:ff:34:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 00:30:12 2026 by rpki-client