This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/Nz-X8rR7Phcap4SiInP5wET3C3c.roa
File:                     Nz-X8rR7Phcap4SiInP5wET3C3c.roa (raw, json)
Hash identifier:          YbGHDs96xLfvMmG5LaEkGYi22GhQO8pYdk4DOlpnQSE=
Subject key identifier:   37:3F:97:F2:B4:7B:3E:17:1A:A7:84:A2:22:73:F9:C0:44:F7:0B:77
Certificate issuer:       /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial:       09D7
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/Nz-X8rR7Phcap4SiInP5wET3C3c.roa
Signing time:             Mon 08 Dec 2025 12:33:17 +0000
ROA not before:           Mon 08 Dec 2025 12:33:17 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     7536
IP address blocks:        103.148.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2519 (0x9d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
        Validity
            Not Before: Dec  8 12:33:17 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=373F97F2B47B3E171AA784A22273F9C044F70B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:fe:20:61:23:ba:ed:03:48:18:e4:24:f0:
                    02:d8:c8:15:0a:b6:7d:91:34:87:0b:e7:24:c8:34:
                    41:df:04:13:25:4d:b3:47:e0:38:62:a7:58:37:7b:
                    b6:ef:25:55:7d:40:bc:ae:18:0e:a5:8e:28:bb:ae:
                    ca:1a:c9:1f:84:8a:06:78:3d:f5:f7:27:24:c9:5b:
                    a1:4b:4f:80:f5:d8:e4:14:98:bf:8f:aa:48:ca:d0:
                    e9:f5:17:5d:2b:1f:a3:c1:7c:90:8d:6e:f4:1f:db:
                    c8:8c:f9:36:05:17:7a:61:69:2f:f1:d7:42:1f:44:
                    9d:b1:2d:19:20:c7:e4:d1:d7:5d:8b:6a:57:3c:b3:
                    59:5c:6a:e0:7c:99:f8:99:2b:95:e2:50:c0:da:08:
                    9e:a1:6b:eb:8c:54:ba:29:74:34:f0:cb:8e:98:8d:
                    b0:5e:21:8b:2d:98:96:02:98:62:63:6c:03:04:36:
                    01:80:31:05:bb:da:07:1a:d7:65:dc:e3:85:0e:be:
                    c5:38:f9:1b:04:a3:d4:c5:0a:34:5d:1f:37:64:3d:
                    b2:c7:bd:ee:72:3f:59:42:84:03:da:66:4a:5a:3a:
                    1c:9a:54:3d:29:79:2d:1a:78:85:22:aa:b8:58:ac:
                    9f:df:92:29:37:9d:27:c9:1b:0b:30:76:de:0f:d4:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3F:97:F2:B4:7B:3E:17:1A:A7:84:A2:22:73:F9:C0:44:F7:0B:77
            X509v3 Authority Key Identifier:
                keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/Nz-X8rR7Phcap4SiInP5wET3C3c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:f0:d7:fd:12:8e:de:e2:3d:fd:aa:e5:8e:5a:6c:f4:39:
         03:8f:bf:87:a4:fd:84:e2:8c:53:f5:cd:d9:bf:6a:d5:7b:97:
         9e:85:86:8e:6b:6e:c8:1a:67:26:95:65:05:9f:1e:87:b4:dc:
         6e:56:d3:59:7a:b9:af:e8:35:3e:8a:3c:a2:89:94:5c:a6:45:
         19:76:cc:51:e8:bc:bc:ad:54:da:9a:ec:f5:bf:64:7b:2f:ec:
         46:70:9c:d9:6d:11:ff:70:43:08:1a:48:56:e4:fe:09:33:e2:
         ac:36:26:b6:a6:e2:0f:23:1a:1f:ac:ab:57:97:35:de:f0:de:
         3c:a4:da:d6:38:ed:99:22:92:3c:c9:9c:5e:c6:5c:7f:e5:9b:
         67:bf:ea:49:9c:fb:63:b9:50:04:08:4b:43:b7:43:1c:df:36:
         8c:85:7c:20:d8:fa:7e:5f:fa:44:00:3b:50:d3:e2:18:c9:f7:
         86:26:af:09:9a:5e:e4:98:01:f0:52:35:51:17:8b:60:5a:e3:
         71:54:1b:97:76:23:b4:49:48:7a:05:be:19:77:67:1a:1e:ee:
         ea:d1:c7:e1:d2:89:c8:12:51:ae:e5:4b:42:3c:ed:88:f2:dd:
         ff:13:84:1e:a6:4d:e0:54:60:98:e4:28:a4:a6:75:ea:13:8d:
         a7:be:fd:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 12 02:41:37 2025 by rpki-client