This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZnwEvGLZsY4_SpRCcwqMsp0KHjE.roa
File:                     ZnwEvGLZsY4_SpRCcwqMsp0KHjE.roa (raw, json)
Hash identifier:          BSryrYiBHNs3hyOufBwAuVbHdimHdz5LZDSseFv6R2w=
Subject key identifier:   66:7C:04:BC:62:D9:B1:8E:3F:4A:94:42:73:0A:8C:B2:9D:0A:1E:31
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       1304
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZnwEvGLZsY4_SpRCcwqMsp0KHjE.roa
Signing time:             Tue 02 Dec 2025 19:38:22 +0000
ROA not before:           Tue 02 Dec 2025 19:38:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17809
IP address blocks:        211.79.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4868 (0x1304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec  2 19:38:22 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=667C04BC62D9B18E3F4A9442730A8CB29D0A1E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:c5:57:c0:98:3b:25:48:02:f8:05:98:fa:
                    5a:0d:56:5d:39:be:ef:ac:b3:b2:7f:50:e1:ef:f6:
                    2b:07:be:0d:38:18:79:10:74:45:b3:b6:0f:72:17:
                    53:eb:e7:28:3d:f9:c3:b3:d7:17:ba:f4:0a:98:e0:
                    85:78:a9:d6:da:35:05:8e:06:70:81:ef:a4:30:7b:
                    43:ad:09:fb:e5:bd:39:cb:3f:8f:5f:5f:ea:52:62:
                    d8:ca:c8:ec:29:52:86:d4:97:f4:7f:99:cf:e8:2e:
                    5c:dd:e0:ea:37:87:27:9b:b4:65:40:93:85:e5:03:
                    d7:5e:c2:c5:58:29:2f:7d:80:14:34:83:eb:b4:28:
                    aa:15:66:b8:7b:41:b1:bb:c2:f6:8b:b7:f9:ea:60:
                    c4:ee:60:79:45:f2:53:31:ba:bf:07:94:03:45:7f:
                    62:85:99:d9:66:98:38:44:b9:4d:1d:ae:52:3b:b2:
                    86:98:3e:3b:3f:55:59:d7:e5:f0:53:be:27:d7:2e:
                    59:97:d3:10:b8:01:4d:f4:4a:a2:04:25:af:48:84:
                    86:0b:56:d3:bc:b7:76:c2:e2:75:6b:1e:40:c6:46:
                    38:10:48:e4:83:c3:5f:67:d9:d0:0b:68:e0:c7:e2:
                    9e:e5:03:27:ad:a7:6c:f8:09:7d:fa:6b:7c:cc:bf:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7C:04:BC:62:D9:B1:8E:3F:4A:94:42:73:0A:8C:B2:9D:0A:1E:31
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZnwEvGLZsY4_SpRCcwqMsp0KHjE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:13:60:74:0c:35:13:b9:78:86:77:38:d4:0a:cb:4b:99:65:
         93:ab:ed:d9:1d:f1:f6:d9:d7:84:f2:1f:51:ac:40:55:66:f1:
         ae:4a:43:ed:6e:39:fb:49:ac:2d:fd:9c:34:94:6f:62:c5:50:
         f9:e3:e5:71:45:49:8f:c1:de:89:6b:3e:11:67:ee:55:09:af:
         21:ab:1d:5a:19:5e:2b:f1:37:3f:d7:ba:f7:46:35:09:e5:65:
         74:88:30:87:44:71:c2:60:b8:e4:b5:32:84:38:d4:c7:2d:8c:
         80:c5:fb:f8:1b:3f:be:47:96:13:8e:ed:63:83:bb:2c:6c:6b:
         87:05:b5:db:ad:7e:86:e4:8e:d0:df:b1:6d:86:cd:fd:7f:cc:
         fa:78:46:90:e4:81:0f:f2:cb:6d:54:a5:de:09:c7:9c:ce:ac:
         1d:3f:0d:a6:34:5d:1d:ad:05:d7:a4:c3:55:7a:1d:3a:2e:82:
         15:14:bd:72:32:c2:2e:d9:44:17:ea:c9:39:b6:8e:ce:9a:65:
         0a:ea:88:a9:b5:3e:b2:02:d8:63:06:57:2a:80:8c:e3:62:28:
         30:e8:1e:68:d5:68:30:24:23:0d:de:20:a8:bc:d2:f5:5c:db:
         60:6c:b2:88:9d:7d:4b:e3:db:51:15:77:29:a6:0f:91:49:57:
         01:83:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:13:23 2025 by rpki-client