This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VOCOM/_JZ9tSH7avrMMbCfcqR0hF-8iQw.roa
File:                     _JZ9tSH7avrMMbCfcqR0hF-8iQw.roa (raw, json)
Hash identifier:          EYvBnPkC7L5t9gparsO8Q0GJrDr2Hwz3UAoPRRIeYgg=
Subject key identifier:   FC:96:7D:B5:21:FB:6A:FA:CC:31:B0:9F:72:A4:74:84:5F:BC:89:0C
Certificate issuer:       /CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Certificate serial:       030F
Authority key identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/_JZ9tSH7avrMMbCfcqR0hF-8iQw.roa
Signing time:             Mon 15 Dec 2025 03:18:07 +0000
ROA not before:           Mon 15 Dec 2025 03:18:07 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     63897
IP address blocks:        103.127.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 13:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
        Validity
            Not Before: Dec 15 03:18:07 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FC967DB521FB6AFACC31B09F72A474845FBC890C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:01:04:e7:2e:b2:99:0a:94:52:86:5c:ee:
                    3b:20:ff:c6:a8:33:a5:58:0d:4a:28:56:53:84:91:
                    76:4b:5f:06:28:17:a9:d9:9e:e1:68:bf:4a:89:d3:
                    8f:37:f1:e6:40:08:57:d6:05:bd:cf:fd:24:d9:01:
                    4d:bb:9b:67:69:fe:eb:30:f3:da:ee:38:40:9f:c5:
                    3e:18:f7:bf:88:fa:d2:45:4e:56:d5:0a:d1:dd:8a:
                    ec:40:cb:a8:73:b2:75:44:65:50:83:50:02:3b:68:
                    16:5a:87:7e:df:db:79:0f:d5:61:85:b5:95:74:6e:
                    91:64:af:91:b1:9a:44:41:25:07:66:03:da:34:ed:
                    fb:57:39:1c:65:62:3b:7e:a5:c6:cd:e8:8d:8d:87:
                    a4:6c:16:55:3c:fb:f0:54:1f:69:b8:d4:12:45:43:
                    89:91:00:3e:4f:c8:6f:e3:75:90:d4:36:b8:df:a5:
                    97:75:9c:00:c9:5f:e0:75:0b:6d:a3:90:d1:be:2a:
                    a2:ab:4e:97:93:64:df:a0:b8:38:ef:93:d7:8a:8a:
                    4f:c7:d6:67:2a:c6:b1:ac:83:7d:10:14:7d:70:2d:
                    05:27:39:dc:ca:54:fe:c8:56:4f:d6:8d:2f:c6:0d:
                    fd:15:90:e5:da:5a:85:03:8c:64:4c:20:fd:23:25:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:96:7D:B5:21:FB:6A:FA:CC:31:B0:9F:72:A4:74:84:5F:BC:89:0C
            X509v3 Authority Key Identifier:
                keyid:9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/_JZ9tSH7avrMMbCfcqR0hF-8iQw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:09:a1:1c:fc:cd:89:c3:c1:a3:99:55:60:1e:65:cb:8e:43:
         76:9b:f8:d7:61:8c:cc:dd:73:52:84:f1:36:6e:0b:72:af:fa:
         a4:f0:54:5b:91:54:aa:a8:f9:9f:bf:50:4f:cd:41:03:12:c9:
         50:1e:32:30:a2:a1:a3:9b:cf:87:53:76:b4:2a:a5:42:da:25:
         36:6a:7f:27:db:b4:ee:ea:a5:72:72:fb:f2:a5:fe:89:b5:cb:
         15:c5:18:f3:dc:4b:f2:3e:2f:9e:44:01:93:84:9e:df:dd:5e:
         93:c1:8e:36:e4:78:a1:0b:cd:21:3a:9c:1a:cf:45:2c:03:00:
         88:13:f9:2d:cf:32:7d:b1:db:da:4b:e8:bc:dc:18:a6:99:02:
         5f:ff:76:b3:4a:a8:03:69:95:79:f0:2b:d2:16:15:ff:32:1b:
         3d:bc:95:e6:a5:b8:fa:ed:a1:ed:74:d7:22:29:43:35:b2:af:
         fd:f6:40:7f:a6:21:64:62:75:f8:a3:a9:c8:07:55:4e:97:5d:
         6e:a9:54:ed:0a:bf:d6:2d:0e:1f:22:59:f7:64:eb:e1:f2:a4:
         40:70:84:10:66:53:08:42:f0:aa:2a:97:ee:42:76:f0:37:21:
         8b:68:cc:2c:b5:22:7e:58:a2:e8:66:bb:59:e5:16:cc:eb:7b:
         78:24:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:25:10 2025 by rpki-client