This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/yMdtYDsBDYQNxMTBu0WJy2fqwz0.roa
File:                     yMdtYDsBDYQNxMTBu0WJy2fqwz0.roa (raw, json)
Hash identifier:          SLRr3YZ135D5mFAS5iEErcjTF+dFECOQDSrmmD+9I5c=
Subject key identifier:   C8:C7:6D:60:3B:01:0D:84:0D:C4:C4:C1:BB:45:89:CB:67:EA:C3:3D
Certificate issuer:       /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial:       44
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/yMdtYDsBDYQNxMTBu0WJy2fqwz0.roa
Signing time:             Thu 15 Jan 2026 15:14:51 +0000
ROA not before:           Thu 15 Jan 2026 15:14:51 +0000
ROA not after:            Wed 30 Dec 2026 15:30:20 +0000
asID:                     152612
IP address blocks:        2402:43e0:3::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 04:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
        Validity
            Not Before: Jan 15 15:14:51 2026 GMT
            Not After : Dec 30 15:30:20 2026 GMT
        Subject: CN=C8C76D603B010D840DC4C4C1BB4589CB67EAC33D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:86:6b:a8:4d:9a:0b:a1:7a:d2:48:94:aa:90:
                    da:2a:e7:8a:c9:b2:39:c5:5a:05:4d:f2:5a:0c:1a:
                    ff:70:09:29:41:0c:9e:af:9e:f1:11:43:f5:15:bf:
                    c0:7e:fb:4c:d1:50:7b:ba:64:02:2e:db:27:57:2d:
                    c8:12:4f:4b:10:e1:7f:17:a7:21:da:6c:da:ad:44:
                    f5:66:39:02:43:04:c7:31:6c:30:0b:6c:b0:0e:55:
                    50:12:f9:b5:6b:92:aa:f3:bd:f0:82:f0:74:1a:12:
                    ef:38:81:1a:bd:ee:8d:33:79:76:ad:d8:f5:cc:eb:
                    b4:af:1c:6e:42:ff:3d:a0:c8:98:67:4a:02:9c:9f:
                    c6:3a:76:15:cc:11:17:21:d5:d2:aa:6b:bb:27:cc:
                    45:67:85:12:6c:98:e5:ce:f5:b1:43:fd:a5:b3:25:
                    d7:81:76:08:ae:e7:e0:46:e8:04:36:5e:84:00:31:
                    df:16:b2:b3:e3:29:df:14:3e:85:6f:0d:ab:d7:c2:
                    26:0e:a2:7f:09:8b:90:d4:ec:d6:c9:a1:90:a9:89:
                    19:ea:bc:bf:7f:0c:17:ff:6b:94:64:de:0f:6a:12:
                    fe:7f:de:fc:cf:98:4a:a7:31:2b:ff:ea:23:0a:89:
                    b7:19:3d:c2:9e:f8:07:54:a1:29:5e:93:31:30:1f:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C7:6D:60:3B:01:0D:84:0D:C4:C4:C1:BB:45:89:CB:67:EA:C3:3D
            X509v3 Authority Key Identifier:
                keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/yMdtYDsBDYQNxMTBu0WJy2fqwz0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:43e0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:2c:6a:b3:d5:ad:8a:ea:ab:93:24:ce:22:7e:f3:55:5f:
         b9:3f:d8:45:9c:4d:9f:d0:0e:49:08:d2:be:c6:68:a1:97:58:
         7d:41:5c:de:19:04:0d:eb:27:a1:f9:86:19:fb:65:dd:9e:85:
         07:f8:4c:4c:1d:1f:37:4e:c3:96:09:31:49:21:7b:e7:f4:e9:
         d5:d8:6d:ad:9a:fc:ff:cc:5d:f0:8e:57:8b:ae:84:58:b7:4a:
         69:26:ec:3e:bd:a2:1c:75:61:8f:0e:8c:35:3b:b1:15:90:68:
         04:e9:39:0a:c7:2b:0f:27:1f:1b:9d:45:59:3a:36:02:40:a3:
         41:d1:33:a9:67:6a:d8:23:81:85:a7:6c:81:fa:81:d2:a9:ae:
         68:2d:b6:bb:3e:39:78:66:b7:eb:53:4e:79:13:e4:88:27:63:
         f2:68:64:85:9f:e5:83:99:08:1b:fd:8d:e3:a9:3b:d6:1a:ba:
         a5:1c:9a:97:03:15:f5:c5:72:f7:31:95:5f:c3:ed:ea:17:52:
         ae:92:3e:e6:e4:a0:7d:6c:70:75:77:e5:30:04:38:8e:5b:ff:
         2f:62:b0:b0:e5:6b:3b:a0:eb:2a:22:e5:ed:43:1f:ee:09:0b:
         d1:3e:e5:10:0d:4b:27:5a:ea:9d:c2:5f:45:05:28:40:e9:f5:
         87:a4:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 00:29:05 2026 by rpki-client