This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/A29BWVB1SQkWBuHgcVn3iMFx6fM.roa
File:                     A29BWVB1SQkWBuHgcVn3iMFx6fM.roa (raw, json)
Hash identifier:          JoNf8t3wBbhrgcTUqf2TfyO8pCwzRI1chHcc21JgIZA=
Subject key identifier:   03:6F:41:59:50:75:49:09:16:06:E1:E0:71:59:F7:88:C1:71:E9:F3
Certificate issuer:       /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Certificate serial:       07DC
Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/A29BWVB1SQkWBuHgcVn3iMFx6fM.roa
Signing time:             Thu 06 Nov 2025 07:43:42 +0000
ROA not before:           Thu 06 Nov 2025 07:43:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9678
IP address blocks:        2406:3040::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
        Validity
            Not Before: Nov  6 07:43:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=036F4159507549091606E1E07159F788C171E9F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:a1:53:a3:b7:95:cb:3e:24:e9:ac:75:cb:
                    87:ec:0b:a9:8c:3e:0b:8d:d3:ab:af:1a:3d:f9:3e:
                    33:d2:a9:66:d2:7c:ad:02:eb:68:93:7f:3d:f0:c6:
                    73:03:59:51:c3:d9:86:62:69:75:b4:ad:bc:28:c3:
                    3c:ef:3d:1e:09:ec:38:a6:02:14:cf:f7:5b:f5:31:
                    38:2b:54:a5:ad:ea:50:f9:09:e8:1d:57:b5:e2:8f:
                    6d:29:c1:3a:04:a2:59:0d:74:83:83:c9:d7:49:b7:
                    12:ea:d3:b8:51:a0:34:12:b3:51:bc:c5:dd:21:89:
                    63:c0:1c:8e:97:cb:f2:13:18:36:d3:13:72:ed:45:
                    62:d5:80:5c:38:56:64:d3:81:98:72:5b:63:12:fc:
                    b6:3a:e6:03:1b:ee:59:3c:c0:d8:3b:2e:0a:f8:44:
                    20:23:b2:a6:a3:dc:4e:5c:14:64:f6:64:6a:b1:1a:
                    a0:94:e7:74:be:dc:f6:0d:20:7c:0b:0e:2e:d8:8a:
                    47:5d:95:33:8d:25:dc:b2:8a:0f:f1:b5:ed:7b:80:
                    94:a6:dd:d4:d5:d4:68:c1:d8:b9:15:6c:61:71:ef:
                    66:34:1a:b4:ef:2c:cc:ec:81:42:98:bd:b0:e0:e1:
                    db:69:6f:c2:3d:c6:b2:7f:44:f7:25:18:ad:89:b7:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6F:41:59:50:75:49:09:16:06:E1:E0:71:59:F7:88:C1:71:E9:F3
            X509v3 Authority Key Identifier:
                keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/A29BWVB1SQkWBuHgcVn3iMFx6fM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3040::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:80:27:46:5f:1a:df:28:39:10:19:da:5f:12:f7:4e:a0:7f:
         c2:ea:b0:e4:d9:61:ab:b7:ff:42:0b:b9:25:0d:6e:95:6e:c9:
         52:a3:b3:dd:5d:86:f4:f3:98:a4:96:56:f2:55:f2:cc:f0:81:
         b9:c6:d7:ec:59:49:bb:3a:01:59:2c:68:e9:e0:51:66:23:a3:
         b5:16:2b:c2:f5:6d:53:cb:86:f6:5f:95:be:be:7b:c3:ff:1f:
         c4:70:13:84:44:56:04:af:e1:77:da:45:80:ba:62:6b:24:64:
         0c:52:c4:0a:3a:58:e7:a8:e5:5b:ec:17:0c:70:fb:5b:c3:4d:
         28:f9:43:4f:5b:af:e2:7c:8e:08:4c:b7:dd:ce:9c:d2:d7:a3:
         84:ef:87:57:23:f1:9e:e3:22:ae:ae:c8:16:5d:af:9f:47:fc:
         ab:8c:d1:0a:a3:25:6d:3e:c0:eb:fb:7c:c7:13:b5:07:a0:b7:
         95:1a:bd:ec:40:6e:6c:ff:dc:31:2b:30:0c:7d:d7:5a:61:42:
         aa:30:ba:93:76:ad:de:88:37:7e:a6:dc:98:fe:f4:15:6d:68:
         a4:07:af:a8:be:7f:f9:cc:c8:77:59:b1:13:49:6f:16:8c:33:
         cd:6d:7c:22:4e:a5:87:2a:88:c0:51:46:e0:14:2d:24:07:36:
         c9:a2:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:52:00 2025 by rpki-client