This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/lyobHqGY6P75FVwHYtQuDucTYVo.roa
File:                     lyobHqGY6P75FVwHYtQuDucTYVo.roa (raw, json)
Hash identifier:          SVr8dPxAbbUXPNfK8i/eBM/MQjRF9l7rmP6s4Zj9eBA=
Subject key identifier:   97:2A:1B:1E:A1:98:E8:FE:F9:15:5C:07:62:D4:2E:0E:E7:13:61:5A
Certificate issuer:       /CN=CF120C7C8C76D3F4353B0C6D75EEF37EF3983693
Certificate serial:       0127
Authority key identifier: CF:12:0C:7C:8C:76:D3:F4:35:3B:0C:6D:75:EE:F3:7E:F3:98:36:93
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zxIMfIx20_Q1Owxtde7zfvOYNpM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/lyobHqGY6P75FVwHYtQuDucTYVo.roa
Signing time:             Fri 23 Jan 2026 15:46:22 +0000
ROA not before:           Fri 23 Jan 2026 15:46:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152622
IP address blocks:        163.61.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/zxIMfIx20_Q1Owxtde7zfvOYNpM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/zxIMfIx20_Q1Owxtde7zfvOYNpM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/zxIMfIx20_Q1Owxtde7zfvOYNpM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF120C7C8C76D3F4353B0C6D75EEF37EF3983693
        Validity
            Not Before: Jan 23 15:46:22 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=972A1B1EA198E8FEF9155C0762D42E0EE713615A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:15:88:65:b2:00:90:3a:0f:4f:fa:cb:34:85:
                    ac:5c:a7:fe:08:3c:f8:11:96:f3:64:08:ec:11:98:
                    ff:42:e4:f4:5e:ae:b9:3b:3b:0d:38:1f:cc:18:e7:
                    50:a2:82:63:95:97:15:54:f2:84:f8:06:b2:4b:46:
                    81:ef:6d:b3:62:e9:e8:f3:ea:56:c6:0d:0e:ee:dc:
                    33:57:5a:d0:00:68:61:64:12:17:ad:5a:4d:c2:5a:
                    ef:20:4d:e4:eb:9e:90:32:8c:e0:7c:4e:f3:cb:53:
                    b8:9a:4f:b3:ec:11:90:1f:30:a8:76:50:4b:25:1e:
                    56:7f:a2:2e:4d:d5:47:57:22:10:aa:02:c5:24:9d:
                    69:bb:8a:d9:e4:ab:75:6c:d4:3f:e8:aa:b1:02:a6:
                    35:90:d9:26:27:1f:55:1b:0f:44:0f:1d:aa:27:af:
                    a3:50:35:35:62:a8:73:f0:6d:ce:96:1f:05:2c:6e:
                    43:22:62:c1:7f:4a:94:2d:96:ef:a6:cd:e9:f3:8b:
                    dc:d4:5a:8e:24:4a:d5:e2:a6:99:43:cb:e0:b8:d7:
                    e9:bd:ab:4c:29:e7:6e:c3:a8:00:f5:c2:a3:ae:93:
                    e5:27:2c:b7:98:1a:4f:4f:39:94:fd:21:ad:a0:c6:
                    5e:63:3d:0a:ba:2d:bb:b1:66:dc:37:78:66:2a:f3:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2A:1B:1E:A1:98:E8:FE:F9:15:5C:07:62:D4:2E:0E:E7:13:61:5A
            X509v3 Authority Key Identifier:
                keyid:CF:12:0C:7C:8C:76:D3:F4:35:3B:0C:6D:75:EE:F3:7E:F3:98:36:93

