This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFU/u84wlkhFgOTitW406poRdOPpFcE.roa
File:                     u84wlkhFgOTitW406poRdOPpFcE.roa (raw, json)
Hash identifier:          2jl5SAhS+9osGloX0C5gNDn9TUgoQ9FGtmtQnjHcon0=
Subject key identifier:   BB:CE:30:96:48:45:80:E4:E2:B5:6E:34:EA:9A:11:74:E3:E9:15:C1
Certificate issuer:       /CN=755748435F601F238562117ECF4335000C89E5F7
Certificate serial:       05
Authority key identifier: 75:57:48:43:5F:60:1F:23:85:62:11:7E:CF:43:35:00:0C:89:E5:F7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/u84wlkhFgOTitW406poRdOPpFcE.roa
Signing time:             Tue 04 Nov 2025 06:19:29 +0000
ROA not before:           Tue 04 Nov 2025 06:19:29 +0000
ROA not after:            Tue 01 Sep 2026 15:30:20 +0000
asID:                     9918
IP address blocks:        2402:26e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755748435F601F238562117ECF4335000C89E5F7
        Validity
            Not Before: Nov  4 06:19:29 2025 GMT
            Not After : Sep  1 15:30:20 2026 GMT
        Subject: CN=BBCE3096484580E4E2B56E34EA9A1174E3E915C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:70:c1:f2:83:c1:b6:32:e8:57:02:72:89:
                    6c:b6:d0:e7:58:be:5c:f1:b9:c7:95:75:96:e1:23:
                    39:77:e8:25:db:be:09:ee:64:88:8f:b6:72:d9:2d:
                    7b:a5:56:7d:33:70:85:a9:71:c3:57:ab:06:79:6e:
                    46:48:cd:2e:4a:02:19:7f:ec:8a:ef:2b:12:e3:33:
                    47:bd:70:dd:5d:99:87:b9:4c:72:39:09:3a:6b:80:
                    82:b3:f1:36:7b:43:36:8a:a5:be:bc:c4:15:6e:23:
                    9b:84:ed:ef:f3:bb:32:8a:df:e6:c7:5b:45:dc:0f:
                    2c:84:2c:52:84:f3:a4:ab:ce:52:7e:18:26:b7:60:
                    38:f9:0c:2a:8c:cb:70:67:85:20:b8:fe:e3:5e:88:
                    a0:9f:6d:75:70:92:07:1b:ee:a9:51:e2:82:5a:d4:
                    75:d4:de:61:70:25:6e:41:9d:70:6b:e3:6e:ea:35:
                    c3:62:70:d5:25:3a:fc:5d:d0:26:84:ed:94:79:3d:
                    a4:de:e9:dd:5e:de:45:78:33:a7:2e:aa:dc:ba:d8:
                    b7:37:77:80:9f:0b:41:7f:54:06:35:11:e3:fc:a5:
                    52:b4:60:15:1e:a0:7c:8f:5d:4d:dc:6c:d9:f0:77:
                    8a:ae:65:0e:5b:fc:df:c6:00:9f:d3:61:21:3e:ff:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CE:30:96:48:45:80:E4:E2:B5:6E:34:EA:9A:11:74:E3:E9:15:C1
            X509v3 Authority Key Identifier:
                keyid:75:57:48:43:5F:60:1F:23:85:62:11:7E:CF:43:35:00:0C:89:E5:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/u84wlkhFgOTitW406poRdOPpFcE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:26e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:86:db:44:62:f8:d4:2c:b7:8f:92:53:26:54:1d:85:39:14:
         21:10:e1:30:98:82:f9:35:0e:6f:2e:7b:ab:7a:9e:ab:bf:db:
         cb:05:95:28:49:bd:e2:95:b4:a2:e8:56:08:5d:64:dd:2f:12:
         ed:f4:bf:a1:55:12:f6:49:b1:5d:ce:38:e8:b5:c4:57:cd:4c:
         1c:cb:77:2c:e2:85:4c:20:02:99:66:7f:1e:59:44:ce:c9:73:
         97:b6:68:ea:80:72:a3:6c:40:f9:07:52:dd:a8:53:1c:cd:7b:
         33:f7:84:a8:4b:4c:2a:91:aa:3f:90:60:af:6b:9c:08:ed:ce:
         44:ea:9a:b7:dd:2a:1d:75:f4:75:e5:36:67:5e:6c:78:bc:a8:
         0b:76:0a:bc:5c:c1:a1:14:fc:98:95:f5:49:10:4a:df:d0:7b:
         f8:b2:95:0a:5d:b6:94:8f:a1:31:58:17:07:19:68:3e:99:cf:
         4b:70:a3:eb:a8:6c:90:e2:bc:7f:4f:5d:93:d3:c0:f9:51:81:
         38:31:c4:0f:15:e5:e3:b1:48:2e:65:d9:7e:ce:85:d9:3e:b4:
         f2:6f:ba:3b:ec:c3:db:19:04:93:ea:79:a8:81:7c:3a:03:d6:
         77:76:ae:48:d0:a2:1b:b7:3f:5e:73:2a:7b:6a:34:e3:0d:74:
         65:64:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:02:53 2025 by rpki-client