This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/sCY2vEQpvKWRDwkvZfniXIIQoZI.roa
File:                     sCY2vEQpvKWRDwkvZfniXIIQoZI.roa (raw, json)
Hash identifier:          +TNEzCWGZqN0oJsU45iWjW2xdQeXub1k9AUqPmHVw4Q=
Subject key identifier:   B0:26:36:BC:44:29:BC:A5:91:0F:09:2F:65:F9:E2:5C:82:10:A1:92
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0FF1
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/sCY2vEQpvKWRDwkvZfniXIIQoZI.roa
Signing time:             Fri 07 Nov 2025 00:22:11 +0000
ROA not before:           Fri 07 Nov 2025 00:22:11 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     21859
IP address blocks:        223.26.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 15:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4081 (0xff1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Nov  7 00:22:11 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B02636BC4429BCA5910F092F65F9E25C8210A192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:9a:53:22:b1:5b:41:94:2f:3a:f0:f2:37:
                    c0:97:d4:2e:a8:39:06:38:0d:58:ad:4c:cc:d0:9e:
                    9b:b3:d8:b6:34:f2:05:23:99:23:a6:56:e7:fe:9c:
                    fd:02:b5:f5:61:97:0c:05:69:8d:6b:53:74:ab:4b:
                    f5:ce:e1:2c:40:e5:e2:f1:04:17:34:33:98:63:56:
                    e5:c9:0a:22:62:11:d4:e8:45:5a:83:75:87:6e:60:
                    9f:20:5e:a6:c9:23:18:1b:e3:0d:30:ca:0e:a5:7a:
                    85:10:bd:e8:18:9c:6d:07:fc:d9:93:ee:86:85:0c:
                    af:46:14:fe:f6:04:19:35:c3:cd:6d:59:5c:54:a2:
                    d8:76:30:d9:1a:ef:9a:44:28:ac:54:dd:ed:d9:30:
                    b2:a5:cc:8e:41:a3:5b:b1:77:a6:b5:03:78:29:64:
                    07:46:ba:a1:39:75:9d:a6:c2:69:b1:3a:5a:db:54:
                    3a:19:08:96:0a:f7:f8:ec:ff:54:42:5a:3d:2d:3e:
                    1d:41:e6:83:af:0c:ed:2a:be:a5:89:16:bd:64:49:
                    d3:b8:00:05:44:f0:38:23:5f:a4:03:16:91:bf:32:
                    9b:bf:b6:a9:49:f3:92:ba:05:0a:60:10:ac:c1:37:
                    b2:62:fa:22:3a:be:d0:76:4b:dd:86:93:54:b2:fe:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:26:36:BC:44:29:BC:A5:91:0F:09:2F:65:F9:E2:5C:82:10:A1:92
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/sCY2vEQpvKWRDwkvZfniXIIQoZI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.26.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:3a:78:37:5f:d8:52:ce:c5:de:cc:ab:c5:e5:ff:69:e0:b7:
         bb:a2:fd:58:c3:0d:51:11:78:87:94:45:32:2c:ff:e8:a8:72:
         04:00:23:c1:ad:ec:5f:d8:92:b2:bd:24:86:4f:ad:8f:d6:21:
         4a:7e:e6:fb:44:74:8a:29:fa:52:87:5e:1a:b9:69:f3:5a:f5:
         cc:3b:07:07:4a:e6:b4:09:b5:52:4c:90:2e:e2:47:cd:15:1d:
         91:40:64:33:77:02:55:32:1b:b8:f3:e0:87:24:1f:ed:7a:da:
         ea:fb:c4:b6:ff:b4:45:08:aa:b4:c7:4d:a3:74:6d:7e:34:b5:
         96:0d:61:0b:23:0a:a2:09:dc:90:ac:a8:47:a3:ca:35:46:f3:
         56:74:91:b3:d1:0e:76:63:b4:46:45:0f:ef:be:25:33:81:17:
         15:dd:c9:01:76:e8:84:d8:2f:84:e8:15:82:33:6d:79:21:37:
         39:c2:d9:11:79:98:1a:3b:55:86:32:03:bc:4d:d5:b7:71:15:
         b0:52:01:43:4b:31:ea:9c:bc:c8:80:1a:10:9d:be:cf:32:21:
         5b:82:d6:e9:c2:c6:21:ca:60:45:0a:d8:e5:a2:f2:97:6a:a3:
         d1:ca:8e:6e:96:5e:25:1e:cb:a2:cd:d0:7f:2a:c5:ff:d6:14:
         1b:67:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:10 2025 by rpki-client