This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/EMEqphgsDbbqJEBmVl6vfuNrWZY.roa
File:                     EMEqphgsDbbqJEBmVl6vfuNrWZY.roa (raw, json)
Hash identifier:          yoxJFT8fLiDeWvAx0JHBd3r4Snfm1VvIJx/CLDBPsQU=
Subject key identifier:   10:C1:2A:A6:18:2C:0D:B6:EA:24:40:66:56:5E:AF:7E:E3:6B:59:96
Certificate issuer:       /CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
Certificate serial:       0201
Authority key identifier: 1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/EMEqphgsDbbqJEBmVl6vfuNrWZY.roa
Signing time:             Fri 14 Nov 2025 04:27:00 +0000
ROA not before:           Fri 14 Nov 2025 04:27:00 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152619
IP address blocks:        2401:e3e0:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 10:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
        Validity
            Not Before: Nov 14 04:27:00 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=10C12AA6182C0DB6EA244066565EAF7EE36B5996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:86:60:59:3a:ee:b5:62:f6:35:27:48:18:
                    da:db:9c:9c:39:f6:80:e4:ad:6d:f4:ee:b9:0e:64:
                    7a:d7:cf:86:77:75:19:76:16:49:f9:ba:8d:6a:8b:
                    ba:ef:35:71:3d:48:00:5b:3f:0a:eb:25:c2:63:de:
                    ef:ef:dd:76:3d:ea:ea:13:98:a4:fd:cb:76:97:6f:
                    5f:98:b5:d3:78:27:e7:19:11:3f:24:66:42:48:fe:
                    1c:5a:76:00:eb:83:3f:5e:f6:6b:6b:4c:48:29:b5:
                    f9:8f:af:bb:25:6f:7f:b7:aa:cc:31:5e:20:58:83:
                    ff:0c:e2:1c:9c:91:d1:f1:e7:6b:67:9b:e1:f2:53:
                    cd:5d:f0:e4:e3:71:55:a3:5e:05:c6:8d:6e:36:05:
                    e6:90:79:59:b6:94:e3:53:e5:cd:8a:68:92:62:e4:
                    ed:d9:6e:6f:9e:d0:7d:e1:ae:08:eb:e2:4c:e1:91:
                    79:5d:d0:8b:57:6f:73:95:af:2b:c8:42:ae:37:03:
                    84:e9:ae:90:01:59:f3:de:a4:78:6e:8e:83:fa:74:
                    1e:b0:c6:ec:d1:5e:a6:77:f9:f6:7a:2e:50:de:99:
                    64:5c:4a:fb:4a:fb:45:e9:38:24:1f:0e:ff:c8:38:
                    cc:82:de:f2:ba:c3:49:67:35:f5:41:c9:6d:81:ea:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C1:2A:A6:18:2C:0D:B6:EA:24:40:66:56:5E:AF:7E:E3:6B:59:96
            X509v3 Authority Key Identifier:
                keyid:1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/EMEqphgsDbbqJEBmVl6vfuNrWZY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e3e0:53::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:14:b0:a1:34:6e:d6:f6:b6:bc:bb:b6:27:18:10:67:57:2f:
         e5:9f:85:37:98:8d:bc:79:2a:8f:05:e2:4c:8a:95:67:ef:3b:
         42:42:8c:08:f0:46:d8:cb:65:ef:b4:54:a9:05:7e:6b:02:8c:
         e3:5c:0d:33:fb:72:2d:18:b3:5e:53:65:3d:3f:06:06:dd:74:
         0b:0a:7d:60:fc:ab:5d:bc:d4:72:9d:87:2a:a9:cd:f3:19:d6:
         30:99:e2:4f:fb:3e:0f:2b:eb:10:a7:b7:73:ce:70:4e:93:c0:
         d0:85:dd:d1:9a:58:e9:3f:18:de:84:ff:70:39:75:4a:52:23:
         90:5f:b7:fa:9e:bd:09:03:c8:ca:d1:1c:e2:1d:3d:da:9c:0c:
         7c:f6:5d:51:74:a9:d9:23:ca:17:b7:4a:35:84:e1:96:5f:a5:
         8c:0c:6b:36:18:3e:21:71:c5:3f:1c:d7:16:a8:f1:0b:76:18:
         6c:00:f3:83:f9:ec:3a:71:63:20:f8:61:12:35:5b:31:25:1d:
         79:7d:f0:2d:05:4a:33:e9:0a:37:0c:e1:9c:e6:d6:01:1a:7c:
         6d:8b:2a:44:16:2c:22:a2:4d:e4:39:83:0b:5c:4e:53:c5:4c:
         0f:a9:28:b0:7c:d3:7b:21:84:f1:8f:23:56:5c:3b:d0:11:45:
         b1:4b:0b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:51:58 2025 by rpki-client