This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/Jr6hLf1uARQUXqg0p_84wNdcDaI.roa
File:                     Jr6hLf1uARQUXqg0p_84wNdcDaI.roa (raw, json)
Hash identifier:          aQEOkdWNRcmIk1WOwxmGSOZGkgi+4HTb3fRaprfVyIg=
Subject key identifier:   26:BE:A1:2D:FD:6E:01:14:14:5E:A8:34:A7:FF:38:C0:D7:5C:0D:A2
Certificate issuer:       /CN=F38A5E6BF643B818BE3CAE1432E632BB1D1763FA
Certificate serial:       0261
Authority key identifier: F3:8A:5E:6B:F6:43:B8:18:BE:3C:AE:14:32:E6:32:BB:1D:17:63:FA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/84pea_ZDuBi-PK4UMuYyux0XY_o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/Jr6hLf1uARQUXqg0p_84wNdcDaI.roa
Signing time:             Thu 13 Nov 2025 15:30:23 +0000
ROA not before:           Thu 13 Nov 2025 15:30:23 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17413
IP address blocks:        2401:dae0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/84pea_ZDuBi-PK4UMuYyux0XY_o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/84pea_ZDuBi-PK4UMuYyux0XY_o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/84pea_ZDuBi-PK4UMuYyux0XY_o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 10:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38A5E6BF643B818BE3CAE1432E632BB1D1763FA
        Validity
            Not Before: Nov 13 15:30:23 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=26BEA12DFD6E0114145EA834A7FF38C0D75C0DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:b7:32:65:50:13:b0:b3:41:86:d8:66:7f:
                    e2:93:aa:f8:5d:7d:32:0a:9a:32:20:22:2c:c2:75:
                    c8:cb:a0:19:37:2f:96:a3:ba:a2:d6:a3:b4:07:aa:
                    7c:94:d3:6b:0d:d8:78:68:1e:ca:2b:58:b7:5f:6b:
                    33:7f:f3:82:00:33:b1:88:b8:5e:55:dd:28:f4:70:
                    f9:fd:df:bc:ee:7d:92:31:bf:1f:07:ac:e0:82:05:
                    f1:e0:7f:49:76:c4:c9:45:97:e9:70:1b:16:24:4b:
                    28:ae:d4:8e:f7:f4:41:15:fa:03:ea:aa:08:62:17:
                    e2:78:db:b7:a5:42:c3:db:3d:a3:74:f6:1a:51:e8:
                    04:79:1b:7c:ab:71:29:82:f4:77:79:dd:01:2c:1f:
                    5e:cf:0a:3a:d4:37:85:1c:3b:8d:9f:dc:51:16:a2:
                    7c:fc:b4:ee:94:f1:ea:47:6f:5b:6c:fc:e8:af:b3:
                    df:50:d1:36:de:12:34:6d:12:58:9c:e3:54:0f:1c:
                    50:ec:e2:f8:0f:77:54:c9:be:2b:43:5f:fb:0d:ae:
                    c7:11:8a:de:74:cd:21:e3:2a:37:8e:1e:66:d3:df:
                    64:b4:f5:df:cd:75:0a:bf:e0:8c:0c:c4:d7:97:41:
                    24:96:67:bb:79:55:ee:5a:4f:ad:2d:a5:96:55:11:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BE:A1:2D:FD:6E:01:14:14:5E:A8:34:A7:FF:38:C0:D7:5C:0D:A2
            X509v3 Authority Key Identifier:
