This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATVISP/QYcVCKzKEhbmWwAsmwnNPKj8d7g.roa
File:                     QYcVCKzKEhbmWwAsmwnNPKj8d7g.roa (raw, json)
Hash identifier:          RbsMBRJvSmDv4Dmnjb2y8vLReG2a6XDPwuGs65jsfJE=
Subject key identifier:   41:87:15:08:AC:CA:12:16:E6:5B:00:2C:9B:09:CD:3C:A8:FC:77:B8
Certificate issuer:       /CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
Certificate serial:       0D87
Authority key identifier: BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/QYcVCKzKEhbmWwAsmwnNPKj8d7g.roa
Signing time:             Fri 02 Jan 2026 07:23:20 +0000
ROA not before:           Fri 02 Jan 2026 07:23:20 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131673
IP address blocks:        43.248.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 09:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3463 (0xd87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
        Validity
            Not Before: Jan  2 07:23:20 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=41871508ACCA1216E65B002C9B09CD3CA8FC77B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:d0:e8:04:98:04:8e:61:33:46:02:7d:54:
                    92:5a:4d:72:94:f8:a8:87:9d:83:7b:70:25:bc:e9:
                    49:10:f2:0e:f0:84:d5:ec:d5:48:5b:da:8e:1e:e7:
                    18:34:88:26:d3:d2:91:e9:e1:46:83:88:fa:53:5c:
                    7c:66:ed:63:c8:6d:f7:71:8a:cf:b2:86:cc:57:47:
                    28:85:86:d1:22:7a:31:83:62:d1:23:08:40:70:43:
                    f9:db:93:04:cf:89:7a:05:60:3b:b3:bb:58:c5:d3:
                    4d:8d:10:73:45:84:92:0c:e7:0f:fd:da:2b:2f:d0:
                    db:24:bf:4c:73:15:59:5c:b2:53:ac:45:49:ac:6a:
                    6d:99:b1:13:76:3a:17:b0:b6:92:ab:64:a1:ec:8b:
                    3e:52:e5:0b:6c:ac:63:9a:e0:f6:35:2c:8a:94:98:
                    c6:76:26:93:26:98:1a:19:cd:b1:16:b1:87:98:25:
                    75:2e:af:9a:67:52:0c:86:f8:42:4c:07:20:71:1c:
                    fd:31:ba:3c:93:b4:66:a3:01:fa:95:d9:63:e1:3c:
                    69:3f:fb:19:f0:dd:26:b2:1a:5f:13:c0:16:c0:72:
                    14:9e:8c:c4:c8:9c:9d:74:41:d1:06:55:00:b2:0b:
                    2b:2d:f8:ad:d8:06:35:f3:58:db:38:4b:96:12:9a:
                    d4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:87:15:08:AC:CA:12:16:E6:5B:00:2C:9B:09:CD:3C:A8:FC:77:B8
            X509v3 Authority Key Identifier:
                keyid:BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/QYcVCKzKEhbmWwAsmwnNPKj8d7g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:d9:0b:b7:b8:49:70:78:6a:8c:f5:21:34:85:ad:d9:69:09:
         19:1d:40:c5:68:74:9d:63:24:5b:32:74:c6:c8:ab:fa:07:46:
         ea:9d:e9:34:31:84:e5:a6:e0:7b:ea:f0:9b:39:b9:b5:66:73:
         70:fa:b9:6a:e6:aa:4b:5c:4f:fb:63:20:14:7d:89:07:a3:f7:
         57:bc:29:c2:18:1c:50:e1:84:ed:a9:e5:55:06:c8:0f:69:67:
         ba:a8:d6:36:e6:24:d4:b5:70:7d:8a:f1:47:a2:4a:2b:c5:46:
         04:98:12:24:d3:8c:30:43:42:b0:3e:c6:80:4e:10:de:36:21:
         fa:be:1c:f2:32:33:8e:69:32:92:88:fc:2d:19:3e:36:9e:f2:
         96:95:7e:25:8a:85:06:5d:ab:77:ad:2b:c2:a2:e3:69:40:c8:
         ea:f2:d0:94:88:21:40:d7:e2:fd:87:79:64:31:e2:c0:d7:a1:
         05:c2:c1:24:c0:d2:9b:62:a6:f2:12:51:df:f8:3d:65:31:8e:
         10:c8:67:f5:d2:3e:4b:14:66:da:5f:4c:cf:0e:78:b5:b5:40:
         d9:e6:53:ee:1d:02:9d:3c:aa:09:45:b3:34:cb:5e:76:9d:75:
         ae:a1:e1:ba:30:78:a6:24:5c:30:30:f5:c4:8e:48:cc:4d:00:
         0a:e7:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 06:16:08 2026 by rpki-client