This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JMDs9V_S-Ieqt93QoYID2QoUDCw.roa
File:                     JMDs9V_S-Ieqt93QoYID2QoUDCw.roa (raw, json)
Hash identifier:          9pYDcKfL7N1nsEl+WRfc0iD215awSj+ufvOJ4HVexS8=
Subject key identifier:   24:C0:EC:F5:5F:D2:F8:87:AA:B7:DD:D0:A1:82:03:D9:0A:14:0C:2C
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       08FE
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JMDs9V_S-Ieqt93QoYID2QoUDCw.roa
Signing time:             Wed 19 Nov 2025 06:52:42 +0000
ROA not before:           Wed 19 Nov 2025 06:52:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131657
IP address blocks:        2406:48c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Nov 19 06:52:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=24C0ECF55FD2F887AAB7DDD0A18203D90A140C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:17:d9:d9:5c:20:57:97:77:a6:e4:e1:58:60:
                    e5:3e:d3:a0:29:0b:01:5f:6c:0b:58:37:5c:27:6c:
                    1e:99:11:e1:82:0c:2e:1f:4e:49:4a:ed:56:c2:43:
                    3b:2d:cb:f8:0e:d2:9a:f5:21:dd:b7:83:cd:95:c3:
                    69:63:92:ec:00:f3:ef:cb:c0:4b:2a:be:bc:59:79:
                    76:81:87:65:10:77:6b:ce:e4:bf:60:c1:a2:38:53:
                    a2:14:29:84:9e:ce:fb:3b:d8:e3:ca:fa:a7:a3:81:
                    61:0d:73:92:96:0c:0b:c2:07:f5:09:b9:ac:1a:3e:
                    79:c3:22:8d:59:1e:1c:45:a0:46:05:00:ea:7a:76:
                    12:87:d5:cf:bc:03:85:26:99:a1:14:9e:8d:0f:55:
                    81:68:08:0e:b5:6a:8c:71:ba:5c:0b:d5:eb:95:87:
                    b4:ce:6e:3f:6c:f1:1c:59:ed:da:f1:13:d4:fc:75:
                    9d:3a:b5:c4:ce:d6:4c:cd:c6:02:ec:26:d9:8a:e3:
                    90:1e:56:d4:f3:8f:39:08:eb:cf:aa:bb:f1:ae:b3:
                    2c:e0:af:3b:43:ba:d7:3b:b1:7f:25:9a:74:44:90:
                    42:96:2e:1e:b9:8b:1e:43:07:e1:1b:38:c2:7e:ee:
                    6c:a3:a1:14:02:87:3d:e6:56:93:88:6c:72:fb:b5:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C0:EC:F5:5F:D2:F8:87:AA:B7:DD:D0:A1:82:03:D9:0A:14:0C:2C
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JMDs9V_S-Ieqt93QoYID2QoUDCw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:44:e3:df:e7:50:b3:3f:cb:db:56:b9:9f:2b:47:9a:99:ed:
         21:b4:14:c5:e3:fe:80:50:d1:7e:e6:8d:cf:30:21:6d:18:52:
         11:19:52:e7:ab:83:fa:b7:0e:d6:dd:87:0f:82:27:43:6f:1b:
         7b:fb:05:c1:e4:ce:52:a8:27:a6:09:19:02:57:77:6d:8f:bb:
         a4:9b:75:e0:4d:93:99:4c:fc:1a:68:c8:6c:01:ef:a3:54:2e:
         fb:68:7a:b2:3c:5f:de:49:f0:ab:78:2d:61:97:3b:59:bb:c4:
         33:8c:ee:df:0f:6a:77:d0:db:b9:3b:5f:33:db:44:40:4d:8b:
         70:68:d1:f6:4f:00:9f:7f:75:3b:cc:9c:dd:d1:b0:f8:eb:01:
         6e:12:2c:ed:08:e7:95:0e:5d:f5:2c:6d:ba:4a:12:f9:a2:73:
         99:55:70:22:85:59:2a:14:a6:49:6a:d0:c1:b1:d4:b0:eb:dc:
         ea:df:b1:be:d7:9e:f3:a3:cf:63:f5:9d:58:d1:e5:82:14:27:
         1c:2c:32:22:3f:93:1d:6b:6f:29:41:a0:e0:17:88:df:29:07:
         a9:b5:69:43:3c:2d:bb:5d:2c:e4:d2:c6:7c:05:7a:73:ab:bd:
         b9:25:3d:78:72:4d:fa:14:38:8d:95:1c:d8:9f:cc:88:98:ea:
         b2:b8:dd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:48:23 2025 by rpki-client