This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/wsFCjID3MoLi4iRC3N9Sh7eOsWo.roa
File:                     wsFCjID3MoLi4iRC3N9Sh7eOsWo.roa (raw, json)
Hash identifier:          rWS+6ET9NlCc/kZq3M4ORh+xvVgimlvTVS/h/1Y2SIU=
Subject key identifier:   C2:C1:42:8C:80:F7:32:82:E2:E2:24:42:DC:DF:52:87:B7:8E:B1:6A
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       12DE
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wsFCjID3MoLi4iRC3N9Sh7eOsWo.roa
Signing time:             Fri 21 Nov 2025 03:20:05 +0000
ROA not before:           Fri 21 Nov 2025 03:20:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4780
IP address blocks:        119.15.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4830 (0x12de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 21 03:20:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C2C1428C80F73282E2E22442DCDF5287B78EB16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fc:25:a7:4d:80:7d:b5:53:cc:0c:aa:7a:b3:
                    1b:bc:90:42:47:e1:7b:c1:f2:ad:8d:5b:8e:fc:3c:
                    77:78:3d:39:b6:b2:ef:13:80:2e:42:4a:9a:fe:42:
                    e9:77:35:ec:d2:6a:c1:3f:cb:a7:fb:23:cf:66:0f:
                    10:44:38:b3:fe:3d:86:67:83:16:9a:23:f4:25:12:
                    02:a9:2d:14:57:07:aa:7a:35:94:b4:32:f9:aa:7b:
                    41:dc:1b:2c:1e:fb:f7:a0:3a:85:d8:33:6d:47:01:
                    a9:a8:bf:1c:99:65:ff:f7:25:33:42:90:35:26:50:
                    98:df:5b:32:1e:97:07:99:da:5b:6a:13:a4:c2:d3:
                    a1:99:f8:d3:9d:89:17:df:36:c3:f5:a3:1d:2d:33:
                    ec:a5:86:46:b4:00:f3:30:f1:f0:20:af:a2:a8:db:
                    5e:cd:d4:f5:bb:52:6d:53:56:42:6c:7d:c6:fc:5c:
                    34:ba:b4:6c:34:47:a6:5b:37:f0:d6:62:7d:33:06:
                    7f:94:21:c6:6c:70:68:d5:e4:87:54:8d:8c:51:81:
                    66:42:5c:25:15:82:eb:48:be:b7:36:73:0c:82:0b:
                    00:0f:23:87:e1:c6:a4:4f:d2:a8:da:4a:8c:75:9e:
                    da:99:36:b7:07:be:6b:83:ff:28:fd:de:05:f3:20:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C1:42:8C:80:F7:32:82:E2:E2:24:42:DC:DF:52:87:B7:8E:B1:6A
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wsFCjID3MoLi4iRC3N9Sh7eOsWo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         98:5e:4c:b9:38:92:e5:1b:65:b4:19:8f:d8:ff:bd:0b:b5:04:
         43:a9:12:72:1f:9f:60:e8:53:6f:04:76:14:d2:17:0b:1d:f0:
         cb:aa:3d:37:6f:05:aa:9b:0e:16:9a:51:46:16:38:0c:ba:a4:
         17:49:d0:aa:5e:03:60:62:77:35:e9:94:a9:4e:d0:f0:d3:15:
         8c:d8:62:56:d0:ac:4b:77:0c:3f:4f:b9:d9:dc:1f:1c:74:24:
         b5:35:af:43:35:54:8a:76:9f:fb:7a:e0:d6:01:a2:a9:e5:69:
         f3:f1:98:09:29:da:46:e2:9b:ba:8f:db:33:57:88:06:bf:ca:
         a6:94:d1:d1:b4:c2:a9:e7:57:5c:86:65:b4:83:29:46:34:5d:
         cb:7f:74:7b:76:ff:21:38:44:09:4c:81:48:50:46:4a:90:7f:
         d6:de:ba:e1:5f:9b:53:05:24:e3:04:7d:84:6f:e5:f6:63:3d:
         38:7b:9d:f5:c9:ed:4b:07:4f:db:d4:8d:0d:fe:cd:07:07:66:
         9a:d9:04:b5:5b:04:d1:57:18:4e:9e:71:73:2c:bc:42:57:73:
         a2:44:eb:05:b6:4f:4b:b1:82:14:c0:47:9c:fb:f0:62:a1:f9:
         9f:7d:02:34:fe:cd:18:b4:7c:d6:5f:27:dd:d7:f2:eb:88:3c:
         20:9d:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:32:25 2025 by rpki-client