This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKIS/vixE28HHC9_Wm54LS2HP-rRwKPM.roa
File:                     vixE28HHC9_Wm54LS2HP-rRwKPM.roa (raw, json)
Hash identifier:          ISaCtQQzGfOy8tre3ptxBv4UTwyq38O3gDN/sWE6YJg=
Subject key identifier:   BE:2C:44:DB:C1:C7:0B:DF:D6:9B:9E:0B:4B:61:CF:FA:B4:70:28:F3
Certificate issuer:       /CN=6FECAE846F41BCC3B24E1327BA21C23053E11C03
Certificate serial:       01EB
Authority key identifier: 6F:EC:AE:84:6F:41:BC:C3:B2:4E:13:27:BA:21:C2:30:53:E1:1C:03
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b-yuhG9BvMOyThMnuiHCMFPhHAM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/vixE28HHC9_Wm54LS2HP-rRwKPM.roa
Signing time:             Fri 26 Dec 2025 15:40:11 +0000
ROA not before:           Fri 26 Dec 2025 15:40:11 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131645
IP address blocks:        161.248.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/b-yuhG9BvMOyThMnuiHCMFPhHAM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/b-yuhG9BvMOyThMnuiHCMFPhHAM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/b-yuhG9BvMOyThMnuiHCMFPhHAM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FECAE846F41BCC3B24E1327BA21C23053E11C03
        Validity
            Not Before: Dec 26 15:40:11 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BE2C44DBC1C70BDFD69B9E0B4B61CFFAB47028F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:f7:52:96:2d:ba:e1:d8:7a:4e:15:2d:d2:
                    41:28:c2:bf:ee:b2:69:e9:8b:cd:c2:95:cc:b6:b9:
                    2d:04:2d:5d:42:22:48:2e:94:8c:46:2c:6e:55:18:
                    4a:46:82:e8:07:69:5d:77:77:c9:b5:18:95:d4:46:
                    90:14:7e:91:6f:ec:6f:c2:40:42:7c:de:30:6f:21:
                    ae:69:ac:f1:0a:cc:46:ed:a5:10:c2:1b:65:8c:f2:
                    84:39:59:8c:af:75:f2:5e:8f:1b:e7:40:0b:50:59:
                    26:1f:9b:7c:a6:3c:4b:ab:67:91:98:d0:fd:eb:a5:
                    e5:44:e3:60:d7:6e:23:ba:49:c6:67:c0:62:4b:f5:
                    d4:44:4f:4b:9d:4b:83:c4:94:d7:d5:8f:a2:82:2f:
                    e7:82:d7:3b:a7:a8:63:27:a8:e0:4d:33:d6:11:e5:
                    14:ff:61:54:f1:a8:41:6d:bd:98:9e:b3:22:39:24:
                    9f:a1:35:52:c6:dc:5d:e4:54:c9:57:ce:b5:34:fa:
                    ed:41:b6:00:73:0f:b8:3a:f9:94:ca:41:f6:fc:f6:
                    37:d8:e5:d4:14:a9:28:fe:ae:31:e5:de:09:80:a7:
                    e5:e0:7c:bf:1d:09:1b:b5:a9:ab:d8:3d:b9:08:66:
                    5e:48:62:ce:64:03:5a:56:87:2d:de:10:f0:ff:3c:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2C:44:DB:C1:C7:0B:DF:D6:9B:9E:0B:4B:61:CF:FA:B4:70:28:F3
            X509v3 Authority Key Identifier:
                keyid:6F:EC:AE:84:6F:41:BC:C3:B2:4E:13:27:BA:21:C2:30:53:E1:1C:03

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/b-yuhG9BvMOyThMnuiHCMFPhHAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b-yuhG9BvMOyThMnuiHCMFPhHAM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/vixE28HHC9_Wm54LS2HP-rRwKPM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:ad:9a:41:2d:de:cd:be:ed:15:ef:e6:73:86:6a:a9:1e:
         d2:e6:a3:52:cf:23:9a:24:c7:58:44:89:b9:f2:83:14:d3:c1:
         de:7d:0f:51:d4:bf:d2:34:11:bd:71:2a:2d:9d:d8:88:bf:b0:
         e4:15:9d:63:67:78:23:44:7b:d9:3f:72:5b:1a:68:bb:18:77:
         b7:de:8a:b2:73:63:b5:71:8c:04:40:0d:59:66:5b:02:0c:4c:
         bd:37:34:29:bf:74:19:78:5a:d4:a4:83:23:98:0c:d5:c9:37:
         4c:3d:81:1c:a4:19:24:6e:8b:93:0c:67:cd:7d:9b:ad:b6:34:
         fe:15:06:06:13:2a:4f:d0:ec:89:8d:4c:0b:ed:0e:d8:8a:2a:
         bc:32:69:7a:07:b5:02:ab:72:fa:a4:e5:97:81:53:6f:f6:b2:
         4c:ad:7c:d4:7f:ec:39:00:4f:bd:3b:55:c6:5a:ac:36:40:13:
         bf:90:96:5d:13:ca:39:c7:d8:d9:87:97:07:e8:a1:79:d8:41:
         74:f7:5d:c1:6a:29:c0:9b:4e:02:dc:06:2b:07:ea:83:40:b7:
         01:4f:2c:8d:47:21:43:1a:fa:66:f8:99:82:61:b4:03:63:b2:
         cc:96:04:28:14:f3:c4:53:5d:11:46:fc:6d:c7:fd:6a:a8:70:
         fe:f4:27:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 21:04:24 2026 by rpki-client