This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/0bdNZxrSM5Inxwe4gGT7-6S7kH0.roa
File:                     0bdNZxrSM5Inxwe4gGT7-6S7kH0.roa (raw, json)
Hash identifier:          xrD5y/qjpgQvdrYGlclT8L6nlAtFZJTOzouVPi3Ec2k=
Subject key identifier:   D1:B7:4D:67:1A:D2:33:92:27:C7:07:B8:80:64:FB:FB:A4:BB:90:7D
Certificate issuer:       /CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
Certificate serial:       0216
Authority key identifier: 1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/0bdNZxrSM5Inxwe4gGT7-6S7kH0.roa
Signing time:             Fri 12 Dec 2025 15:37:05 +0000
ROA not before:           Fri 12 Dec 2025 15:37:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152619
IP address blocks:        2401:e3e0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 11:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
        Validity
            Not Before: Dec 12 15:37:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D1B74D671AD2339227C707B88064FBFBA4BB907D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:1e:4f:ef:1c:38:39:35:2d:7f:63:ac:09:
                    b0:12:f1:b7:28:d3:d7:52:95:27:db:d5:e4:db:4d:
                    64:5b:06:4d:da:7f:17:ca:01:6e:a8:0c:f9:a6:0c:
                    aa:43:2a:da:db:7b:4e:e7:15:1f:8f:4b:13:92:bb:
                    75:68:f0:96:ae:b6:b5:87:a1:28:ee:15:6b:e4:ea:
                    ff:d8:fd:33:00:f6:18:35:93:a3:85:5f:ef:7e:71:
                    0d:27:e6:c6:35:aa:60:90:13:29:ac:95:fb:bb:89:
                    85:a7:e0:b5:b9:da:6c:ec:33:fd:59:8f:78:8a:6d:
                    7b:a6:86:08:c3:00:59:35:f7:68:ef:54:84:10:34:
                    df:f1:43:7e:5a:a4:90:d3:b5:37:ca:31:58:dd:30:
                    f7:9f:4e:2e:6d:a1:d8:0f:1c:a7:54:83:ba:de:22:
                    a8:7d:2a:ec:4f:84:d0:9b:95:7d:81:7a:6b:1c:12:
                    45:54:63:68:15:32:7f:9b:62:76:79:d6:29:35:00:
                    8f:10:33:9e:aa:f5:a3:5f:d8:8d:d5:a7:dc:ca:f9:
                    5f:84:ef:ff:ee:c5:2c:f8:49:f7:35:2b:af:ef:e9:
                    70:b5:ab:be:5e:93:04:78:26:54:f6:e7:b4:47:73:
                    c4:ea:83:84:21:6e:4e:23:f9:54:68:e2:5e:a8:aa:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B7:4D:67:1A:D2:33:92:27:C7:07:B8:80:64:FB:FB:A4:BB:90:7D
            X509v3 Authority Key Identifier:
                keyid:1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/0bdNZxrSM5Inxwe4gGT7-6S7kH0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e3e0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:2a:4a:1d:d4:9b:96:af:20:ec:f6:d7:8d:e0:d0:45:92:70:
         f0:63:33:15:ae:a9:f3:5b:99:d1:c3:8e:bc:11:32:31:db:69:
         64:e8:53:27:8b:b0:17:ad:28:98:16:05:da:13:75:6b:09:b6:
         a5:34:a4:f9:2b:ea:7e:94:6a:28:52:17:28:b2:7f:fa:2f:a1:
         5a:aa:19:1d:c1:a8:f9:9a:83:cf:e8:d3:03:85:c6:4c:d1:c0:
         17:7b:dd:26:09:45:2d:68:43:5c:a6:c3:b0:0e:a7:b5:fb:ff:
         fa:12:db:46:bf:93:3f:10:49:a8:ef:41:74:37:3e:61:d5:71:
         60:be:d7:41:69:91:b3:be:4a:22:2c:f2:6a:71:35:75:b2:99:
         c7:c5:0c:cb:20:da:83:20:98:bc:29:0b:85:fe:cf:81:9b:95:
         42:43:4a:33:aa:b2:ed:21:d3:98:a3:bd:24:61:a3:7a:91:7c:
         41:a1:3b:74:49:1b:0d:f9:32:58:27:6c:33:b2:b9:d1:26:16:
         3c:c7:e8:b7:55:88:76:88:3f:71:20:1a:57:a3:93:70:54:64:
         61:61:b0:11:75:d1:49:e4:c4:1e:a3:af:48:16:f4:4e:71:72:
         f1:18:9f:6f:02:3e:55:ab:4c:b0:34:87:9f:10:ae:2e:1c:0b:
         2b:67:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:31:04 2025 by rpki-client