This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/7yEzB81lQ16M13SFWCzMxb8gKDM.roa
File:                     7yEzB81lQ16M13SFWCzMxb8gKDM.roa (raw, json)
Hash identifier:          X+o7rtMNu1LTgJgTopk2dJNdVuYuPsTvvnZdwroQXo0=
Subject key identifier:   EF:21:33:07:CD:65:43:5E:8C:D7:74:85:58:2C:CC:C5:BF:20:28:33
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       12FE
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/7yEzB81lQ16M13SFWCzMxb8gKDM.roa
Signing time:             Tue 02 Dec 2025 19:34:10 +0000
ROA not before:           Tue 02 Dec 2025 19:34:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17809
IP address blocks:        203.217.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4862 (0x12fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec  2 19:34:10 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EF213307CD65435E8CD77485582CCCC5BF202833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:46:5e:64:cb:26:c4:13:e3:1b:13:dc:cc:
                    05:b5:7b:b8:95:1e:17:3e:74:ba:bd:3b:69:34:e6:
                    00:a3:c4:5d:02:e2:24:b3:e9:d5:1a:46:4e:4c:70:
                    dc:3a:fd:40:bf:55:b4:00:33:bf:57:94:53:b6:74:
                    d2:a0:3c:30:ba:55:be:3a:fa:0f:3b:53:d2:28:70:
                    a0:74:69:5b:d6:c6:3d:9c:f3:d7:87:1b:8d:82:b3:
                    2a:bd:13:1e:b1:a6:a1:92:8f:28:42:5d:45:00:0f:
                    22:45:76:19:5e:19:85:f3:80:be:d6:4a:7f:12:54:
                    85:99:94:06:60:9a:bb:d2:d9:93:81:bb:ed:be:32:
                    34:6a:51:46:c9:48:72:d9:fb:72:5a:e0:67:47:01:
                    a7:a9:38:a7:fa:e8:5e:3b:9e:07:20:22:a9:b1:a3:
                    26:e6:53:7f:fb:0a:a3:40:3f:42:a1:49:dc:7f:3a:
                    be:1b:02:3a:9e:d9:4d:ba:17:f7:f8:61:db:45:e1:
                    18:77:72:e4:c4:17:17:60:f1:71:13:92:9b:86:a8:
                    b3:31:3f:76:9a:06:32:39:24:1f:51:f7:68:30:81:
                    4f:d8:b3:4f:d5:99:f3:5d:6e:99:17:04:a4:29:78:
                    29:44:9a:10:14:61:ee:6d:b4:f8:00:55:fd:96:b2:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:21:33:07:CD:65:43:5E:8C:D7:74:85:58:2C:CC:C5:BF:20:28:33
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/7yEzB81lQ16M13SFWCzMxb8gKDM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:99:31:52:6b:19:ed:65:72:d9:6b:d3:72:55:d0:15:e5:df:
         02:48:39:7b:db:d7:eb:64:32:94:eb:15:63:aa:7f:81:1f:55:
         80:8d:42:15:fd:23:87:0c:a8:8b:ea:5e:8e:25:08:4c:9f:89:
         29:e7:99:bb:00:97:25:25:a7:e8:15:5f:2f:ec:28:94:7e:84:
         fd:df:20:f2:0a:4d:2c:9e:47:b7:88:aa:34:1c:66:c0:0d:66:
         71:c1:d0:cc:1c:f6:60:1a:b4:81:2e:89:10:c7:4f:59:37:cb:
         92:86:3a:bf:bd:71:96:ca:d4:93:c3:57:08:f3:d1:40:f4:41:
         79:fa:74:90:cc:97:9c:bf:c4:61:4e:97:4a:28:ea:d3:d4:b3:
         68:2d:4c:ba:58:2e:20:0a:48:bf:22:7e:06:e4:94:61:bf:e5:
         9a:9b:e9:93:80:f0:4c:01:41:dc:70:96:e4:fb:a3:d1:96:9c:
         4a:c7:bb:b8:fc:8c:8e:93:d6:fc:37:6b:5f:6e:12:f9:91:b5:
         60:0e:69:7b:7d:0d:54:5d:fc:5d:b0:75:85:e6:81:31:49:51:
         fa:5c:ea:12:88:39:67:b6:9a:49:7a:9d:64:2c:49:14:c4:83:
         c8:b5:e5:c5:74:e1:3a:e0:7e:9c:c0:31:1b:45:d1:94:27:63:
         f2:9f:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:13:23 2025 by rpki-client