This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/t-Gdov-bCoNzcbqmUIwRTgbERSk.roa
File:                     t-Gdov-bCoNzcbqmUIwRTgbERSk.roa (raw, json)
Hash identifier:          caN4CNpRKUKBHdKKf2Ahwl6AfdsnM7+0WjYba748N0A=
Subject key identifier:   B7:E1:9D:A2:FF:9B:0A:83:73:71:BA:A6:50:8C:11:4E:06:C4:45:29
Certificate issuer:       /CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
Certificate serial:       0216
Authority key identifier: 1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/t-Gdov-bCoNzcbqmUIwRTgbERSk.roa
Signing time:             Fri 12 Dec 2025 15:37:05 +0000
ROA not before:           Fri 12 Dec 2025 15:37:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152619
IP address blocks:        2401:e3e0:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 11:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
        Validity
            Not Before: Dec 12 15:37:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B7E19DA2FF9B0A837371BAA6508C114E06C44529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:31:15:52:67:ad:b7:fd:bf:0b:58:54:0e:
                    8f:88:85:db:e1:0e:d8:f0:85:82:66:96:88:71:cd:
                    7a:5a:f5:cd:44:cc:39:20:1d:f2:15:6e:41:71:0e:
                    32:b0:1d:c9:10:11:c9:ed:9a:7e:dd:4a:38:0c:b1:
                    b5:77:ca:ce:dd:70:4f:be:83:d5:fc:c3:5f:26:5c:
                    ee:77:83:e0:07:f4:9a:69:bb:11:3e:68:ba:ba:8b:
                    72:f3:b8:60:c6:55:6d:36:58:e2:fe:81:ba:10:3e:
                    83:b7:85:7a:ea:1f:4e:d1:59:54:a8:a3:82:6c:7a:
                    75:dd:90:36:8e:6f:e7:00:66:f3:f4:17:eb:b8:a5:
                    b0:b3:64:8b:ea:f7:f2:9e:4d:7a:c2:27:fb:f1:2b:
                    c6:c2:b0:79:74:71:65:fb:3a:bb:b8:fb:f6:dd:6b:
                    f0:45:68:23:dd:5f:75:86:5e:80:87:ad:1c:fc:da:
                    56:1a:af:21:e6:44:4c:4a:06:b7:88:bd:46:a9:1f:
                    99:ff:0b:42:50:fd:82:c1:e0:35:6f:92:3f:fb:c3:
                    78:bd:31:9e:3b:80:3e:b1:fe:81:05:91:67:c5:19:
                    e1:f2:8e:36:ee:fb:51:d9:8c:92:2c:95:70:fc:da:
                    de:ea:ff:6e:68:94:ba:2e:72:b2:cf:ab:a7:f2:aa:
                    71:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E1:9D:A2:FF:9B:0A:83:73:71:BA:A6:50:8C:11:4E:06:C4:45:29
            X509v3 Authority Key Identifier:
                keyid:1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/t-Gdov-bCoNzcbqmUIwRTgbERSk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e3e0:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:7d:41:9a:ff:61:68:04:63:14:3f:58:bf:55:26:80:7b:e2:
         0e:53:b9:3f:cf:fd:03:03:6e:c1:f3:2c:5f:e4:2f:6a:2f:e4:
         04:d6:ee:8c:d5:fb:4d:27:31:0f:37:95:42:ad:50:63:d5:51:
         cd:d3:8e:7b:24:58:cd:c1:0e:2f:d2:aa:5e:cd:4f:18:5b:34:
         f1:40:ae:71:df:22:c5:b6:2b:b8:7f:63:97:0c:be:35:91:3e:
         91:38:8b:65:31:c2:5c:5e:80:cb:39:77:a3:e9:b9:bc:a9:19:
         ff:82:29:41:c9:4c:6d:ac:d7:d9:67:f8:5d:a0:e6:51:78:47:
         0e:09:31:5c:b6:c0:4d:e0:7b:97:a5:e9:11:9d:8d:24:5f:bb:
         d8:18:2e:39:d8:7a:fa:61:05:cd:1d:b7:bd:59:a7:15:b8:b4:
         f5:7e:dd:74:69:bf:1b:e5:44:75:27:69:6a:7e:b6:b8:19:b4:
         f5:61:fd:31:38:ff:dc:3f:23:b5:b3:24:6d:2f:1a:59:9d:97:
         65:f4:cd:61:1c:93:41:9c:4d:04:98:47:e2:90:bf:1e:d3:38:
         4e:50:b6:b4:c6:72:59:63:3c:48:85:ef:00:f0:21:0c:76:8f:
         55:19:f0:f7:89:dd:d5:f1:39:2c:a6:26:2c:92:67:f6:79:65:
         b9:bf:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:55:08 2025 by rpki-client