This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7qSCFn7SJvu4Eb4GKeQrexuy6GE.roa
File:                     7qSCFn7SJvu4Eb4GKeQrexuy6GE.roa (raw, json)
Hash identifier:          cnofh0NqgC+oECHgorKb5cNYF+oBWN4iS+TRzSyMtVQ=
Subject key identifier:   EE:A4:82:16:7E:D2:26:FB:B8:11:BE:06:29:E4:2B:7B:1B:B2:E8:61
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0EAC
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7qSCFn7SJvu4Eb4GKeQrexuy6GE.roa
Signing time:             Tue 02 Dec 2025 02:35:33 +0000
ROA not before:           Tue 02 Dec 2025 02:35:33 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131646
IP address blocks:        150.107.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 21:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3756 (0xeac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Dec  2 02:35:33 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EEA482167ED226FBB811BE0629E42B7B1BB2E861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:2e:24:67:6b:ec:64:61:7a:ad:4a:23:e2:
                    94:c2:9d:03:4b:35:ea:3f:a0:01:e1:24:9c:e6:b1:
                    fd:20:28:84:63:bf:ff:37:e2:1e:36:45:0a:d7:fc:
                    f7:f3:79:09:6f:cb:02:f5:c9:9a:72:f0:e7:1c:e6:
                    2f:b5:f6:48:39:d1:68:fd:67:09:a6:53:52:fc:25:
                    f7:22:38:fe:a0:ba:6f:aa:4d:55:01:9a:e6:b0:a8:
                    81:8a:8e:99:01:98:96:d5:12:91:5e:85:c8:13:02:
                    1e:4a:37:04:4f:d2:8d:e2:79:7e:52:a6:c7:e0:a6:
                    89:27:1e:40:76:d2:e7:40:13:c0:4a:9c:1d:96:a6:
                    06:5b:c7:bb:4b:ce:49:53:28:cd:08:f1:11:0a:85:
                    1a:65:4c:cd:93:68:91:cc:b4:fd:a3:42:ed:2d:58:
                    9e:d0:5a:9b:5e:31:d9:98:d6:b6:9e:71:64:24:ee:
                    57:eb:8c:f8:d5:17:3a:37:3c:cd:f8:0c:9a:e6:b8:
                    1d:53:c5:21:f1:e8:35:65:f2:9c:ed:c1:8c:e2:37:
                    77:09:13:77:07:b6:48:4a:64:02:22:a4:cd:56:2e:
                    7a:e5:41:96:c9:b9:8d:9e:34:5b:1c:7a:df:4c:d3:
                    02:de:d3:4f:fe:22:e9:11:9a:89:d4:33:85:1e:2c:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A4:82:16:7E:D2:26:FB:B8:11:BE:06:29:E4:2B:7B:1B:B2:E8:61
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7qSCFn7SJvu4Eb4GKeQrexuy6GE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:8b:2a:00:00:63:3c:0c:2b:6e:c8:d9:ba:2c:48:45:2c:
         c7:4a:b7:01:96:2e:d4:4c:44:fc:8d:23:43:4e:98:e0:70:85:
         9d:9f:58:de:c0:2f:a5:9f:be:bc:41:50:ee:63:53:5b:96:0c:
         74:ab:2c:a8:9d:2b:7a:29:de:28:4e:9d:7b:68:dc:ce:1a:3f:
         ed:ec:88:06:95:23:a8:5e:56:5e:44:23:11:50:d6:6f:6b:85:
         03:50:ce:f3:f8:8a:b0:44:50:11:46:23:2a:7a:c3:31:9c:e1:
         d7:ac:f7:ce:a3:b5:64:f5:12:ef:64:8a:47:f5:04:d3:2e:34:
         00:d0:05:9f:39:3a:c5:48:1f:85:93:73:af:86:6c:e3:a2:53:
         4e:c8:98:9d:a8:6d:06:73:ca:a1:de:da:ba:eb:33:1e:d8:bf:
         d2:60:50:8b:53:90:f0:ea:b3:60:b7:29:31:b6:be:7c:10:4d:
         5a:51:bc:f8:5d:87:3a:17:11:c3:3a:40:b6:f3:2a:7a:76:8a:
         f0:fd:1c:a5:e2:13:3b:01:89:b9:96:71:5b:5f:9d:1c:72:99:
         b0:fb:30:04:45:6a:90:da:fc:c4:14:47:b3:a6:f1:40:83:b8:
         92:a0:2a:5d:9e:96:e4:4e:97:8e:ca:2a:b7:91:0e:88:f2:07:
         d5:5f:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:01:28 2025 by rpki-client