This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ae20bMVXL6rt9sTvIZFHzhWbgO0.roa
File:                     ae20bMVXL6rt9sTvIZFHzhWbgO0.roa (raw, json)
Hash identifier:          /n53WFhJI+yU6Mb2VQsQo7DTGHS/5NG2MHXjd/irDDI=
Subject key identifier:   69:ED:B4:6C:C5:57:2F:AA:ED:F6:C4:EF:21:91:47:CE:15:9B:80:ED
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0FEF
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ae20bMVXL6rt9sTvIZFHzhWbgO0.roa
Signing time:             Thu 06 Nov 2025 23:56:26 +0000
ROA not before:           Thu 06 Nov 2025 23:56:26 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     150288
IP address blocks:        103.135.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4079 (0xfef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Nov  6 23:56:26 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=69EDB46CC5572FAAEDF6C4EF219147CE159B80ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:af:28:a5:bb:0c:c2:57:11:34:de:8e:2a:45:
                    b4:54:28:43:43:75:27:3a:e3:e2:9b:2f:4c:47:10:
                    a9:a2:9b:88:4b:b3:89:af:46:bb:ae:de:b8:dc:c1:
                    91:14:6f:a8:46:2e:8d:26:33:d5:b5:e9:0e:66:f2:
                    a9:c5:58:5c:25:2a:ca:13:8f:11:ee:7e:56:db:bd:
                    0f:1a:ae:e2:ad:29:ec:5c:0f:98:79:da:b9:55:ec:
                    c1:6b:f2:0d:c2:6e:7d:79:90:0b:ad:62:17:e9:5a:
                    c6:ba:bc:5d:7e:0a:52:ea:28:72:d8:a4:5b:98:72:
                    b2:b4:52:35:d9:71:e9:4e:4a:4b:91:44:be:e3:19:
                    cf:41:0d:ec:8e:9c:5f:68:d9:45:36:cc:1a:ea:c7:
                    d5:ca:04:81:a6:43:04:13:33:f3:b2:91:bd:16:1a:
                    5c:9f:10:2e:41:aa:da:19:e0:cb:ed:8e:7d:13:2c:
                    a5:cc:fa:42:1f:0d:ee:b8:16:54:55:bc:06:57:32:
                    c5:19:de:05:ea:52:02:df:af:ba:f2:20:75:68:fd:
                    83:1d:f1:eb:46:52:84:29:97:ec:d0:ea:5f:f7:62:
                    f6:9d:b0:7f:8d:01:16:c7:b2:a4:80:c5:b4:0f:65:
                    c9:43:92:2f:44:ea:47:fe:74:17:19:76:36:68:0e:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:ED:B4:6C:C5:57:2F:AA:ED:F6:C4:EF:21:91:47:CE:15:9B:80:ED
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ae20bMVXL6rt9sTvIZFHzhWbgO0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:48:83:7a:d3:b6:97:ae:1e:17:32:cc:ff:2c:b1:7d:b4:cb:
         ce:b0:e6:7a:df:74:d2:46:91:fe:6f:f2:41:97:eb:11:08:49:
         20:64:b9:f3:b5:06:96:af:0b:43:d9:cc:b4:26:38:52:a3:fd:
         57:a3:45:0f:32:3c:79:4d:dd:33:ea:7f:d9:fc:ac:1d:d1:a0:
         d7:65:64:cf:ee:50:3a:0b:4f:ed:72:ba:8a:00:49:0e:97:93:
         2d:cd:ef:d6:e6:53:78:ba:78:d8:83:fd:33:f5:b7:14:71:75:
         61:86:12:ed:0c:4d:7a:aa:9e:35:c6:56:9a:ff:c8:6b:f7:51:
         9c:b6:ca:4e:f6:aa:98:8c:40:38:74:7b:a9:4b:3b:c3:7b:6c:
         4e:8d:16:ac:4f:57:dc:4d:be:0f:92:a2:de:a5:b8:fe:6f:22:
         bf:0f:77:a3:91:d2:ef:da:e9:5c:56:a0:ca:54:2b:35:23:e0:
         84:26:ec:08:51:4f:db:49:b5:f6:39:b7:98:23:c9:74:5e:8e:
         f0:68:85:e9:4f:f2:54:8f:06:fc:96:d8:41:6e:46:a6:cc:b0:
         92:b3:04:66:4d:9e:19:8e:04:fb:c1:82:bc:db:42:7a:fc:eb:
         8c:21:bc:f0:52:48:62:dc:e4:78:c1:29:69:54:c3:66:19:69:
         7a:73:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:10:20 2025 by rpki-client