This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEARNING36/Uv7FaPeOk1y-NjhmBBb7Vjd1BTQ.roa
File:                     Uv7FaPeOk1y-NjhmBBb7Vjd1BTQ.roa (raw, json)
Hash identifier:          8F+jT2wUUselY/jM4xcMV0Au6PDI/ZHADv/pa2+t+k0=
Subject key identifier:   52:FE:C5:68:F7:8E:93:5C:BE:36:38:66:04:16:FB:56:37:75:05:34
Certificate issuer:       /CN=B6121D691D99EB5586E2FB15484485A6287D6CF4
Certificate serial:       03
Authority key identifier: B6:12:1D:69:1D:99:EB:55:86:E2:FB:15:48:44:85:A6:28:7D:6C:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/thIdaR2Z61WG4vsVSESFpih9bPQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LEARNING36/Uv7FaPeOk1y-NjhmBBb7Vjd1BTQ.roa
Signing time:             Wed 24 Dec 2025 14:44:10 +0000
ROA not before:           Wed 24 Dec 2025 14:44:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24162
IP address blocks:        103.64.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LEARNING36/thIdaR2Z61WG4vsVSESFpih9bPQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LEARNING36/thIdaR2Z61WG4vsVSESFpih9bPQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/thIdaR2Z61WG4vsVSESFpih9bPQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6121D691D99EB5586E2FB15484485A6287D6CF4
        Validity
            Not Before: Dec 24 14:44:10 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=52FEC568F78E935CBE3638660416FB5637750534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:39:42:c4:f3:0d:f2:8e:66:03:ef:ed:21:d2:
                    d8:b6:95:f9:3e:16:9f:0b:50:22:c3:36:86:8c:45:
                    40:50:9f:27:66:69:15:d0:10:b7:63:cb:e5:f6:c4:
                    05:76:4b:94:62:bf:31:49:a0:da:af:a9:b3:06:fa:
                    cb:7f:c8:c3:9b:0a:6b:4e:4e:a1:54:25:80:a3:8e:
                    c7:7c:a5:45:da:f4:09:9c:0d:3f:d7:33:c0:e8:8b:
                    74:89:a2:5c:24:e8:bd:81:1e:21:96:da:0a:91:e5:
                    f2:8b:4a:39:48:f0:04:04:ae:24:7f:c4:1c:c9:0b:
                    97:06:d3:e8:1f:c5:d0:f6:b2:99:c5:d5:12:2d:0b:
                    95:2b:e4:a8:8e:3d:7e:17:ca:42:df:5a:a3:a1:85:
                    25:40:33:e9:7e:e2:8e:ca:a6:b6:f9:54:13:d8:02:
                    9f:93:03:a1:d9:c0:fb:fc:07:8e:ba:da:4c:84:4d:
                    9c:3c:e2:17:9e:08:b2:29:da:fb:40:3b:13:c6:b5:
                    cd:46:a8:48:9d:20:37:4f:60:a6:09:8d:3e:b7:86:
                    ce:a6:04:48:c6:7e:b5:ac:05:7a:3f:8c:31:a3:ea:
                    5e:ab:3b:ff:9c:c9:9c:c3:a5:c9:33:f2:44:01:b2:
                    eb:5a:d5:1a:cd:39:5d:79:c0:50:ad:2c:70:6d:27:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FE:C5:68:F7:8E:93:5C:BE:36:38:66:04:16:FB:56:37:75:05:34
            X509v3 Authority Key Identifier:
                keyid:B6:12:1D:69:1D:99:EB:55:86:E2:FB:15:48:44:85:A6:28:7D:6C:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEARNING36/thIdaR2Z61WG4vsVSESFpih9bPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/thIdaR2Z61WG4vsVSESFpih9bPQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEARNING36/Uv7FaPeOk1y-NjhmBBb7Vjd1BTQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:2c:f1:0d:40:92:94:9b:25:31:da:4a:92:9b:7a:c9:18:
         67:6d:b7:8d:76:f4:b6:7a:8d:2c:9a:1d:94:b7:1a:b9:e3:6c:
         af:1b:92:1a:50:36:93:95:4b:6e:c5:45:03:ca:eb:3b:d1:5e:
         ff:cd:62:00:cd:cb:06:7b:b1:6e:1d:12:87:df:c3:c1:eb:4a:
         0e:1f:c4:fa:d2:95:86:23:00:54:41:49:86:31:e8:79:e9:b8:
         21:29:44:2a:fe:b3:bd:76:00:f4:e2:dc:39:b5:03:4b:44:95:
         72:97:9b:ab:9a:b5:dd:29:f4:ee:30:da:f7:86:db:40:d0:b8:
         02:66:d4:1f:2e:15:dc:b6:5d:93:d1:18:75:a9:f8:0d:17:68:
         6a:61:c8:cf:d2:7d:63:bd:14:1e:66:41:1b:89:d8:4e:a7:85:
         6c:4b:a9:91:94:6f:39:70:14:bc:2c:2f:c8:aa:5d:98:aa:04:
         11:3d:88:fb:52:b7:bf:a3:0b:b2:a3:64:18:db:17:13:ce:32:
         c4:4d:07:1a:81:97:01:eb:04:fd:0b:38:f5:ce:e1:2e:91:80:
         6b:c4:5b:ac:a2:46:6b:df:38:7f:46:83:92:04:f9:af:ae:3f:
         79:0a:53:21:d9:e0:68:7e:e2:02:50:da:32:af:f0:c7:2b:f2:
         cc:cd:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 00:10:50 2025 by rpki-client