This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/U9NMdCwbvpOZAEIBrhkGH0fwIvU.roa
File:                     U9NMdCwbvpOZAEIBrhkGH0fwIvU.roa (raw, json)
Hash identifier:          nEdFrB6dLe0xfyoyBNpyf656g5cI76fmfs24cU9vOIM=
Subject key identifier:   53:D3:4C:74:2C:1B:BE:93:99:00:42:01:AE:19:06:1F:47:F0:22:F5
Certificate issuer:       /CN=6C9A1AB5E96241E0C97E2DBDF02A6354E030AA1A
Certificate serial:       E6
Authority key identifier: 6C:9A:1A:B5:E9:62:41:E0:C9:7E:2D:BD:F0:2A:63:54:E0:30:AA:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bJoateliQeDJfi298CpjVOAwqho.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/U9NMdCwbvpOZAEIBrhkGH0fwIvU.roa
Signing time:             Thu 05 Feb 2026 15:49:04 +0000
ROA not before:           Thu 05 Feb 2026 15:49:04 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152623
IP address blocks:        2401:f120::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/bJoateliQeDJfi298CpjVOAwqho.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/bJoateliQeDJfi298CpjVOAwqho.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/bJoateliQeDJfi298CpjVOAwqho.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C9A1AB5E96241E0C97E2DBDF02A6354E030AA1A
        Validity
            Not Before: Feb  5 15:49:04 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=53D34C742C1BBE9399004201AE19061F47F022F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:28:8b:16:de:17:94:f5:10:58:eb:b7:7c:5b:
                    62:5f:c5:01:92:d1:af:09:95:81:48:cc:3d:57:8b:
                    63:08:5a:a2:cf:44:ef:5f:fd:c0:f0:76:84:3a:1b:
                    c2:5b:82:f8:6c:52:1b:aa:03:9e:84:fd:12:e2:b1:
                    49:cf:8d:93:cc:d9:f2:27:d3:c2:37:82:5f:df:84:
                    f8:49:95:97:9a:cc:bd:09:b0:24:f7:1f:3d:ab:22:
                    cc:24:64:ed:20:43:4e:d3:66:64:b1:95:26:09:a6:
                    80:92:40:e5:e0:16:e7:21:83:50:10:93:2b:c0:85:
                    56:74:0a:97:e9:9e:0a:af:c9:a3:81:54:81:21:e9:
                    cb:8b:f3:80:db:44:f3:d6:e9:ab:c2:db:62:4f:13:
                    ee:6c:7b:d3:48:bf:9b:db:d7:d4:8b:fd:95:0a:33:
                    2c:f6:26:29:16:c6:5f:1f:4e:fc:25:51:5e:4c:7d:
                    5e:04:05:71:f9:44:76:d4:6e:15:1a:46:bf:87:81:
                    ca:0a:79:66:3f:08:4e:f2:e6:a4:e4:12:97:31:2b:
                    26:f3:6d:6d:0b:10:0a:f2:9b:60:8e:94:52:81:b7:
                    cb:46:f9:21:38:77:c9:dc:67:8f:8a:7b:82:27:3d:
                    5f:ed:b8:94:a9:98:cf:ec:5d:5e:85:7b:32:04:0e:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D3:4C:74:2C:1B:BE:93:99:00:42:01:AE:19:06:1F:47:F0:22:F5
            X509v3 Authority Key Identifier:
                keyid:6C:9A:1A:B5:E9:62:41:E0:C9:7E:2D:BD:F0:2A:63:54:E0:30:AA:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/bJoateliQeDJfi298CpjVOAwqho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bJoateliQeDJfi298CpjVOAwqho.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/U9NMdCwbvpOZAEIBrhkGH0fwIvU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f120::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:66:cc:b4:7a:cd:eb:55:9a:85:55:0d:d2:91:e4:1b:e2:60:
         da:fa:a0:6f:83:0c:e8:53:f4:0a:7a:3b:e5:57:51:8b:10:9c:
         51:9b:a2:b5:ff:61:bd:24:f5:4a:d4:db:65:16:fa:e4:d8:98:
         10:95:81:a3:81:1a:2b:3a:61:a5:1f:d3:7f:52:e6:fa:c1:3a:
         bc:ce:c3:34:9b:31:99:d2:e2:4f:f6:3b:ce:05:f1:ea:20:ba:
         cf:4d:13:54:e5:c0:c8:f4:8a:68:b7:88:a8:24:e5:e7:b1:a2:
         8e:e7:f2:e7:5d:34:c2:18:d0:6f:93:98:2b:89:d6:2a:01:f5:
         28:38:97:92:5d:4e:91:55:25:6a:d3:11:b3:85:a1:be:01:eb:
         5a:98:c7:2a:11:7c:cb:01:f6:ed:a5:c1:17:44:ab:5a:12:87:
         12:04:c6:0f:c9:03:c4:ab:8a:a9:40:f9:73:d0:96:13:58:bd:
         38:d6:a2:d3:94:af:38:61:61:b9:5f:b0:11:2c:a4:db:16:0b:
         94:6e:5a:8e:84:0a:3a:d4:8d:30:a8:ce:d6:47:ac:b9:03:ff:
         68:2c:ad:d3:f4:d6:9d:23:f7:b1:56:05:f7:cc:11:3c:39:0d:
         e3:6e:dc:94:60:08:e6:2c:8a:83:dd:a1:5e:18:b4:88:61:21:
         b7:7b:d1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:31 2026 by rpki-client