This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/xSweBL287xDBlhHZMlo1Z1OR9LE.roa
File:                     xSweBL287xDBlhHZMlo1Z1OR9LE.roa (raw, json)
Hash identifier:          vhiXD69WXE7tMSXHnc0MO+IWvPvH/UbjObRKjUt/o2s=
Subject key identifier:   C5:2C:1E:04:BD:BC:EF:10:C1:96:11:D9:32:5A:35:67:53:91:F4:B1
Certificate issuer:       /CN=18133C9A82B6428B8BE77F62804D22E218A45745
Certificate serial:       0262
Authority key identifier: 18:13:3C:9A:82:B6:42:8B:8B:E7:7F:62:80:4D:22:E2:18:A4:57:45
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GBM8moK2QouL539igE0i4hikV0U.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/xSweBL287xDBlhHZMlo1Z1OR9LE.roa
Signing time:             Thu 13 Nov 2025 15:30:23 +0000
ROA not before:           Thu 13 Nov 2025 15:30:23 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17413
IP address blocks:        160.250.98.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18133C9A82B6428B8BE77F62804D22E218A45745
        Validity
            Not Before: Nov 13 15:30:23 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C52C1E04BDBCEF10C19611D9325A35675391F4B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:72:03:19:62:58:e2:ea:20:91:b7:ff:73:
                    7c:1c:f2:b0:c9:47:76:d0:0d:91:52:20:00:0b:6b:
                    65:1b:92:88:74:7e:01:ca:4e:44:02:d8:a8:a7:ac:
                    01:32:24:94:7d:5f:b0:45:61:2f:e4:0c:99:a0:81:
                    c2:ed:01:70:82:bf:ef:42:31:5d:02:33:e0:b3:2e:
                    a5:9a:ae:2c:ae:ce:d3:fc:6c:4e:fe:27:a7:68:b3:
                    c6:e8:91:16:ca:d6:aa:10:ae:70:af:9c:ff:c7:de:
                    ba:91:63:2c:83:49:25:95:4e:ef:26:84:e0:e2:dd:
                    50:c3:b0:4d:55:ab:0f:16:2f:9a:31:35:cb:57:44:
                    36:aa:23:55:d1:28:81:40:5b:04:f3:09:b5:6b:7c:
                    0d:1f:95:57:e4:c8:a6:d8:2e:44:27:ae:0c:63:5c:
                    7f:1f:71:68:e4:34:ce:8d:4d:89:d8:5b:16:14:91:
                    b2:ab:e4:38:c0:43:90:0e:e1:07:db:1c:2d:6d:1b:
                    dc:78:63:60:e8:76:8e:c6:35:5e:e8:d2:6f:6e:d2:
                    f0:5a:3d:5a:3f:ef:54:60:e6:2b:ba:d9:6b:6e:3b:
                    97:c4:18:a6:ca:84:8e:a5:b8:3b:46:60:74:5e:0c:
                    93:34:ed:4e:a7:db:bd:21:ec:b6:76:9a:17:3f:df:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2C:1E:04:BD:BC:EF:10:C1:96:11:D9:32:5A:35:67:53:91:F4:B1
            X509v3 Authority Key Identifier:
                keyid:18:13:3C:9A:82:B6:42:8B:8B:E7:7F:62:80:4D:22:E2:18:A4:57:45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/GBM8moK2QouL539igE0i4hikV0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GBM8moK2QouL539igE0i4hikV0U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DODOLTD/xSweBL287xDBlhHZMlo1Z1OR9LE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:4a:31:d1:fa:d7:f5:9c:20:76:04:50:f7:07:0d:07:a6:b7:
         7c:77:98:e1:fe:8e:1a:5a:f5:6b:80:85:e3:d2:ac:e1:de:71:
         57:d3:aa:84:4f:ac:52:92:0a:23:0a:73:13:3c:29:7d:ea:da:
         dc:30:62:11:e6:d9:4d:af:9f:86:6a:b5:f0:f3:1f:a9:56:5d:
         df:a6:cf:b2:1a:30:00:c6:9c:bb:35:81:9b:61:14:32:ca:d4:
         8f:cc:f6:53:6e:db:ce:ed:91:9f:51:91:0c:21:7b:76:d4:4a:
         7b:98:91:bd:62:8f:b7:4f:4a:1d:98:0f:5e:d1:a3:c8:30:af:
         97:55:08:44:17:c2:79:c5:2e:48:6d:5b:ab:88:71:df:39:c7:
         c4:cc:18:fa:59:21:21:a0:4b:6e:14:75:da:f2:d0:0f:a0:0b:
         30:08:5f:11:5d:39:9a:cc:ce:78:bb:85:70:77:74:d3:0f:2d:
         40:70:df:9b:c3:26:4d:c2:68:90:d8:db:73:2a:c8:50:7e:52:
         7c:fc:c6:6b:85:ab:3b:3d:8f:ba:fb:96:e3:ba:93:db:ce:c4:
         ba:3d:8d:16:5e:51:56:cf:31:8f:e0:a1:8c:48:fd:44:67:40:
         94:f5:de:fe:c5:39:6d:aa:3a:0c:f6:4d:b7:e4:cf:5a:fd:e3:
         fa:f4:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:26:50 2025 by rpki-client