This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/_8LPnsHqtTDRVnkG8T6GqRkfl1Y.roa
File:                     _8LPnsHqtTDRVnkG8T6GqRkfl1Y.roa (raw, json)
Hash identifier:          p2lO8gt4z6+wAGNK7QuerpuIweS61yKyzTcaZh+flnE=
Subject key identifier:   FF:C2:CF:9E:C1:EA:B5:30:D1:56:79:06:F1:3E:86:A9:19:1F:97:56
Certificate issuer:       /CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
Certificate serial:       0216
Authority key identifier: 1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/_8LPnsHqtTDRVnkG8T6GqRkfl1Y.roa
Signing time:             Fri 12 Dec 2025 15:37:05 +0000
ROA not before:           Fri 12 Dec 2025 15:37:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152619
IP address blocks:        2401:e3e0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 11:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
        Validity
            Not Before: Dec 12 15:37:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FFC2CF9EC1EAB530D1567906F13E86A9191F9756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:4f:c9:cf:da:e9:88:1a:b1:07:08:58:dd:
                    98:80:a9:78:03:2c:59:ad:41:d9:f9:1e:c4:cb:d8:
                    a4:73:91:f9:d8:7a:ff:ef:6d:95:41:9b:3f:2f:17:
                    3a:58:2f:0e:ff:23:1a:df:08:91:db:c3:b9:23:72:
                    c5:8c:65:7f:75:66:23:9b:4a:7a:18:65:dc:32:38:
                    9f:9a:c8:08:ef:37:6a:d3:40:a3:64:33:0e:2b:ce:
                    f2:27:5f:14:bc:17:ba:3c:98:bb:dd:31:ae:ae:d0:
                    5e:8d:28:40:bc:ef:43:85:5c:ed:ff:fd:8f:13:e7:
                    b2:f3:8c:2b:ea:75:3c:b4:7c:e0:14:ac:90:6d:d3:
                    ae:f6:7b:37:bb:cd:41:2b:a9:0b:98:8e:f2:64:ca:
                    e8:ff:47:7a:9e:48:ed:72:4c:93:17:66:8e:9f:a2:
                    99:73:15:1d:41:34:47:af:05:4a:58:34:09:f0:c6:
                    bc:6e:d5:6d:d5:83:e7:4c:4b:d7:6c:0f:d0:f6:5c:
                    48:24:55:d5:a7:fb:67:51:22:a6:39:32:b8:8f:6d:
                    06:12:65:67:2f:16:34:38:b1:d9:21:fc:40:e0:c5:
                    06:39:f9:cb:12:6e:cd:39:99:aa:08:cc:46:b4:5d:
                    45:81:70:00:88:4e:99:cb:df:b6:a5:30:94:84:c3:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C2:CF:9E:C1:EA:B5:30:D1:56:79:06:F1:3E:86:A9:19:1F:97:56
            X509v3 Authority Key Identifier:
                keyid:1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/_8LPnsHqtTDRVnkG8T6GqRkfl1Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e3e0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:47:da:76:3d:22:61:f6:7c:94:ee:56:5d:a7:a7:72:02:
         7c:7a:d6:b3:98:18:5c:17:80:a1:f6:db:c2:4d:44:b7:4b:09:
         f2:34:5c:fe:2c:c3:a2:cb:49:84:65:cd:7c:61:c4:ce:25:47:
         19:26:b8:7f:25:d9:14:fd:90:0b:71:91:8e:14:fc:43:81:ab:
         83:34:59:1e:5f:82:93:05:0e:f4:7a:f4:30:9e:d4:ce:2a:f1:
         e0:e9:7b:8e:4f:f6:51:57:75:81:06:29:74:c6:1e:16:86:f1:
         2e:8f:d3:24:21:6e:f6:a1:92:d6:35:8d:05:76:09:c8:39:37:
         0d:19:1c:e9:45:7d:e3:c9:e6:92:09:11:15:ea:c7:f3:95:f1:
         cb:37:fc:1c:06:c7:c6:c9:cb:51:93:cf:96:d5:99:f1:1e:63:
         f1:cd:53:83:de:a6:aa:de:a3:e6:d0:2b:a5:87:c8:89:51:2a:
         af:4c:fa:4f:b9:f5:6c:26:1f:b0:ff:0f:48:1d:93:12:0d:af:
         f6:d1:34:77:53:f5:b0:f8:72:d0:b8:b6:df:01:94:2f:86:12:
         d2:16:8e:14:5a:21:44:6c:5b:c0:d1:a2:50:5b:21:49:6c:99:
         dc:70:05:dd:c3:62:47:e6:7c:9e:12:72:0c:27:16:43:75:a3:
         da:97:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:55:52 2025 by rpki-client