This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/wYxaUSpGvvt8tsohr44jG1oOc-Y.roa
File:                     wYxaUSpGvvt8tsohr44jG1oOc-Y.roa (raw, json)
Hash identifier:          LwRe7T2NX12pYI+3kX+7+VF/LaPazEaicoXgm5LSh40=
Subject key identifier:   C1:8C:5A:51:2A:46:BE:FB:7C:B6:CA:21:AF:8E:23:1B:5A:0E:73:E6
Certificate issuer:       /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Certificate serial:       04BE
Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/wYxaUSpGvvt8tsohr44jG1oOc-Y.roa
Signing time:             Wed 03 Dec 2025 02:15:13 +0000
ROA not before:           Wed 03 Dec 2025 02:15:13 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     7483
IP address blocks:        211.79.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
        Validity
            Not Before: Dec  3 02:15:13 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C18C5A512A46BEFB7CB6CA21AF8E231B5A0E73E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:a8:37:1f:01:d9:ad:c5:43:6c:1c:27:ce:
                    2a:77:6f:90:9a:3e:f8:72:79:65:4e:9b:71:e0:ea:
                    f2:fb:ab:cf:41:4a:da:55:1b:e9:92:71:b5:5b:7f:
                    01:0b:44:cf:30:fd:02:84:7b:2c:4d:d9:ba:c4:e4:
                    76:f9:ec:e4:bc:32:83:e5:f2:3b:46:c8:1e:13:15:
                    61:9c:0e:0b:79:51:08:87:99:d1:04:74:d8:9a:68:
                    23:13:a5:74:64:aa:3c:47:23:f7:f2:d4:64:43:a3:
                    ca:01:f0:91:64:37:34:4c:1d:f9:af:4d:7f:86:7c:
                    86:5e:dc:83:ed:e1:02:af:d7:58:4c:d8:34:0b:c7:
                    6e:86:6a:a5:2a:fe:a3:82:cd:74:28:5a:be:01:d6:
                    0a:8c:0a:37:17:7b:d3:5e:37:a5:6f:76:bd:1d:b2:
                    3f:12:84:fc:7d:c1:5c:0f:6b:ec:fd:b9:b2:bb:d7:
                    eb:0f:e1:f1:52:db:86:7f:14:07:7e:9a:95:62:06:
                    74:f6:64:1e:fe:47:3e:c0:0d:fa:f0:8e:fc:5f:3a:
                    a1:37:e7:96:02:67:96:94:67:f2:a8:73:25:82:5c:
                    74:ab:05:fb:c2:6c:c1:cd:43:b1:08:18:3c:2c:97:
                    7c:ba:07:eb:e2:d1:fa:d5:82:6f:46:68:4f:1e:25:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8C:5A:51:2A:46:BE:FB:7C:B6:CA:21:AF:8E:23:1B:5A:0E:73:E6
            X509v3 Authority Key Identifier:
                keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/wYxaUSpGvvt8tsohr44jG1oOc-Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:ac:3a:e5:9d:da:18:fb:19:5d:0c:3f:b6:16:ea:6f:ba:11:
         a1:10:fa:ab:24:25:be:23:be:33:fc:c7:fe:02:64:7c:31:83:
         13:2a:99:b1:33:a2:d9:d3:44:a5:49:58:a3:b0:e2:b0:f9:36:
         50:8e:b0:27:b5:b9:65:32:9b:38:9f:9b:80:49:7f:fe:86:21:
         1a:c1:51:23:ae:2b:34:4a:0c:83:2a:9d:cd:45:45:b8:a2:3f:
         93:a3:30:d9:1c:2b:48:71:f8:d3:39:a3:fc:ec:f6:7f:e3:5c:
         35:8f:04:15:22:e1:11:32:6f:7c:65:b9:c8:7a:dc:0b:f7:73:
         ad:36:23:51:94:65:62:c0:9d:04:b3:b7:3a:1e:cf:7a:91:35:
         8f:27:87:d2:00:27:9f:9a:0a:c0:cd:37:75:1f:f2:42:21:0b:
         68:68:80:b2:2b:14:06:81:4c:f0:4e:10:f4:cc:52:b3:af:0e:
         c2:7f:ea:54:ff:f7:7e:41:13:55:4e:c1:2c:09:87:26:c8:68:
         cb:eb:0e:65:f3:1f:02:16:fb:e4:b4:c5:2b:23:d8:b3:ac:00:
         ca:c1:a6:6b:dc:39:1c:0e:e5:0a:b5:b1:9f:d1:56:77:f3:ff:
         4d:b0:7b:1a:b3:72:53:c0:fd:8e:08:7f:33:9f:87:3c:81:cf:
         a7:5a:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:39:37 2025 by rpki-client