This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BHIS/n07SyCGhHMZ9y40r6-pcLgBb5EU.roa
File:                     n07SyCGhHMZ9y40r6-pcLgBb5EU.roa (raw, json)
Hash identifier:          zPSyV3XJYeuPR2jkyXhOuQIF5Kfjog8CqErNU7Pgg/c=
Subject key identifier:   9F:4E:D2:C8:21:A1:1C:C6:7D:CB:8D:2B:EB:EA:5C:2E:00:5B:E4:45
Certificate issuer:       /CN=D7DABD61413DD84D34305BFA98F398462269FDBB
Certificate serial:       03
Authority key identifier: D7:DA:BD:61:41:3D:D8:4D:34:30:5B:FA:98:F3:98:46:22:69:FD:BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/19q9YUE92E00MFv6mPOYRiJp_bs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/n07SyCGhHMZ9y40r6-pcLgBb5EU.roa
Signing time:             Tue 20 Jan 2026 01:01:58 +0000
ROA not before:           Tue 20 Jan 2026 01:01:58 +0000
ROA not after:            Tue 12 Jan 2027 15:30:19 +0000
asID:                     152616
IP address blocks:        151.158.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/19q9YUE92E00MFv6mPOYRiJp_bs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7DABD61413DD84D34305BFA98F398462269FDBB
        Validity
            Not Before: Jan 20 01:01:58 2026 GMT
            Not After : Jan 12 15:30:19 2027 GMT
        Subject: CN=9F4ED2C821A11CC67DCB8D2BEBEA5C2E005BE445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:64:34:a8:2d:4a:c5:4d:f6:9d:4d:e5:b5:
                    e5:53:89:16:b0:ec:7c:77:a4:02:e5:20:8d:f0:5e:
                    93:e7:69:db:6b:fa:ea:43:d7:33:ae:44:37:ad:47:
                    7d:a2:b2:c6:20:fc:f8:57:b4:ce:81:eb:c5:9e:57:
                    fa:3a:09:3b:94:8d:63:0d:a8:a1:58:22:32:bf:13:
                    db:fe:25:c1:0b:65:89:9d:28:37:e4:2b:f4:fd:c2:
                    ee:84:bd:2f:8a:83:82:d6:2e:f8:0f:aa:4b:f7:69:
                    d2:f3:ec:fc:b0:dc:12:b5:07:0e:70:3d:dd:77:1d:
                    0d:0e:d2:2f:33:10:c3:15:1e:41:ca:0e:13:f1:ca:
                    dc:62:cb:22:b4:eb:78:bf:c0:d5:1b:39:eb:df:db:
                    74:de:eb:8c:d9:50:e5:0a:d3:39:90:92:19:68:a5:
                    88:b8:40:63:bc:6f:09:dc:5f:79:2c:d7:f7:ce:71:
                    55:db:20:d3:d3:9b:35:ed:8e:92:9c:c7:cb:11:3a:
                    3f:59:de:86:58:35:68:04:08:23:7c:41:53:b7:22:
                    34:01:af:50:88:3a:7c:58:e4:6d:64:df:57:de:dc:
                    29:10:66:67:5c:0a:9d:79:34:1f:ad:f2:9f:b5:4f:
                    d6:a1:51:29:29:84:86:03:ca:65:bd:35:e7:ff:86:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4E:D2:C8:21:A1:1C:C6:7D:CB:8D:2B:EB:EA:5C:2E:00:5B:E4:45
            X509v3 Authority Key Identifier:
                keyid:D7:DA:BD:61:41:3D:D8:4D:34:30:5B:FA:98:F3:98:46:22:69:FD:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/19q9YUE92E00MFv6mPOYRiJp_bs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/n07SyCGhHMZ9y40r6-pcLgBb5EU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:59:08:7c:44:de:50:3d:b6:0f:03:14:6d:43:dd:83:e6:2e:
         67:64:cc:4c:cb:7e:71:fa:84:da:3d:05:f5:4e:44:59:df:ba:
         47:9c:2e:9b:e3:26:d6:72:69:32:68:3b:f9:5a:01:e1:b7:f8:
         ab:df:96:63:d3:b6:66:ec:e8:f6:d9:b2:dc:21:92:7d:73:d9:
         0f:50:b3:30:48:7c:4f:66:18:c2:cb:b8:69:20:14:ff:3f:dc:
         b0:d7:a6:2f:1c:b9:78:43:10:6a:1f:1d:42:24:15:27:9d:a7:
         7d:82:f4:09:df:3d:20:1c:88:39:32:00:a2:21:cf:ca:b4:ce:
         37:f2:93:31:39:95:8c:3f:c7:37:6f:9f:3a:88:2e:b3:52:67:
         92:62:d6:17:b9:bc:c4:b4:da:60:cf:7a:62:7c:bb:f1:e7:8e:
         37:ed:ec:81:57:bf:e1:4c:59:e0:a6:72:6c:03:59:ab:03:b6:
         ff:8e:3a:4c:b1:c4:26:4e:72:6b:db:92:39:f2:5b:67:be:38:
         b8:81:db:64:cd:72:99:e6:ae:86:1b:ba:52:f0:f9:5b:e4:0f:
         b2:4e:59:56:88:ed:e6:f9:44:1d:ed:4e:0a:4c:1a:a5:59:38:
         a6:73:41:a0:53:78:93:5b:3b:d2:fc:de:a1:8d:e1:d8:73:de:
         19:8a:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:17:55 2026 by rpki-client