This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/QXW-GorGtArUZIjnXWiPUqGXBmA.roa
File:                     QXW-GorGtArUZIjnXWiPUqGXBmA.roa (raw, json)
Hash identifier:          RtgacIPJjUX4rUCBsgEdgZPQszbWJMT2BOGwznzSuPQ=
Subject key identifier:   41:75:BE:1A:8A:C6:B4:0A:D4:64:88:E7:5D:68:8F:52:A1:97:06:60
Certificate issuer:       /CN=D264D19B9806023E476E039C05FDCE1376AC6C3C
Certificate serial:       01DB
Authority key identifier: D2:64:D1:9B:98:06:02:3E:47:6E:03:9C:05:FD:CE:13:76:AC:6C:3C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0mTRm5gGAj5HbgOcBf3OE3asbDw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/QXW-GorGtArUZIjnXWiPUqGXBmA.roa
Signing time:             Sat 27 Dec 2025 15:40:29 +0000
ROA not before:           Sat 27 Dec 2025 15:40:29 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     134823
IP address blocks:        161.248.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0mTRm5gGAj5HbgOcBf3OE3asbDw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Jan 2026 19:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D264D19B9806023E476E039C05FDCE1376AC6C3C
        Validity
            Not Before: Dec 27 15:40:29 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4175BE1A8AC6B40AD46488E75D688F52A1970660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:ff:a2:e0:88:51:f6:67:a5:25:47:6b:03:
                    ad:6a:04:f8:64:81:1c:fb:76:93:ec:63:d5:45:39:
                    32:58:8f:96:46:fa:d8:6d:2f:6c:be:13:2f:9f:5e:
                    0d:f1:17:ad:a1:43:ea:5b:66:9c:c5:18:32:db:89:
                    97:26:13:5d:c2:5d:e7:12:fa:46:a0:5a:34:32:eb:
                    59:97:48:75:46:54:67:cc:10:f4:13:3d:4d:54:1b:
                    42:d8:61:ac:f8:a5:d5:3f:90:f9:68:0f:e1:7a:b2:
                    32:43:e7:24:67:2d:a8:c5:9a:b2:20:52:53:d7:c8:
                    9f:8e:06:cf:ca:30:04:2b:1d:fd:7b:4b:cd:63:da:
                    d8:8b:e7:8d:f2:53:16:c8:22:e4:34:46:fb:22:35:
                    be:a2:13:d7:2a:98:f6:b2:6a:39:38:8e:74:e6:8d:
                    24:56:b3:96:ab:1c:27:3f:34:89:4c:f9:a5:5d:5f:
                    c8:fa:5f:fe:39:4b:b1:26:d4:15:ea:32:bc:ab:31:
                    16:c9:2a:6d:8d:55:99:59:3a:01:13:4f:4c:d9:4d:
                    6e:79:92:9d:20:0f:a0:c2:6c:82:ff:d5:29:46:85:
                    9f:54:8b:d9:84:68:8c:26:83:0a:c1:89:36:ea:9e:
                    22:2e:e9:62:f4:32:4f:ad:4a:c5:1c:0a:f8:b1:6a:
                    4d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:75:BE:1A:8A:C6:B4:0A:D4:64:88:E7:5D:68:8F:52:A1:97:06:60
            X509v3 Authority Key Identifier:
