This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ImWHxvb9CPMjRI7GdyJW_Haaw_E.roa
File:                     ImWHxvb9CPMjRI7GdyJW_Haaw_E.roa (raw, json)
Hash identifier:          fWtfoiG/BPUASc6gdLwIPvs2tmbVDwEF7XukvMon7Bk=
Subject key identifier:   22:65:87:C6:F6:FD:08:F3:23:44:8E:C6:77:22:56:FC:76:9A:C3:F1
Certificate issuer:       /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial:       02D3
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ImWHxvb9CPMjRI7GdyJW_Haaw_E.roa
Signing time:             Mon 17 Nov 2025 09:21:26 +0000
ROA not before:           Mon 17 Nov 2025 09:21:26 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     215595
IP address blocks:        202.160.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 03:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
        Validity
            Not Before: Nov 17 09:21:26 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=226587C6F6FD08F323448EC6772256FC769AC3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:46:57:b8:90:40:8a:a9:ef:d2:2e:63:7e:
                    19:f0:a9:9a:5a:b0:ed:da:98:1d:a5:f4:00:4f:a7:
                    9b:4f:52:4b:a8:8d:1d:b4:b7:61:b6:5d:9e:17:eb:
                    a1:44:bb:a8:b2:52:41:f1:fc:c1:f8:6e:41:64:80:
                    86:fb:cf:f3:a8:b7:71:94:a7:bc:c4:15:54:a0:d4:
                    b9:26:61:08:a1:60:76:18:1d:99:4d:39:45:05:fe:
                    53:33:6f:5e:6f:a9:a8:ce:54:77:d9:d7:60:ec:c7:
                    2b:b5:ce:79:8d:51:3a:ed:48:13:ed:8f:5b:bd:de:
                    ee:3a:9d:16:f1:cb:e5:2c:11:d6:aa:50:d0:e4:01:
                    2e:31:4a:ca:26:70:3b:e8:10:08:86:77:96:e1:8f:
                    9e:cb:77:a9:92:3e:f9:44:a7:7c:b6:b8:e7:3d:42:
                    9a:88:02:22:b2:5e:07:40:2c:a0:1f:e0:15:23:40:
                    a7:30:3a:87:16:be:9d:5d:be:af:cb:58:35:40:ea:
                    4b:c1:80:08:0a:23:37:ae:cc:64:81:6f:75:0e:fc:
                    bf:b2:95:f8:bb:3c:37:2c:ef:6d:0a:39:c7:d3:00:
                    24:bb:39:08:45:79:86:22:e7:93:00:8e:0d:1e:33:
                    48:4b:37:03:68:c9:1c:24:51:49:f6:d9:37:3f:4e:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:87:C6:F6:FD:08:F3:23:44:8E:C6:77:22:56:FC:76:9A:C3:F1
            X509v3 Authority Key Identifier:
                keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ImWHxvb9CPMjRI7GdyJW_Haaw_E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:6a:79:43:89:7f:e8:cc:8d:4b:dc:b1:69:38:72:26:b2:
         f8:40:b5:43:f8:cf:f6:21:ea:af:1b:47:80:91:53:b7:8d:80:
         e1:90:b7:4a:e1:ed:95:e9:26:ab:ba:80:3b:42:0d:02:db:ba:
         da:54:6c:f7:6a:f6:d9:61:46:d2:b0:cd:f2:7a:c0:98:ee:82:
         41:a6:64:0d:b8:64:3e:47:32:fd:6e:5a:4c:92:56:47:f6:20:
         95:a9:07:c2:cd:25:a7:70:13:62:d3:e4:50:b7:76:30:0c:a6:
         85:1b:a4:ba:f2:b1:3c:0a:c1:73:e9:c1:c4:b2:04:6c:32:c7:
         c7:64:cd:3b:52:9a:eb:ab:cf:6f:e1:51:c7:f9:ae:4c:5d:3b:
         07:68:dc:3c:90:76:82:c3:c9:43:c9:c8:c3:4b:7a:08:71:47:
         b8:e3:32:5e:62:cd:23:ac:fd:77:54:72:52:e6:74:0e:1c:fa:
         3b:92:f2:b2:06:ad:c7:f1:ab:de:16:02:e4:09:d9:93:18:92:
         63:42:ad:c8:9a:da:c4:33:ca:e9:94:7b:33:ea:c4:83:2d:f7:
         be:90:c3:16:71:17:77:1c:d1:08:0c:9f:1b:38:34:79:31:27:
         39:58:5f:b8:98:dc:12:52:7b:27:68:23:a1:cf:57:f3:74:9a:
         07:25:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:57:00 2025 by rpki-client