This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/CmaGQ5SMZn8nQAcknXJyHMy9BhM.roa
File:                     CmaGQ5SMZn8nQAcknXJyHMy9BhM.roa (raw, json)
Hash identifier:          CWm/rX08j0OB5iYdzfgpLagJm9TVD0g55Ez5w9dVb2c=
Subject key identifier:   0A:66:86:43:94:8C:66:7F:27:40:07:24:9D:72:72:1C:CC:BD:06:13
Certificate issuer:       /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Certificate serial:       04DA
Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/CmaGQ5SMZn8nQAcknXJyHMy9BhM.roa
Signing time:             Mon 12 Jan 2026 03:59:49 +0000
ROA not before:           Mon 12 Jan 2026 03:59:49 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     7538
IP address blocks:        103.170.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 04:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
        Validity
            Not Before: Jan 12 03:59:49 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0A668643948C667F274007249D72721CCCBD0613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:c3:b2:f3:27:a1:d9:bd:e6:1b:61:ca:dd:
                    1d:f7:8e:eb:17:72:5c:52:e1:d0:9a:1b:12:68:78:
                    b8:dc:cd:f2:4b:45:bf:61:75:72:14:a9:68:83:fa:
                    4c:68:8f:aa:90:81:8b:8a:88:66:bf:52:33:b0:27:
                    d5:01:fc:40:bf:e2:1a:90:82:1e:56:9e:fe:66:e0:
                    c9:6b:dd:d8:b2:84:e8:06:53:33:bd:b2:d4:a5:66:
                    5c:ee:3f:6c:33:68:01:25:20:b5:6b:92:9d:24:84:
                    e1:5d:66:24:ba:88:25:73:07:cb:34:57:78:4e:c7:
                    c0:4a:da:66:e1:27:54:7b:67:7a:a4:d9:5a:f5:b3:
                    98:be:8b:4a:63:d4:ca:c0:66:88:69:f4:03:33:02:
                    c3:43:38:01:8c:07:5f:4b:b0:15:ca:4a:de:1a:64:
                    77:69:2e:7e:8c:e1:24:ff:fe:59:1d:54:ee:04:47:
                    ae:42:28:13:c8:c1:a7:5f:56:34:c0:48:87:e6:03:
                    28:31:9e:f1:fc:6b:7f:7e:2f:c6:75:5e:05:dc:0d:
                    82:d1:18:32:b9:7a:a4:74:ca:e6:be:59:77:be:50:
                    e1:b4:03:3a:01:e8:f1:2d:17:27:30:26:f1:98:3f:
                    91:65:05:93:a0:b9:37:b9:06:ae:16:5a:37:68:5f:
                    97:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:66:86:43:94:8C:66:7F:27:40:07:24:9D:72:72:1C:CC:BD:06:13
            X509v3 Authority Key Identifier:
                keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/CmaGQ5SMZn8nQAcknXJyHMy9BhM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:9d:bb:af:87:3c:20:8e:37:ee:09:03:2f:87:96:01:0f:97:
         22:0e:3e:b2:75:8a:f7:0f:3a:72:7d:01:4b:13:08:3d:e6:3a:
         99:c3:00:86:57:a2:8c:07:da:be:50:60:fe:38:8c:ae:7d:5d:
         d8:48:d3:9e:57:d2:18:cd:07:de:1d:4d:e7:28:f3:30:ba:42:
         09:de:cc:f8:7a:c5:11:59:fa:a7:3e:61:d2:dc:11:cb:26:54:
         3d:60:16:07:0c:87:9d:e3:b2:22:45:16:17:e9:61:51:45:d8:
         7e:2c:c1:d5:ef:d9:44:8b:9f:ff:58:39:69:13:4e:82:18:58:
         94:07:99:53:b3:cc:53:ba:51:86:92:69:b9:dd:30:aa:83:8e:
         b5:7c:01:dd:49:ed:69:a0:1e:a0:e5:35:30:d6:74:75:f0:40:
         1b:39:de:f3:16:de:4a:3b:28:dd:22:38:76:8a:61:e0:87:b2:
         38:c6:66:0b:0d:fe:8c:a7:50:56:c0:f7:ee:4b:bd:98:ce:2f:
         67:f6:16:e8:48:9c:54:04:e1:74:9a:cb:6e:e4:c8:fa:36:08:
         e5:75:d6:57:cd:65:62:a3:c9:0c:ff:d3:e4:b7:d1:52:d5:a6:
         93:6e:fc:eb:2c:61:93:d3:da:e4:2d:97:da:95:3f:df:88:57:
         27:f7:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:13:51 2026 by rpki-client