This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/ZZl72tG6rvkWoc6L_Z_UcF1-rT4.roa
File:                     ZZl72tG6rvkWoc6L_Z_UcF1-rT4.roa (raw, json)
Hash identifier:          McDSpg/lYcabfcW/hL/aL0JlC0jEhjpAMvtMiWtVSdE=
Subject key identifier:   65:99:7B:DA:D1:BA:AE:F9:16:A1:CE:8B:FD:9F:D4:70:5D:7E:AD:3E
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0E92
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/ZZl72tG6rvkWoc6L_Z_UcF1-rT4.roa
Signing time:             Wed 26 Nov 2025 07:41:45 +0000
ROA not before:           Wed 26 Nov 2025 07:41:45 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4780
IP address blocks:        211.73.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 06:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3730 (0xe92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Nov 26 07:41:45 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=65997BDAD1BAAEF916A1CE8BFD9FD4705D7EAD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:6a:73:3c:c0:9e:61:5b:0f:33:a9:b2:cb:
                    da:ff:a8:8f:e1:b5:85:b3:ad:58:78:0c:40:16:62:
                    fb:0a:f4:bd:c0:d8:f0:34:21:7a:c2:7b:35:bc:60:
                    1d:4d:f2:e9:3f:f2:38:d3:9d:e6:82:5f:a5:b9:04:
                    8b:55:33:49:1b:f9:00:64:f8:00:09:cf:f1:46:24:
                    86:5c:1a:cb:c1:43:eb:4e:55:93:ed:54:f0:19:d3:
                    3d:2c:12:ad:5e:a1:d5:0e:52:9b:42:49:73:97:76:
                    c5:df:15:e8:30:a6:18:ff:8a:7a:ac:d6:f5:9d:6d:
                    bc:1f:87:a8:76:62:d2:ba:1b:9d:66:48:e8:55:24:
                    c6:d8:d4:9d:2f:22:3c:f0:8b:cd:f1:e2:8c:c8:61:
                    fe:d7:0b:31:2b:49:a0:65:23:b4:bd:7e:6e:8a:c8:
                    98:2a:71:ac:7e:91:2b:8e:12:8b:0d:a3:80:f4:c4:
                    93:f3:64:69:82:b0:90:ad:9b:70:06:42:58:83:ff:
                    f5:6f:60:1f:10:f7:e6:c1:7d:2c:87:69:11:1b:1d:
                    d0:a0:11:f6:b9:5d:f3:21:82:30:44:ff:10:bc:be:
                    45:57:d1:f2:9f:cf:20:6f:30:f5:49:1f:72:96:8b:
                    c1:e6:3d:be:f2:9f:95:a5:d8:ba:6a:38:cc:0b:a6:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:99:7B:DA:D1:BA:AE:F9:16:A1:CE:8B:FD:9F:D4:70:5D:7E:AD:3E
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/ZZl72tG6rvkWoc6L_Z_UcF1-rT4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.73.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:49:8f:e4:90:5e:bf:e9:9e:04:6b:89:59:70:04:41:e1:06:
         9b:73:de:e1:57:9d:56:b3:9e:2d:20:c2:7b:b5:ee:d7:4e:82:
         d9:44:51:0d:28:82:8a:15:02:84:60:44:88:fa:79:f8:79:f6:
         57:f3:44:a0:82:c7:34:40:77:f6:13:41:81:97:c0:19:fe:44:
         2b:c5:92:e2:fb:62:5a:da:c0:c3:ec:80:59:3e:00:36:aa:c6:
         25:ae:d7:3a:4a:dd:b0:62:37:8c:32:ec:a2:e9:f2:5a:88:61:
         bf:3e:64:91:87:74:bf:26:9f:b3:71:40:a0:7c:be:fb:26:3e:
         01:72:96:19:28:6d:6c:00:ef:c7:99:c2:4c:87:9b:91:b1:11:
         4f:0c:df:ed:f3:11:dc:6d:81:70:ce:9b:15:c5:08:8e:e8:36:
         a4:3b:5f:1f:56:65:2f:a4:3e:2c:b5:a6:e1:29:41:e4:c3:0b:
         79:34:af:53:c5:16:1a:f1:a1:c5:3f:cf:2c:6b:67:a7:53:f8:
         ab:c7:a0:d1:a6:f9:e9:25:49:5f:22:fe:18:2e:2e:73:43:8c:
         28:51:f8:3d:48:16:ba:95:31:2a:12:15:85:de:fd:55:40:95:
         a6:16:9d:f3:0d:c1:c3:a3:c1:6e:2f:d8:66:f0:46:ae:02:94:
         bd:90:ba:a1
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDpIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy
NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yNTExMjYw
NzQxNDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY1OTk3QkRBRDFCQUFF
RjkxNkExQ0U4QkZEOUZENDcwNUQ3RUFEM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNJmpzPMCeYVsPM6myy9r/qI/htYWzrVh4DEAWYvsK9L3A2PA0
IXrCezW8YB1N8uk/8jjTneaCX6W5BItVM0kb+QBk+AAJz/FGJIZcGsvBQ+tOVZPt
VPAZ0z0sEq1eodUOUptCSXOXdsXfFegwphj/inqs1vWdbbwfh6h2YtK6G51mSOhV
JMbY1J0vIjzwi83x4ozIYf7XCzErSaBlI7S9fm6KyJgqcax+kSuOEosNo4D0xJPz
ZGmCsJCtm3AGQliD//VvYB8Q9+bBfSyHaREbHdCgEfa5XfMhgjBE/xC8vkVX0fKf
zyBvMPVJH3KWi8HmPb7yn5Wl2LpqOMwLpoL9AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUZZl72tG6rvkWoc6L/Z/UcF1+rT4wHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo
SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80
Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvWlpsNzJ0RzZydmtXb2M2TF9aX1Vj
RjEtclQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNJoDAN
BgkqhkiG9w0BAQsFAAOCAQEAAkmP5JBev+meBGuJWXAEQeEGm3Pe4VedVrOeLSDC
e7Xu106C2URRDSiCihUChGBEiPp5+Hn2V/NEoILHNEB39hNBgZfAGf5EK8WS4vti
WtrAw+yAWT4ANqrGJa7XOkrdsGI3jDLsounyWohhvz5kkYd0vyafs3FAoHy++yY+
AXKWGShtbADvx5nCTIebkbERTwzf7fMR3G2BcM6bFcUIjug2pDtfH1ZlL6Q+LLWm
4SlB5MMLeTSvU8UWGvGhxT/PLGtnp1P4q8eg0ab56SVJXyL+GC4uc0OMKFH4PUgW
upUxKhIVhd79VUCVphad8w3Bw6PBbi/YZvBGrgKUvZC6oQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:28:29 2025 by rpki-client