This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/lj6DsilVinvpnvvZUxejuA78C_A.roa
File:                     lj6DsilVinvpnvvZUxejuA78C_A.roa (raw, json)
Hash identifier:          LjwB/DtkQZoPwU8SEFcd7nl8GoskZuUkWg4ABzzUwM0=
Subject key identifier:   96:3E:83:B2:29:55:8A:7B:E9:9E:FB:D9:53:17:A3:B8:0E:FC:0B:F0
Certificate issuer:       /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC
Certificate serial:       0A18
Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/lj6DsilVinvpnvvZUxejuA78C_A.roa
Signing time:             Thu 06 Nov 2025 07:40:43 +0000
ROA not before:           Thu 06 Nov 2025 07:40:43 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9678
IP address blocks:        2405:fbc0:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 15:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584 (0xa18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC
        Validity
            Not Before: Nov  6 07:40:43 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=963E83B229558A7BE99EFBD95317A3B80EFC0BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:41:d3:b1:44:53:5b:2c:14:fc:76:97:db:
                    44:f6:2e:1d:fd:2a:8e:ba:6b:24:e3:b5:46:fa:c0:
                    b9:0b:25:ec:5f:b3:ba:19:90:d3:ec:77:cb:d9:82:
                    bd:6b:df:2c:c0:45:6f:4d:f3:19:6f:63:7d:f0:1f:
                    43:e3:ea:4c:4f:fb:3e:b5:9d:bc:79:e6:5c:28:28:
                    a4:63:45:d8:5d:37:0b:77:5b:f3:a1:3e:57:f3:89:
                    d0:97:5f:52:a4:11:e9:39:40:cc:fd:07:d8:05:6c:
                    6e:98:a6:11:bc:0b:ae:0d:82:7e:d9:49:dd:24:c7:
                    cf:7c:ff:26:9f:8a:5f:ac:e6:86:82:cf:ee:b4:db:
                    3e:94:ff:a6:30:2f:ff:de:d6:83:b5:8f:13:d7:49:
                    a5:a8:2b:51:83:2f:07:ed:49:2c:e4:dd:dc:27:19:
                    ed:9e:28:9a:ff:2d:47:80:a6:01:e6:d1:13:fb:39:
                    bd:54:5b:f7:2f:aa:75:75:a5:ef:a9:3c:d5:7f:86:
                    f3:ac:2f:7c:a8:2c:3f:94:62:ea:69:cf:f8:b5:cf:
                    54:19:bb:45:f4:0b:68:2f:2c:7d:96:f6:b4:97:b1:
                    2b:d6:e7:a2:92:ad:e0:c0:8f:b3:15:59:b6:65:ad:
                    c4:50:ad:26:d4:81:74:98:08:02:f5:67:8a:b1:9b:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3E:83:B2:29:55:8A:7B:E9:9E:FB:D9:53:17:A3:B8:0E:FC:0B:F0
            X509v3 Authority Key Identifier:
                keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/lj6DsilVinvpnvvZUxejuA78C_A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:fbc0:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:db:72:22:9f:0d:c4:fb:79:fc:a2:d1:f4:f4:04:0c:ea:ba:
         6f:a0:da:2e:80:11:3e:59:8e:7c:0d:a7:5c:da:f9:82:09:e5:
         0f:4f:2d:58:07:df:61:3c:92:5e:44:cf:d2:79:72:1d:3a:9f:
         2c:1f:3a:ea:f3:3d:97:b7:4e:9e:45:be:96:de:65:35:19:1a:
         65:44:67:4b:89:0e:d8:62:6e:f3:ed:ca:c5:c8:32:e8:af:ea:
         70:fc:d4:c0:a6:69:4d:37:67:ff:c5:19:c8:f5:2b:11:4c:c3:
         0c:05:27:be:ac:8b:d4:54:50:c5:f3:cd:7f:96:3f:e6:92:3d:
         84:47:c3:6d:3f:81:8c:e7:20:6f:5d:5f:ec:cc:8e:34:c2:f3:
         cd:0f:ad:52:08:27:4c:c1:5b:09:f0:68:c4:bc:a4:99:88:9f:
         bc:98:f3:73:fd:39:4a:38:76:87:fc:ee:c9:64:68:50:39:45:
         ca:e1:48:3d:99:86:20:f0:30:4a:80:e2:69:a7:99:a1:af:14:
         8a:30:1e:f5:78:c0:4b:74:28:7b:8c:66:8f:d1:53:21:f8:50:
         bc:63:f0:4a:63:1f:cb:54:6a:82:ae:f6:10:46:23:4e:25:3c:
         5b:f5:c0:bf:48:e5:32:85:66:37:27:6b:cb:0d:0e:f7:ba:9d:
         56:0b:8c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:02:53 2025 by rpki-client