This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/XnF1O1tH17U8vavVryrpuRod5Bw.roa
File:                     XnF1O1tH17U8vavVryrpuRod5Bw.roa (raw, json)
Hash identifier:          y3Qkt+7T0dpoSq61aviYDCfynRnDkEIu6UX/3q4znlE=
Subject key identifier:   5E:71:75:3B:5B:47:D7:B5:3C:BD:AB:D5:AF:2A:E9:B9:1A:1D:E4:1C
Certificate issuer:       /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial:       083E
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/XnF1O1tH17U8vavVryrpuRod5Bw.roa
Signing time:             Thu 06 Nov 2025 07:52:00 +0000
ROA not before:           Thu 06 Nov 2025 07:52:00 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9678
IP address blocks:        103.152.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110 (0x83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
        Validity
            Not Before: Nov  6 07:52:00 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5E71753B5B47D7B53CBDABD5AF2AE9B91A1DE41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:81:e0:18:55:41:ea:11:f1:ae:aa:97:75:8c:
                    7f:2d:71:24:54:92:a1:7c:67:43:24:e4:22:bb:bf:
                    b3:e1:68:69:59:99:f1:cd:68:1b:53:75:05:3a:42:
                    67:c6:8e:66:d2:c2:ee:96:b3:08:b5:75:00:a4:0f:
                    23:7f:78:cb:0c:78:60:02:c9:11:bf:de:63:12:af:
                    50:dd:a2:1a:3e:a3:85:80:c1:d2:e3:1b:2b:3f:f8:
                    28:9e:94:0a:f0:d7:fb:84:17:d5:41:c6:38:7f:de:
                    97:dc:d1:fd:2a:e5:a3:2e:3c:8e:57:9b:d5:1b:ff:
                    cf:94:69:1c:7f:56:0a:f1:39:4c:8e:33:c8:07:d8:
                    03:9a:d8:67:a6:0f:53:4a:a0:e8:30:80:ac:f7:f4:
                    61:23:ee:f1:cd:de:82:60:0c:06:d8:fe:53:d2:bd:
                    bc:2d:a8:e9:c1:48:a0:a9:50:0a:77:af:75:15:4e:
                    4a:58:90:21:a2:89:05:2c:9d:34:18:d0:77:fc:a1:
                    ef:ba:14:22:e0:04:e1:85:f6:6a:83:f8:8b:9a:a1:
                    e5:c9:81:5b:77:cd:55:1a:62:47:e2:3e:2d:42:05:
                    a1:21:d3:37:ff:df:0e:7f:2c:16:1e:30:08:10:c0:
                    fb:d2:08:2d:a2:5c:97:bc:bc:ff:82:e5:4d:b0:45:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:71:75:3B:5B:47:D7:B5:3C:BD:AB:D5:AF:2A:E9:B9:1A:1D:E4:1C
            X509v3 Authority Key Identifier:
                keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/XnF1O1tH17U8vavVryrpuRod5Bw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:34:dc:02:f3:3d:c4:d3:b5:51:ba:18:fe:85:f9:e7:65:c6:
         2c:aa:b0:d4:3c:37:eb:71:8e:7d:8a:3d:6e:3c:d9:7e:12:88:
         45:99:cf:4f:ba:2a:ef:ac:69:e6:3d:22:56:50:0b:74:4a:0c:
         1b:9b:70:e9:99:a0:14:50:12:85:2d:6c:2c:4c:1d:6b:f5:04:
         f0:df:d1:26:b3:76:5e:30:cf:a1:a0:cb:88:8a:43:3f:7b:a4:
         92:05:48:46:88:67:bb:91:1d:7a:b3:78:ca:01:cc:e3:3b:34:
         c4:83:af:07:8c:38:55:91:ad:d2:9d:d2:37:90:47:e9:35:d0:
         cc:05:c6:9b:fe:6f:0e:ea:a2:60:56:6b:20:c4:29:37:5b:ea:
         fe:17:82:c9:fa:65:83:42:5c:ca:2f:0d:79:3e:83:bf:e6:54:
         92:e9:c7:f4:4b:b1:4c:15:63:be:d0:de:15:d4:d2:0f:5a:0a:
         9d:d2:e3:31:c5:06:f2:36:92:16:65:f0:be:5d:d7:5a:49:1c:
         68:4e:9a:65:c6:f2:c7:df:7a:79:51:d5:de:fd:77:31:ae:61:
         c6:e5:4a:8c:32:21:7c:db:5a:e6:0d:d0:31:5a:97:80:4c:6e:
         8e:41:38:6c:dc:eb:be:7f:5e:9e:a4:b6:95:46:99:cb:57:2a:
         75:0b:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:22:04 2025 by rpki-client