This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/we3piPfpUanI0y8XYF6EOghjoKA.roa
File:                     we3piPfpUanI0y8XYF6EOghjoKA.roa (raw, json)
Hash identifier:          cNWRqwJ7jwTPga6I6+K8XRKVdoAiYZr0Hoz/Pk/srzQ=
Subject key identifier:   C1:ED:E9:88:F7:E9:51:A9:C8:D3:2F:17:60:5E:84:3A:08:63:A0:A0
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       0EF1
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/we3piPfpUanI0y8XYF6EOghjoKA.roa
Signing time:             Mon 12 Jan 2026 14:21:27 +0000
ROA not before:           Mon 12 Jan 2026 14:21:27 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9244
IP address blocks:        2403:ee00::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 04:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3825 (0xef1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Jan 12 14:21:27 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C1EDE988F7E951A9C8D32F17605E843A0863A0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:75:de:a9:ba:1e:72:9e:c0:7c:8a:a6:a9:
                    4f:7a:5c:ec:cd:3a:69:93:f3:eb:5a:0c:f4:2d:48:
                    2a:11:d5:a8:8a:d1:1f:63:99:6e:06:25:83:cd:82:
                    de:ef:5c:8d:2c:6f:b5:40:96:e0:3e:bd:4f:9a:e1:
                    c8:68:3b:d1:f8:e2:09:1e:b6:fb:79:c3:0a:ab:19:
                    d5:86:30:92:a7:6c:53:bb:be:c7:42:21:67:3b:00:
                    b2:9e:cd:54:f9:fa:76:59:94:f8:7b:e0:65:52:77:
                    c5:1f:bc:fe:f0:4f:27:95:87:3c:54:c1:75:59:86:
                    ab:73:04:f6:e5:f4:2c:e3:8e:9a:57:c8:0b:8c:56:
                    df:8f:4f:c1:32:e2:c3:54:b8:f8:de:0c:cb:f8:2f:
                    af:14:d4:16:df:ac:65:a6:b5:cc:4c:2a:b4:32:0a:
                    72:d1:55:87:1b:d8:d4:ae:ae:a4:ea:2b:57:90:58:
                    c4:12:46:2a:0e:96:aa:86:39:fe:76:45:36:0d:51:
                    18:f9:02:a5:68:89:a6:ae:0e:ca:3e:1e:9f:bb:60:
                    0b:7e:3a:5c:06:c6:18:26:b9:34:d5:3c:e6:01:13:
                    5a:c6:b7:7b:56:4d:6c:a0:bb:e3:31:58:58:d3:38:
                    83:0b:b8:f8:b5:4a:89:14:c9:c5:8f:7f:f7:cf:50:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:ED:E9:88:F7:E9:51:A9:C8:D3:2F:17:60:5E:84:3A:08:63:A0:A0
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/we3piPfpUanI0y8XYF6EOghjoKA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ee00::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:82:7f:9b:ab:8b:35:58:08:44:14:00:aa:da:9b:65:a6:10:
         54:49:33:8f:eb:8c:6b:f4:c1:64:29:fb:47:67:1d:3a:5e:bd:
         bc:43:77:33:20:d9:6b:ba:dd:b6:d7:c0:89:a6:14:70:f8:c0:
         d7:36:28:06:b7:0a:c2:b5:79:38:de:24:fd:9b:e8:0f:96:08:
         37:7d:32:be:77:ac:d8:5f:e2:58:f3:82:06:03:08:3a:c1:6c:
         ab:39:44:f5:0c:61:9b:c8:3a:6f:09:4a:04:99:11:a6:56:68:
         91:59:5e:90:3a:96:f7:f7:fe:7e:f8:6f:b3:ae:76:eb:53:4e:
         ab:91:b6:03:17:a3:c7:ed:c1:8d:51:b8:ff:bd:c7:16:ba:7e:
         e2:f7:e5:b9:72:be:5c:63:02:f7:eb:3a:43:6c:c2:2f:12:f4:
         88:50:da:ee:84:3f:7f:c7:48:1e:d6:4e:e1:5f:90:96:73:d4:
         bd:39:d8:50:6e:65:3e:8c:ce:cb:8f:5f:e4:42:99:34:1f:c3:
         b8:4d:bb:65:8f:24:c7:f7:58:64:84:c1:c8:61:d3:6e:fc:db:
         9f:94:ec:22:eb:13:aa:0e:b2:34:89:a4:3f:62:b4:e7:2c:3d:
         c5:5f:62:03:fe:51:e7:51:44:71:53:0d:3d:9a:9b:23:64:25:
         5c:22:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:18 2026 by rpki-client