This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/9U00oRp3cGd4VCQUN5ekfnbOeR0.roa
File:                     9U00oRp3cGd4VCQUN5ekfnbOeR0.roa (raw, json)
Hash identifier:          FI9Z9GFm9u46o7eenpsCSGOh0US87x+47Vm6SjGbfrM=
Subject key identifier:   F5:4D:34:A1:1A:77:70:67:78:54:24:14:37:97:A4:7E:76:CE:79:1D
Certificate issuer:       /CN=834D79F4126BF9E9DC0B32B86764E7D602514E01
Certificate serial:       0454
Authority key identifier: 83:4D:79:F4:12:6B:F9:E9:DC:0B:32:B8:67:64:E7:D6:02:51:4E:01
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/9U00oRp3cGd4VCQUN5ekfnbOeR0.roa
Signing time:             Fri 07 Nov 2025 00:23:07 +0000
ROA not before:           Fri 07 Nov 2025 00:23:07 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     21859
IP address blocks:        223.26.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/g0159BJr-encCzK4Z2Tn1gJRTgE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/g0159BJr-encCzK4Z2Tn1gJRTgE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 15:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834D79F4126BF9E9DC0B32B86764E7D602514E01
        Validity
            Not Before: Nov  7 00:23:07 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F54D34A11A777067785424143797A47E76CE791D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:52:6f:44:31:c8:31:b1:a3:95:b3:aa:30:
                    03:97:30:e9:b7:ca:4d:66:3f:b0:07:1a:46:ea:d7:
                    0f:59:06:f6:1b:de:f1:14:d9:33:21:35:b4:e2:0a:
                    7b:95:0f:25:33:d6:30:5b:b5:e7:45:33:4c:67:a0:
                    b5:1a:61:31:75:18:6b:f5:a7:88:db:91:25:f2:ba:
                    a3:ab:a8:76:76:2c:c5:e0:6a:c7:c6:07:46:8c:15:
                    5b:18:47:ca:d5:52:b1:b5:fd:dc:4c:01:4e:b6:c6:
                    11:fe:5f:f0:5d:f2:a4:07:ef:8c:93:dd:78:9a:3d:
                    c6:cb:6b:f3:e1:fe:04:13:5c:59:91:f8:a4:87:85:
                    18:08:8a:a0:bb:4d:c4:a3:6d:bb:23:68:0b:3c:5c:
                    02:42:63:31:17:78:c6:c5:66:3e:c4:6b:ef:fd:30:
                    30:d3:b7:88:53:f5:15:6b:29:1b:77:71:1c:8f:ae:
                    28:cd:8c:b4:18:50:40:29:c9:26:06:83:2a:85:bc:
                    a9:39:3f:e2:c6:fd:62:f6:0e:07:49:7c:95:41:1f:
                    e0:cc:39:58:da:8d:f5:d1:47:61:d2:ca:94:9c:cc:
                    41:3d:67:38:e6:0c:2d:1c:62:86:96:c5:23:0c:be:
                    5f:4c:e7:12:44:98:58:75:81:04:66:09:4f:d2:a7:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4D:34:A1:1A:77:70:67:78:54:24:14:37:97:A4:7E:76:CE:79:1D
            X509v3 Authority Key Identifier:
                keyid:83:4D:79:F4:12:6B:F9:E9:DC:0B:32:B8:67:64:E7:D6:02:51:4E:01

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/g0159BJr-encCzK4Z2Tn1gJRTgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/9U00oRp3cGd4VCQUN5ekfnbOeR0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.26.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:b1:c4:57:92:bd:4c:77:8d:0b:f4:c1:61:40:ab:74:ce:45:
         4f:75:e6:b6:82:b3:06:6a:39:38:01:d8:1a:c3:18:ba:67:7e:
         31:e8:14:68:49:df:eb:f9:48:1c:b6:76:f7:d9:83:3a:e4:65:
         bb:1c:d3:e0:1c:15:83:5a:f0:94:06:b8:c0:b4:e7:a4:42:75:
         dc:a3:0a:77:c6:b3:31:02:5a:a7:73:7b:08:ef:8a:4a:77:ee:
         e1:b9:43:eb:e8:5d:52:28:14:2f:43:33:fd:15:69:8f:a8:b9:
         c2:88:57:84:3b:b6:cd:48:0f:2b:7d:66:36:ec:f9:71:eb:e8:
         03:28:8b:25:71:24:d2:76:d6:0a:c9:90:89:dc:4b:37:8f:5a:
         a8:00:14:41:d4:0a:21:e2:ee:fc:3c:c9:07:66:ef:b8:23:f9:
         91:6b:10:a1:30:59:07:92:50:d5:29:fe:e8:42:f0:9a:e3:2a:
         55:a3:97:b4:1c:36:b2:02:08:21:b9:6a:47:77:27:3e:d1:2c:
         86:58:61:fc:47:52:a4:2b:b6:ae:10:09:28:f6:29:72:a4:fd:
         8f:95:c4:62:d9:e0:1f:92:7f:fc:04:bc:98:41:75:c0:42:ad:
         e0:f5:1c:a9:20:f7:8e:9a:36:3c:c4:d0:db:02:90:dc:94:63:
         ef:93:38:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:32:35 2025 by rpki-client