                keyid:F3:8A:5E:6B:F6:43:B8:18:BE:3C:AE:14:32:E6:32:BB:1D:17:63:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/84pea_ZDuBi-PK4UMuYyux0XY_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/84pea_ZDuBi-PK4UMuYyux0XY_o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/Jr6hLf1uARQUXqg0p_84wNdcDaI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:dae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:aa:ef:a7:6a:b4:b9:cb:d8:8c:a3:5c:d7:bf:f2:8b:1c:56:
         24:27:90:59:ed:54:2d:0d:b0:92:0e:ec:22:94:90:54:88:1f:
         e6:1e:e7:58:66:c2:03:26:e9:ee:6e:12:78:15:65:bf:4f:14:
         ad:f3:ab:3b:91:5c:2d:7c:ad:84:19:72:98:0e:b1:0e:64:c6:
         b3:f2:0c:3b:24:c6:5f:76:b1:37:62:7e:90:9a:f3:a2:34:41:
         95:70:21:88:83:dc:f0:ba:95:90:3f:f0:00:b2:86:20:7d:b0:
         f0:3b:d6:51:17:6c:13:17:69:7d:43:7c:93:a0:c7:de:d2:19:
         9a:5a:42:f6:6c:8b:4b:3a:4f:a5:fa:7c:d7:88:b6:11:04:a5:
         a7:ed:e2:c4:96:2f:be:7d:e2:99:ac:b4:2e:a8:04:d4:f8:23:
         2d:03:35:41:21:89:a5:be:da:4c:51:8a:4e:0d:62:e9:03:0d:
         dd:c3:02:01:b4:4a:57:8b:72:4f:52:72:96:c9:aa:cb:87:67:
         22:5e:d5:30:1f:e1:84:3b:e1:b1:98:c9:b7:69:51:5f:b7:50:
         29:a9:5b:79:2e:00:b2:ce:cd:0f:c3:e6:2f:38:b3:22:0a:38:
         fb:8f:b8:63:f9:79:08:3f:8a:60:4e:70:81:f0:a4:30:93:fe:
         fa:12:d3:15
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjM4
QTVFNkJGNjQzQjgxOEJFM0NBRTE0MzJFNjMyQkIxRDE3NjNGQTAeFw0yNTExMTMx
NTMwMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI2QkVBMTJERkQ2RTAx
MTQxNDVFQTgzNEE3RkYzOEMwRDc1QzBEQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6RrcyZVATsLNBhthmf+KTqvhdfTIKmjIgIizCdcjLoBk3L5aj
uqLWo7QHqnyU02sN2HhoHsorWLdfazN/84IAM7GIuF5V3Sj0cPn937zufZIxvx8H
rOCCBfHgf0l2xMlFl+lwGxYkSyiu1I739EEV+gPqqghiF+J427elQsPbPaN09hpR
6AR5G3yrcSmC9Hd53QEsH17PCjrUN4UcO42f3FEWonz8tO6U8epHb1ts/Oivs99Q
0TbeEjRtElic41QPHFDs4vgPd1TJvitDX/sNrscRit50zSHjKjeOHmbT32S09d/N
dQq/4IwMxNeXQSSWZ7t5Ve5aT60tpZZVEZrxAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUJr6hLf1uARQUXqg0p/84wNdcDaIwHwYDVR0jBBgwFoAU84pea/ZDuBi+PK4U
MuYyux0XY/owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9ET0xU
RC84NHBlYV9aRHVCaS1QSzRVTXVZeXV4MFhZX28uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBLzg0cGVhX1pEdUJpLVBLNFVNdVl5dXgwWFlfby5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RPRE9MVEQvSnI2aExmMXVBUlFVWHFn
MHBfODR3TmRjRGFJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQB2uAwDQYJKoZIhvcNAQELBQADggEBAF6q76dqtLnL2IyjXNe/8oscViQnkFnt
VC0NsJIO7CKUkFSIH+Ye51hmwgMm6e5uEngVZb9PFK3zqzuRXC18rYQZcpgOsQ5k
xrPyDDskxl92sTdifpCa86I0QZVwIYiD3PC6lZA/8ACyhiB9sPA71lEXbBMXaX1D
fJOgx97SGZpaQvZsi0s6T6X6fNeIthEEpaft4sSWL7594pmstC6oBNT4Iy0DNUEh
iaW+2kxRik4NYukDDd3DAgG0SleLck9ScpbJqsuHZyJe1TAf4YQ74bGYybdpUV+3
UCmpW3kuALLOzQ/D5i84syIKOPuPuGP5eQg/imBOcIHwpDCT/voS0xU=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:30:06 2025 by rpki-client