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/zxIMfIx20_Q1Owxtde7zfvOYNpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zxIMfIx20_Q1Owxtde7zfvOYNpM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POWERHOUSE/lyobHqGY6P75FVwHYtQuDucTYVo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:c3:23:a9:89:b9:60:36:03:9f:17:68:8b:6d:d7:a2:e8:c5:
         40:4e:75:9d:c8:53:7d:1b:39:37:f7:bb:89:8f:eb:01:6b:58:
         65:94:c5:6d:75:af:17:51:00:6d:23:ff:9f:7e:f3:f6:fe:78:
         e8:c2:f4:1b:ab:2c:cb:db:56:05:27:b0:50:c9:52:d3:f6:a2:
         77:98:45:d3:25:3f:a4:00:51:29:be:f0:72:6f:b2:b7:7b:44:
         46:f5:7e:2d:82:00:56:5b:4d:7b:de:f8:fe:d0:9c:87:01:1f:
         e5:e4:74:bd:c1:35:4e:a6:0c:06:27:42:5f:83:9b:3f:12:8d:
         cf:ee:85:9b:13:91:12:99:1c:4a:2c:42:ba:99:11:52:8a:01:
         89:18:dc:d3:7f:10:2e:65:38:ea:a5:00:34:b9:f3:d0:55:06:
         b8:d4:8a:8e:f4:2e:f6:83:76:34:48:0b:8c:93:15:78:b0:0b:
         00:57:9c:96:41:0f:dc:06:6a:bd:2e:fc:b2:dc:e0:f7:c3:52:
         33:c5:83:fc:3e:aa:c6:71:58:f6:a2:1d:b1:a2:46:4a:b5:43:
         76:38:f9:00:c5:d8:7c:d2:a7:ba:c4:49:da:4d:e2:0e:f6:13:
         14:94:cc:80:55:ff:28:b2:25:7f:cc:3c:f6:b1:fd:c9:1c:4c:
         c3:f8:d8:99
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICAScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Yx
MjBDN0M4Qzc2RDNGNDM1M0IwQzZENzVFRUYzN0VGMzk4MzY5MzAeFw0yNjAxMjMx
NTQ2MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3MkExQjFFQTE5OEU4
RkVGOTE1NUMwNzYyRDQyRTBFRTcxMzYxNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYFYhlsgCQOg9P+ss0haxcp/4IPPgRlvNkCOwRmP9C5PRerrk7
Ow04H8wY51CigmOVlxVU8oT4BrJLRoHvbbNi6ejz6lbGDQ7u3DNXWtAAaGFkEhet
Wk3CWu8gTeTrnpAyjOB8TvPLU7iaT7PsEZAfMKh2UEslHlZ/oi5N1UdXIhCqAsUk
nWm7itnkq3Vs1D/oqrECpjWQ2SYnH1UbD0QPHaonr6NQNTViqHPwbc6WHwUsbkMi
YsF/SpQtlu+mzenzi9zUWo4kStXipplDy+C41+m9q0wp527DqAD1wqOuk+UnLLeY
Gk9POZT9Ia2gxl5jPQq6LbuxZtw3eGYq88/3AgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUlyobHqGY6P75FVwHYtQuDucTYVowHwYDVR0jBBgwFoAUzxIMfIx20/Q1Owxt
de7zfvOYNpMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE9XRVJI
T1VTRS96eElNZkl4MjBfUTFPd3h0ZGU3emZ2T1lOcE0uY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL3p4SU1mSXgyMF9RMU93eHRkZTd6ZnZPWU5wTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BPV0VSSE9VU0UvbHlvYkhxR1k2
UDc1RlZ3SFl0UXVEdWNUWVZvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAaM9PDANBgkqhkiG9w0BAQsFAAOCAQEAa8MjqYm5YDYDnxdoi23XoujF
QE51nchTfRs5N/e7iY/rAWtYZZTFbXWvF1EAbSP/n37z9v546ML0G6ssy9tWBSew
UMlS0/aid5hF0yU/pABRKb7wcm+yt3tERvV+LYIAVltNe974/tCchwEf5eR0vcE1
TqYMBidCX4ObPxKNz+6FmxOREpkcSixCupkRUooBiRjc038QLmU46qUANLnz0FUG
uNSKjvQu9oN2NEgLjJMVeLALAFeclkEP3AZqvS78stzg98NSM8WD/D6qxnFY9qId
saJGSrVDdjj5AMXYfNKnusRJ2k3iDvYTFJTMgFX/KLIlf8w89rH9yRxMw/jYmQ==
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:54 2026 by rpki-client