This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/m5ujHyJTb5O-0_KuO5n4cwDP7fM.roa
File:                     m5ujHyJTb5O-0_KuO5n4cwDP7fM.roa (raw, json)
Hash identifier:          lCYHImXXGM7H15knCuGW8+trMfcGbhHQaSf3x8ukTsM=
Subject key identifier:   9B:9B:A3:1F:22:53:6F:93:BE:D3:F2:AE:3B:99:F8:73:00:CF:ED:F3
Certificate issuer:       /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC
Certificate serial:       0A1E
Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/m5ujHyJTb5O-0_KuO5n4cwDP7fM.roa
Signing time:             Thu 06 Nov 2025 07:42:15 +0000
ROA not before:           Thu 06 Nov 2025 07:42:15 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9678
IP address blocks:        211.76.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 15:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2590 (0xa1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC
        Validity
            Not Before: Nov  6 07:42:15 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9B9BA31F22536F93BED3F2AE3B99F87300CFEDF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:91:40:db:b6:08:c2:27:55:e1:10:40:83:
                    a8:81:09:0d:c2:79:2c:49:ed:c3:34:b6:c2:cb:db:
                    83:0b:87:3d:b5:49:da:59:44:33:c2:17:d4:34:ac:
                    00:3b:33:66:38:7a:61:ba:1e:4d:08:be:23:d8:a8:
                    61:0f:bb:30:f0:eb:d1:af:98:b8:fc:cd:32:4b:d0:
                    2e:81:73:f2:bc:d2:8e:38:33:b6:86:a3:8b:77:b3:
                    87:20:88:02:58:6a:28:ef:8b:b5:eb:1f:16:4b:d0:
                    50:2a:53:55:d4:c9:91:ab:a9:e1:ca:84:fb:ab:2a:
                    7a:c3:00:34:b0:44:f5:34:b8:de:50:49:21:b2:5a:
                    81:ef:55:83:e4:92:a9:77:59:0f:5c:c0:80:8e:93:
                    68:c0:f0:26:0c:de:61:78:e2:53:97:d8:39:c7:67:
                    8c:92:00:59:66:d4:c1:7f:e0:41:eb:dd:f7:d1:5e:
                    95:4a:db:a1:d3:a4:24:ef:1d:bf:72:77:e2:45:a1:
                    60:54:70:b6:48:cf:0e:d7:6f:ec:64:82:c6:f9:c3:
                    72:84:58:4f:32:42:4c:66:19:64:f5:e8:a5:c2:8c:
                    79:ec:73:6c:b6:63:44:e9:fa:cd:22:b1:5f:4b:6e:
                    22:58:6f:12:d3:81:9c:29:15:c6:9f:e4:70:f1:fe:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9B:A3:1F:22:53:6F:93:BE:D3:F2:AE:3B:99:F8:73:00:CF:ED:F3
            X509v3 Authority Key Identifier:
                keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/m5ujHyJTb5O-0_KuO5n4cwDP7fM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:bc:3f:51:30:85:c4:1d:74:16:1e:0e:e8:d9:98:4f:48:68:
         0e:8e:3d:04:1a:10:7c:5a:a2:f1:dc:b8:22:31:88:fe:be:95:
         22:3a:ea:4c:3f:dd:99:5d:90:f9:9e:21:a7:d3:e6:4b:15:79:
         72:f9:a6:d2:bf:c1:f9:24:57:45:57:df:ca:c0:b2:dc:ad:05:
         1c:fc:e1:63:6e:20:fd:e7:65:d7:f7:82:c9:45:fe:11:a7:d9:
         71:ef:34:4b:6b:92:41:4a:87:54:f2:a1:20:b0:f8:ed:38:ca:
         00:8f:03:af:ff:ae:cb:22:93:1f:e2:d0:b2:0a:40:2f:c2:9f:
         55:40:cb:a0:dc:da:f1:36:43:07:6a:69:50:ce:4e:5f:83:65:
         d1:a5:51:dc:f7:d2:64:26:b3:c7:3a:78:f5:2d:7b:1c:81:5a:
         f3:81:c9:9e:02:f7:05:ae:e5:5d:89:6f:48:61:8c:c5:7e:7b:
         0a:93:b7:c0:b8:9f:8d:2d:55:dc:b4:0b:a1:27:e1:10:85:28:
         a7:24:c8:ee:db:7c:5b:b1:78:35:94:6a:9d:39:12:c1:0d:ac:
         c8:e4:fa:0b:9d:40:81:ca:2a:f5:60:4f:f4:58:ea:ed:54:38:
         5e:12:5b:31:02:39:c8:53:1c:13:0e:90:b4:4e:50:b9:63:a3:
         04:5e:9c:57
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0FE
NTI3MDIyQzhDRDA3NTY4RUM5RkM4MkExQ0UwRERFNUIyQzRBQzAeFw0yNTExMDYw
NzQyMTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlCOUJBMzFGMjI1MzZG
OTNCRUQzRjJBRTNCOTlGODczMDBDRkVERjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDPJFA27YIwidV4RBAg6iBCQ3CeSxJ7cM0tsLL24MLhz21SdpZ
RDPCF9Q0rAA7M2Y4emG6Hk0IviPYqGEPuzDw69GvmLj8zTJL0C6Bc/K80o44M7aG
o4t3s4cgiAJYaijvi7XrHxZL0FAqU1XUyZGrqeHKhPurKnrDADSwRPU0uN5QSSGy
WoHvVYPkkql3WQ9cwICOk2jA8CYM3mF44lOX2DnHZ4ySAFlm1MF/4EHr3ffRXpVK
26HTpCTvHb9yd+JFoWBUcLZIzw7Xb+xkgsb5w3KEWE8yQkxmGWT16KXCjHnsc2y2
Y0Tp+s0isV9LbiJYbxLTgZwpFcaf5HDx/n29AgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUm5ujHyJTb5O+0/KuO5n4cwDP7fMwHwYDVR0jBBgwFoAUytUnAiyM0HVo7J/I
Khzg3eWyxKwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdCRVNU
V0FSRS95dFVuQWl5TTBIVm83Sl9JS2h6ZzNlV3l4S3cuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL3l0VW5BaXlNMEhWbzdKX0lLaHpnM2VXeXhLdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RXQkVTVFdBUkUvbTV1akh5SlRi
NU8tMF9LdU81bjRjd0RQN2ZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEANNMtzANBgkqhkiG9w0BAQsFAAOCAQEAR7w/UTCFxB10Fh4O6NmYT0ho
Do49BBoQfFqi8dy4IjGI/r6VIjrqTD/dmV2Q+Z4hp9PmSxV5cvmm0r/B+SRXRVff
ysCy3K0FHPzhY24g/edl1/eCyUX+EafZce80S2uSQUqHVPKhILD47TjKAI8Dr/+u
yyKTH+LQsgpAL8KfVUDLoNza8TZDB2ppUM5OX4Nl0aVR3PfSZCazxzp49S17HIFa
84HJngL3Ba7lXYlvSGGMxX57CpO3wLifjS1V3LQLoSfhEIUopyTI7tt8W7F4NZRq
nTkSwQ2syOT6C51Agcoq9WBP9Fjq7VQ4XhJbMQI5yFMcEw6QtE5QuWOjBF6cVw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:29:42 2025 by rpki-client