This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/qvVlSwa4xDYUtf5F4G1xoCiqDY8.roa
File:                     qvVlSwa4xDYUtf5F4G1xoCiqDY8.roa (raw, json)
Hash identifier:          qwtcJxoEAhviXVE3jbaQ/qlDKpsqfZ5xX3jxo/crZTY=
Subject key identifier:   AA:F5:65:4B:06:B8:C4:36:14:B5:FE:45:E0:6D:71:A0:28:AA:0D:8F
Certificate issuer:       /CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Certificate serial:       0D7E
Authority key identifier: 33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/qvVlSwa4xDYUtf5F4G1xoCiqDY8.roa
Signing time:             Fri 02 Jan 2026 06:55:09 +0000
ROA not before:           Fri 02 Jan 2026 06:55:09 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131673
IP address blocks:        103.16.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 05:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3454 (0xd7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
        Validity
            Not Before: Jan  2 06:55:09 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AAF5654B06B8C43614B5FE45E06D71A028AA0D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:90:4c:92:08:ee:78:a3:42:23:82:dd:d5:
                    4d:51:5e:85:da:c0:0e:54:22:45:85:66:52:ea:d7:
                    b1:08:52:58:ac:ee:d7:8d:52:4f:d2:7b:5b:19:f3:
                    ba:d6:d8:ff:cd:d4:e7:a1:1a:7a:23:6f:5c:94:ab:
                    ac:8f:3b:35:b0:6d:3c:c4:65:2f:f7:e1:ae:23:7f:
                    84:6a:0c:02:6c:b9:65:b3:b9:a3:2f:f1:65:62:bc:
                    77:f7:9f:50:b2:c7:23:b6:e6:8c:40:01:27:66:bf:
                    c9:cf:24:df:d2:34:e8:71:32:cf:13:27:1b:bc:db:
                    55:49:39:26:99:7e:ac:36:94:e9:73:e9:d1:d0:bb:
                    f7:bc:96:15:c6:80:a8:23:1c:c9:1c:c8:75:3d:45:
                    72:81:58:27:7e:97:a2:8f:fb:81:da:36:e7:e9:01:
                    5a:a9:f5:22:9d:bb:0b:c6:1b:ce:a5:93:0d:b2:2d:
                    6a:a9:52:79:3d:72:b3:cf:f3:74:52:70:4f:86:ab:
                    8a:74:e6:60:22:6e:ac:9b:46:4c:4c:b6:12:59:56:
                    39:5d:f2:5a:f8:e5:88:92:86:9d:f9:96:76:f0:3b:
                    1e:ab:0c:b6:03:a9:fe:2f:fe:87:a2:aa:71:f4:e6:
                    2b:e9:30:a8:11:dc:2b:1e:30:26:82:d1:97:09:11:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F5:65:4B:06:B8:C4:36:14:B5:FE:45:E0:6D:71:A0:28:AA:0D:8F
            X509v3 Authority Key Identifier:
                keyid:33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/qvVlSwa4xDYUtf5F4G1xoCiqDY8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:24:3f:5f:b5:a4:a3:00:f0:08:f6:46:ba:a1:be:4c:99:84:
         b4:b0:e5:dd:7c:01:b8:7b:3d:72:70:47:55:62:f4:28:20:31:
         23:92:a3:70:7c:5a:a1:96:63:23:cd:2b:3b:8a:b1:f6:d0:94:
         5d:9f:1e:5b:5e:0f:24:c7:54:38:67:06:13:f9:52:67:fb:2b:
         93:65:38:6c:ca:0b:af:36:77:e5:7b:04:bc:d7:81:47:bd:37:
         01:7b:54:10:f5:8e:11:f4:a3:b7:50:8c:86:eb:f6:49:1d:8c:
         51:7f:61:f5:60:35:c6:be:52:96:65:c6:79:2a:f7:82:cd:ac:
         cc:77:34:9e:98:80:52:ae:12:d8:72:20:5f:fe:50:a8:61:86:
         38:7c:69:b3:5d:a4:72:0f:fc:38:da:a2:c7:64:15:f9:29:4e:
         00:fa:7b:87:40:bb:a2:2d:9d:68:06:df:ff:da:df:4a:ee:e9:
         f5:65:28:f1:c8:57:0c:fa:97:e4:8a:c1:c3:23:b1:b8:b9:d6:
         1e:50:58:19:fa:cb:4c:f5:6c:21:9a:48:ff:3b:e7:fd:54:e0:
         f3:3c:eb:39:2a:79:14:74:4e:8e:46:08:8c:3a:cc:72:73:dc:
         b4:fc:c8:80:88:f4:8b:40:82:8f:64:f5:c1:4d:83:d3:51:22:
         e6:c7:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 03:14:09 2026 by rpki-client