This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BHIS/_WZmWSK4Ta_FWZDNtIRS18GjleE.roa
File:                     _WZmWSK4Ta_FWZDNtIRS18GjleE.roa (raw, json)
Hash identifier:          PT6IszsOUMvDvjbd38ogqD5V8PW4FWdI/i4FYHDCs8s=
Subject key identifier:   FD:66:66:59:22:B8:4D:AF:C5:59:90:CD:B4:84:52:D7:C1:A3:95:E1
Certificate issuer:       /CN=5E05E4E582956E266519FB8A0A97F289D68525D3
Certificate serial:       09
Authority key identifier: 5E:05:E4:E5:82:95:6E:26:65:19:FB:8A:0A:97:F2:89:D6:85:25:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XgXk5YKVbiZlGfuKCpfyidaFJdM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/_WZmWSK4Ta_FWZDNtIRS18GjleE.roa
Signing time:             Tue 20 Jan 2026 01:08:14 +0000
ROA not before:           Tue 20 Jan 2026 01:08:14 +0000
ROA not after:            Tue 12 Jan 2027 15:30:19 +0000
asID:                     212969
IP address blocks:        2402:4760::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/XgXk5YKVbiZlGfuKCpfyidaFJdM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/XgXk5YKVbiZlGfuKCpfyidaFJdM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/XgXk5YKVbiZlGfuKCpfyidaFJdM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 19:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E05E4E582956E266519FB8A0A97F289D68525D3
        Validity
            Not Before: Jan 20 01:08:14 2026 GMT
            Not After : Jan 12 15:30:19 2027 GMT
        Subject: CN=FD66665922B84DAFC55990CDB48452D7C1A395E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:90:d2:4e:1f:2d:27:09:85:7d:94:db:c5:
                    9a:04:33:5b:10:b1:39:cc:80:27:27:62:25:07:14:
                    c9:e0:20:07:0c:32:71:bb:4a:79:2e:d0:f9:58:18:
                    1e:d8:d5:28:76:4a:f3:e6:c2:fb:d3:e8:bf:3f:a4:
                    4a:e8:af:c7:fb:fb:3b:77:aa:ae:eb:16:70:0c:22:
                    6d:8e:30:d0:75:88:40:37:5e:3d:54:3e:db:bc:41:
                    28:b6:41:f5:ac:d2:a6:82:5c:02:7a:ee:1d:08:7f:
                    5e:3d:d7:03:d9:93:09:00:80:cf:f6:71:be:20:23:
                    19:ba:bf:d2:dd:b8:16:4c:ef:02:fa:de:e6:39:46:
                    2c:ec:78:08:3f:1d:bf:94:2e:72:43:57:a8:ac:24:
                    91:35:3c:53:3c:d5:c3:66:e1:e2:02:64:bb:43:fb:
                    e5:86:6d:98:84:a0:02:20:15:4f:8e:26:cf:d3:7b:
                    87:32:59:fa:9e:5e:fc:8b:79:f4:3f:0a:08:a2:dc:
                    bc:77:d5:2e:26:f7:f8:fe:10:3a:4f:b1:ae:42:18:
                    83:72:83:25:a7:5c:eb:3c:3c:bd:e9:32:41:75:21:
                    26:a5:f4:2b:08:4d:60:23:74:02:8b:cc:3d:56:04:
                    f7:3d:0c:97:f9:c5:b3:f3:8f:06:23:20:78:87:9a:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:66:66:59:22:B8:4D:AF:C5:59:90:CD:B4:84:52:D7:C1:A3:95:E1
            X509v3 Authority Key Identifier:
                keyid:5E:05:E4:E5:82:95:6E:26:65:19:FB:8A:0A:97:F2:89:D6:85:25:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/XgXk5YKVbiZlGfuKCpfyidaFJdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XgXk5YKVbiZlGfuKCpfyidaFJdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/_WZmWSK4Ta_FWZDNtIRS18GjleE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4760::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:a6:ab:cd:40:50:77:62:ec:0c:e0:50:fb:1d:a6:b6:dc:
         7a:32:65:62:c7:7b:88:a5:95:74:95:af:e6:ca:ad:d4:31:fa:
         c0:ce:d4:96:2b:6b:bc:6e:1d:e2:02:0a:31:b1:de:88:40:27:
         be:6a:a6:46:66:ad:bc:d6:cf:a1:57:9a:59:d2:50:ce:ad:b9:
         e8:1a:f3:0b:ba:af:7e:46:e9:8a:11:62:4a:13:f4:6d:a3:67:
         04:b6:fe:76:fe:e5:92:aa:08:8e:75:ff:5e:de:7d:b9:8d:5d:
         7f:49:fb:69:e7:98:d8:24:8d:1e:2f:3a:33:d0:20:e4:f7:cf:
         f0:73:ef:bc:54:f4:c1:50:f5:68:3f:2d:11:11:99:0d:f0:06:
         eb:0a:79:db:9a:a8:94:88:f6:9d:c2:35:82:15:92:09:be:7b:
         4a:3f:54:47:1f:28:dc:7a:ba:9e:0b:bc:a5:39:84:a2:37:f2:
         02:34:22:1c:16:49:af:5e:74:67:8a:84:3a:95:15:32:96:14:
         d4:32:30:bc:86:07:28:52:03:84:22:00:5c:e7:be:f3:e5:c7:
         b0:85:c2:0f:84:08:ed:23:6a:92:01:15:50:34:fd:6d:8c:79:
         d9:9b:09:22:2f:ad:aa:61:5c:03:bb:6f:71:5f:3c:f4:40:eb:
         76:a6:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 17:15:18 2026 by rpki-client