                keyid:D2:64:D1:9B:98:06:02:3E:47:6E:03:9C:05:FD:CE:13:76:AC:6C:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0mTRm5gGAj5HbgOcBf3OE3asbDw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/QXW-GorGtArUZIjnXWiPUqGXBmA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:50:d0:b7:16:1f:e4:97:f0:b3:1f:ab:a9:4f:79:e7:ab:0b:
         2a:8e:be:eb:f6:92:0f:7c:d2:c4:93:a4:2f:69:6a:5f:b0:09:
         84:51:9b:d4:f9:6f:07:74:f9:d0:94:2f:8c:38:62:b2:fe:76:
         5b:93:62:f8:50:65:6a:83:aa:ea:ba:b7:87:06:0f:19:73:73:
         7f:23:2d:1c:7c:cf:94:4d:c6:a4:a3:00:7f:bd:f2:7a:bf:71:
         6b:05:4c:02:de:02:cb:0e:d7:1b:54:80:b2:5b:da:22:e2:84:
         da:76:bd:b4:ef:58:6e:61:3e:43:b7:92:f6:6a:f2:06:e6:6d:
         04:ea:ab:cf:d3:9f:b3:8b:d2:13:69:37:3b:a0:f7:cc:bf:87:
         bb:68:2a:55:19:a9:fd:1a:f4:b1:dd:14:25:97:ff:43:72:0c:
         2e:02:58:f0:0f:dd:08:26:11:b8:de:37:a7:8b:97:d5:f9:9a:
         64:6e:ff:f7:51:b0:35:5a:e5:76:ec:a6:6a:90:0a:a1:d3:41:
         c0:75:99:46:99:52:6a:e4:3b:7e:86:8f:e5:83:2e:a6:6f:11:
         e6:8e:41:6f:07:05:a5:fa:fc:d2:cd:f9:7e:77:29:88:00:08:
         ac:64:6d:88:96:46:3e:9a:82:d5:c6:7f:b1:5d:18:fa:cc:65:
         0c:6f:77:14
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDI2
NEQxOUI5ODA2MDIzRTQ3NkUwMzlDMDVGRENFMTM3NkFDNkMzQzAeFw0yNTEyMjcx
NTQwMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQxNzVCRTFBOEFDNkI0
MEFENDY0ODhFNzVENjg4RjUyQTE5NzA2NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQqv+i4IhR9melJUdrA61qBPhkgRz7dpPsY9VFOTJYj5ZG+tht
L2y+Ey+fXg3xF62hQ+pbZpzFGDLbiZcmE13CXecS+kagWjQy61mXSHVGVGfMEPQT
PU1UG0LYYaz4pdU/kPloD+F6sjJD5yRnLajFmrIgUlPXyJ+OBs/KMAQrHf17S81j
2tiL543yUxbIIuQ0RvsiNb6iE9cqmPayajk4jnTmjSRWs5arHCc/NIlM+aVdX8j6
X/45S7Em1BXqMryrMRbJKm2NVZlZOgETT0zZTW55kp0gD6DCbIL/1SlGhZ9Ui9mE
aIwmgwrBiTbqniIu6WL0Mk+tSsUcCvixak25AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUQXW+GorGtArUZIjnXWiPUqGXBmAwHwYDVR0jBBgwFoAU0mTRm5gGAj5HbgOc
Bf3OE3asbDwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOR1RJ
QU4vMG1UUm01Z0dBajVIYmdPY0JmM09FM2FzYkR3LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS8wbVRSbTVnR0FqNUhiZ09jQmYzT0UzYXNiRHcuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5HVElBTi9RWFctR29yR3RBclVa
SWpuWFdpUFVxR1hCbUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBofiQMA0GCSqGSIb3DQEBCwUAA4IBAQBDUNC3Fh/kl/CzH6upT3nnqwsqjr7r
9pIPfNLEk6QvaWpfsAmEUZvU+W8HdPnQlC+MOGKy/nZbk2L4UGVqg6rqureHBg8Z
c3N/Iy0cfM+UTcakowB/vfJ6v3FrBUwC3gLLDtcbVICyW9oi4oTadr2071huYT5D
t5L2avIG5m0E6qvP05+zi9ITaTc7oPfMv4e7aCpVGan9GvSx3RQll/9DcgwuAljw
D90IJhG43jeni5fV+Zpkbv/3UbA1WuV27KZqkAqh00HAdZlGmVJq5Dt+ho/lgy6m
bxHmjkFvBwWl+vzSzfl+dymIAAisZG2IlkY+moLVxn+xXRj6zGUMb3cU
-----END CERTIFICATE-----
Generated at Mon Jan 12 15:45:47 2026 by rpki-client