This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CWTW/G6wTmEBDf6QYets461CvrRO6i5U.roa
File:                     G6wTmEBDf6QYets461CvrRO6i5U.roa (raw, json)
Hash identifier:          +LpBQ1honX2WPMlICVDcX6s+ZkGHodEH+hzwRzypngk=
Subject key identifier:   1B:AC:13:98:40:43:7F:A4:18:7A:DB:38:EB:50:AF:AD:13:BA:8B:95
Certificate issuer:       /CN=996D67023ED27754ACB1B568433D4376C88200F5
Certificate serial:       0524
Authority key identifier: 99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/G6wTmEBDf6QYets461CvrRO6i5U.roa
Signing time:             Fri 09 Jan 2026 03:34:04 +0000
ROA not before:           Fri 09 Jan 2026 03:34:04 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     142061
IP address blocks:        103.161.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 14:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996D67023ED27754ACB1B568433D4376C88200F5
        Validity
            Not Before: Jan  9 03:34:04 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1BAC139840437FA4187ADB38EB50AFAD13BA8B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:7e:4e:2a:74:f4:ad:bb:af:63:c6:96:40:
                    5c:3e:ce:2f:1e:29:62:cf:50:a3:43:8e:f0:fb:1b:
                    94:6c:a7:da:35:94:49:7e:21:9a:03:ec:f9:91:5c:
                    7e:75:33:aa:f9:05:54:90:1f:2d:43:4c:aa:5d:ac:
                    3a:87:e4:1c:43:c2:14:c3:1d:d0:ed:bc:1b:df:ce:
                    6e:33:ff:86:c2:67:69:71:2c:0e:7a:24:1c:56:68:
                    b4:1b:c6:00:c1:16:2c:5e:ba:e8:08:84:09:74:f8:
                    c7:b7:56:c8:95:81:0a:55:7f:97:a9:44:3d:cf:00:
                    fd:03:15:ae:e5:33:10:a4:cd:2a:e2:37:b9:d0:92:
                    d6:a7:5f:85:06:fd:d2:04:78:ea:96:50:b4:58:f9:
                    b8:df:98:aa:be:3b:7e:35:08:70:d7:e8:ed:9b:02:
                    cc:29:25:04:b3:dc:8c:af:e7:ba:ca:fa:26:d0:98:
                    71:e5:21:56:50:40:83:60:78:ed:91:4e:71:22:07:
                    25:85:e8:46:4c:8c:68:d4:38:60:7b:e3:59:9c:61:
                    16:06:fb:7f:4f:52:b5:ff:c2:16:6f:cd:e1:26:b0:
                    a6:a5:ab:27:6f:95:b9:21:4c:d9:5a:b4:60:e9:44:
                    ae:fb:a2:cf:1a:72:80:71:58:d0:93:a4:8a:be:18:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AC:13:98:40:43:7F:A4:18:7A:DB:38:EB:50:AF:AD:13:BA:8B:95
            X509v3 Authority Key Identifier:
                keyid:99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/G6wTmEBDf6QYets461CvrRO6i5U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:da:24:be:53:6d:fb:d0:07:b0:ca:e5:88:8f:ef:3e:b4:
         98:32:8a:88:33:58:31:e0:77:bd:44:b0:78:7f:a8:6a:57:03:
         69:4e:22:67:a8:81:ab:8e:90:ae:60:8b:c5:50:dd:ed:57:ca:
         f0:ca:e5:04:29:a1:58:5d:fb:35:e7:29:e7:5d:30:21:e6:82:
         9a:ef:fb:f5:0d:63:38:cd:d1:0a:4d:19:c6:49:4f:46:2a:fd:
         37:a3:e3:80:99:c7:85:0d:38:f7:35:f6:e6:85:c1:47:fa:dc:
         8d:79:1b:33:7e:af:49:74:02:88:68:0d:0a:c3:08:44:c6:ae:
         a0:84:35:2d:6d:3a:0f:48:f5:0c:fc:2b:9d:f3:ce:21:e9:e9:
         ba:84:64:30:43:5a:c1:7d:e5:cc:c6:93:49:27:b9:0e:13:4d:
         fc:93:8c:ef:13:39:cd:0e:c4:18:e1:9f:47:1a:6a:64:e2:14:
         c3:a8:2e:58:ce:42:25:31:da:0e:d0:f8:c2:ee:e8:ac:ca:00:
         99:a1:ef:7b:1a:c6:7c:94:69:f3:7e:79:2a:2d:ef:9b:c1:07:
         80:45:a6:c4:0d:7b:d7:af:54:f1:57:08:5f:f6:c3:5c:11:b0:
         8e:7c:39:03:b5:ff:e5:88:26:31:89:66:aa:c2:dc:39:d0:83:
         70:69:07:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 12:27:03 2026 by rpki-client