This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/ZrXSqrRjLF_Y-b7OrUitk9tSm98.roa
File:                     ZrXSqrRjLF_Y-b7OrUitk9tSm98.roa (raw, json)
Hash identifier:          zenvZOYBGFNBKo2QSN1FZzQh3H2D6jvdRfAZ949Q1ps=
Subject key identifier:   66:B5:D2:AA:B4:63:2C:5F:D8:F9:BE:CE:AD:48:AD:93:DB:52:9B:DF
Certificate issuer:       /CN=6C9A1AB5E96241E0C97E2DBDF02A6354E030AA1A
Certificate serial:       E6
Authority key identifier: 6C:9A:1A:B5:E9:62:41:E0:C9:7E:2D:BD:F0:2A:63:54:E0:30:AA:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bJoateliQeDJfi298CpjVOAwqho.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/ZrXSqrRjLF_Y-b7OrUitk9tSm98.roa
Signing time:             Thu 05 Feb 2026 15:49:04 +0000
ROA not before:           Thu 05 Feb 2026 15:49:04 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152623
IP address blocks:        163.61.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/bJoateliQeDJfi298CpjVOAwqho.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/bJoateliQeDJfi298CpjVOAwqho.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/bJoateliQeDJfi298CpjVOAwqho.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C9A1AB5E96241E0C97E2DBDF02A6354E030AA1A
        Validity
            Not Before: Feb  5 15:49:04 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=66B5D2AAB4632C5FD8F9BECEAD48AD93DB529BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:f5:ef:0c:37:8d:47:18:bf:62:ae:ff:fb:
                    54:da:2f:14:ab:fe:a9:68:68:c0:ee:4d:7c:32:69:
                    0a:56:e4:f7:91:80:8e:77:f6:12:a7:81:b6:17:4d:
                    5f:af:47:06:58:5a:7b:62:e0:fa:fa:0c:7a:cf:43:
                    d9:91:06:7e:73:43:db:92:1e:80:6f:de:9d:80:95:
                    d2:eb:e6:ad:7b:e2:13:f2:3d:f8:7f:19:c1:91:ad:
                    80:34:49:8e:4d:7a:19:51:b3:44:c6:e9:9c:d3:e5:
                    78:19:d5:37:77:0b:b3:49:c6:cd:4b:b1:6d:4b:3b:
                    7c:38:8f:b8:0d:a4:59:0b:7d:cf:2d:d2:e4:40:1b:
                    f2:2d:8c:f3:a6:24:9a:4f:8d:71:9d:3b:29:79:71:
                    4b:91:ee:2e:a4:03:0e:12:df:d0:50:cf:29:b0:7b:
                    0d:f5:7e:4e:0f:28:3a:87:a4:38:22:f4:7f:fe:cf:
                    92:9b:fc:f9:8a:fb:00:5f:f9:ff:13:b9:3f:88:24:
                    34:b3:a8:94:40:35:8e:94:8e:68:52:59:0a:79:51:
                    ff:cf:67:e6:8d:90:62:48:aa:b7:84:6d:be:fd:73:
                    af:c9:77:a1:24:0c:c0:d2:92:6e:09:49:74:9a:d9:
                    9b:9f:aa:77:52:0a:29:f4:86:24:56:db:60:f8:72:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B5:D2:AA:B4:63:2C:5F:D8:F9:BE:CE:AD:48:AD:93:DB:52:9B:DF
            X509v3 Authority Key Identifier:
                keyid:6C:9A:1A:B5:E9:62:41:E0:C9:7E:2D:BD:F0:2A:63:54:E0:30:AA:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/bJoateliQeDJfi298CpjVOAwqho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bJoateliQeDJfi298CpjVOAwqho.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/ZrXSqrRjLF_Y-b7OrUitk9tSm98.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:9b:3f:ca:86:32:73:d1:34:65:c0:82:d3:71:61:e1:61:63:
         29:97:a8:bf:a4:27:e3:15:ab:bf:85:85:7f:92:17:a5:52:78:
         d2:3e:f2:27:0b:b4:93:d9:b8:27:ca:71:cc:0f:dd:73:4f:20:
         d2:e4:da:3d:b7:85:0d:6d:d2:a9:68:7b:73:ec:46:bc:42:6d:
         50:30:f3:f4:13:1c:52:52:c4:b1:d7:fe:e4:a8:be:62:1d:aa:
         56:85:f0:5a:99:1a:dd:f6:e3:d0:1a:8b:02:5d:41:cc:b5:c2:
         50:45:44:6c:05:50:6e:7c:be:81:af:a9:2d:11:2c:3a:4e:0a:
         2e:ac:00:43:11:d7:bd:43:ea:5e:6a:57:bd:1d:3a:33:39:f7:
         1b:56:01:9e:41:64:e0:01:a4:f6:93:8c:99:36:eb:2f:4a:f9:
         47:5a:c6:ae:fd:12:78:fe:19:95:5d:3d:3e:b4:ce:0b:24:0d:
         da:19:33:8c:f7:51:44:8a:85:16:c4:8d:3d:ec:b5:7f:0f:df:
         74:49:14:04:4e:33:ee:90:52:e3:38:77:49:25:58:60:97:c8:
         06:ef:38:34:3d:e7:06:01:21:7c:26:bd:ac:34:8f:4a:ab:d3:
         4e:b8:69:25:d6:ec:ec:f0:c5:f5:75:07:6c:e1:bc:44:f2:42:
         1c:44:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:30 2026 by rpki-client