This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/QISDA/tleogG11tZeAKoJaZuZOSKoFsYg.roa
File:                     tleogG11tZeAKoJaZuZOSKoFsYg.roa (raw, json)
Hash identifier:          BsGt7TKmBzrHyYQSe6AaDBAP8Y/hVgQHw80/S2nQk5E=
Subject key identifier:   B6:57:A8:80:6D:75:B5:97:80:2A:82:5A:66:E6:4E:48:AA:05:B1:88
Certificate issuer:       /CN=F8BA56B2687D1EADEB2FA40D1ABCE9641E741D5F
Certificate serial:       06
Authority key identifier: F8:BA:56:B2:68:7D:1E:AD:EB:2F:A4:0D:1A:BC:E9:64:1E:74:1D:5F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-LpWsmh9Hq3rL6QNGrzpZB50HV8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/tleogG11tZeAKoJaZuZOSKoFsYg.roa
Signing time:             Wed 31 Dec 2025 01:30:38 +0000
ROA not before:           Wed 31 Dec 2025 01:30:38 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131681
IP address blocks:        165.99.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/-LpWsmh9Hq3rL6QNGrzpZB50HV8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/-LpWsmh9Hq3rL6QNGrzpZB50HV8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-LpWsmh9Hq3rL6QNGrzpZB50HV8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8BA56B2687D1EADEB2FA40D1ABCE9641E741D5F
        Validity
            Not Before: Dec 31 01:30:38 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B657A8806D75B597802A825A66E64E48AA05B188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:70:2b:c8:ef:d0:58:42:3e:48:45:08:45:
                    b9:d1:cf:38:dc:3b:65:e4:26:f1:ab:61:40:0d:31:
                    1d:7c:8f:fd:59:a3:a1:04:97:e6:f7:1a:d2:29:8b:
                    ea:e6:91:25:a8:57:60:c3:ba:69:0c:01:9e:db:3a:
                    8e:ad:a4:2a:e5:5b:8c:e4:80:a9:75:42:d6:22:83:
                    32:cd:f8:f2:a5:41:ed:77:3a:cb:b2:4b:7a:09:e4:
                    eb:92:86:f9:d2:6b:9b:16:b3:31:c9:d9:ff:71:02:
                    02:ed:39:b7:a0:08:be:e4:0f:0c:34:c6:bd:be:14:
                    a3:3f:43:62:8b:eb:10:b4:73:1f:76:22:95:26:c4:
                    e1:14:a4:6e:03:ea:46:90:b1:9b:d6:8f:1d:61:d6:
                    d6:77:82:74:e0:52:ca:6d:25:2a:26:d5:c7:36:81:
                    d7:57:78:24:9b:e3:d4:f7:5d:af:5a:be:dd:22:2f:
                    5e:d2:ed:5f:5b:15:21:e0:90:82:0e:ad:6b:75:8d:
                    74:a5:b2:82:b8:86:65:a1:d9:de:67:6b:60:c8:61:
                    55:cd:f0:15:42:dc:b3:dd:e8:cd:c5:21:3b:69:eb:
                    7a:c2:08:ab:d4:5e:33:34:33:1f:70:3a:c6:85:06:
                    97:f4:6e:d5:6a:1b:0e:9c:bd:57:36:de:08:64:09:
                    2a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:57:A8:80:6D:75:B5:97:80:2A:82:5A:66:E6:4E:48:AA:05:B1:88
            X509v3 Authority Key Identifier:
                keyid:F8:BA:56:B2:68:7D:1E:AD:EB:2F:A4:0D:1A:BC:E9:64:1E:74:1D:5F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/-LpWsmh9Hq3rL6QNGrzpZB50HV8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-LpWsmh9Hq3rL6QNGrzpZB50HV8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/tleogG11tZeAKoJaZuZOSKoFsYg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:0e:d0:41:65:5e:94:6e:f7:ed:54:39:cb:79:2b:34:c2:e7:
         4a:26:36:f6:02:3f:11:19:12:fa:81:8c:88:b0:7c:ee:21:e1:
         53:03:18:a9:8c:c2:42:30:cc:2d:05:a7:e9:cd:3e:20:2e:80:
         1b:6c:7f:ab:b4:d7:12:f1:f1:4f:e8:e0:fa:8b:be:68:45:fb:
         64:40:3d:9d:1f:65:43:43:33:0b:65:3f:44:5a:e7:59:c9:59:
         da:0a:aa:c8:1b:72:4e:48:41:8b:b3:94:42:99:f6:19:36:7b:
         b8:cd:a9:d7:86:e9:59:44:92:e3:4a:6a:b9:12:da:a6:a1:b7:
         fc:f6:22:7c:c4:de:95:d8:d9:da:fc:09:80:40:25:5b:5e:66:
         18:ea:37:fd:6b:6d:a5:31:6c:d5:55:d9:aa:ef:66:5f:65:ea:
         be:49:d4:de:35:89:33:e4:a3:34:1d:a1:88:20:86:ef:a4:16:
         9a:a0:9e:a0:5c:cd:67:82:75:f0:3b:b1:4f:0a:fc:3d:81:5c:
         62:84:0e:06:d0:b1:d3:5b:cf:f3:f5:83:b7:1f:6e:2f:39:d0:
         93:b2:23:fe:e0:27:59:82:0e:b7:80:ca:59:00:47:0b:e1:32:
         e5:a0:1d:f6:e1:ab:14:83:4f:5d:62:e4:7b:07:29:1f:2e:fe:
         2e:18:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 21:04:25 2026 by rpki-client