This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMYKL/qgOaViPcN4L98yRIgFSn3HaTGYs.roa
File:                     qgOaViPcN4L98yRIgFSn3HaTGYs.roa (raw, json)
Hash identifier:          K+EL15c28hgV4Cb0fsTmZSWErMzggQc9YUvFN73g1m4=
Subject key identifier:   AA:03:9A:56:23:DC:37:82:FD:F3:24:48:80:54:A7:DC:76:93:19:8B
Certificate issuer:       /CN=9A0CC0BB631D15131023849083D941A2DBCDFA65
Certificate serial:       03C8
Authority key identifier: 9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/qgOaViPcN4L98yRIgFSn3HaTGYs.roa
Signing time:             Fri 16 Jan 2026 03:26:30 +0000
ROA not before:           Fri 16 Jan 2026 03:26:30 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38042
IP address blocks:        160.191.4.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968 (0x3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0CC0BB631D15131023849083D941A2DBCDFA65
        Validity
            Not Before: Jan 16 03:26:30 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AA039A5623DC3782FDF324488054A7DC7693198B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:42:80:bb:a9:b4:d8:7b:72:76:ce:37:b7:
                    08:e4:09:c1:09:50:61:02:64:2e:b7:c5:cf:4f:8f:
                    50:91:d7:5f:cc:8c:f9:21:ca:17:ef:b5:94:92:42:
                    db:6b:09:8d:58:d4:52:56:3c:f2:e5:53:c0:96:40:
                    8b:db:8c:c1:56:12:e1:c3:62:12:5a:c3:3d:a9:62:
                    09:be:48:29:10:1b:e6:04:f9:0a:f0:01:1d:68:ca:
                    33:53:81:c7:62:23:68:aa:2b:82:d8:a5:9d:64:fe:
                    48:82:22:59:e6:54:4e:78:2a:69:82:e4:a0:4e:d6:
                    59:2c:29:3f:73:f7:60:27:04:e0:98:e9:91:79:b7:
                    20:fe:f9:6d:ab:21:5e:22:ce:95:37:de:c5:e8:4f:
                    23:54:8c:1f:93:65:b7:3b:e7:53:78:c6:80:95:ea:
                    3d:be:45:1c:8a:09:35:18:75:d2:d3:cf:43:6a:85:
                    87:6b:10:d4:97:71:91:39:b5:8f:00:96:c8:90:8d:
                    05:1f:51:a1:d2:39:4f:41:b9:2c:2f:cf:78:29:98:
                    45:7e:4c:d6:db:64:5e:b8:6b:d1:99:d2:2c:8c:b6:
                    6a:72:50:70:fb:41:bc:e4:c0:43:52:b5:7e:6e:da:
                    c7:4a:68:f0:18:71:e6:bf:70:22:f6:21:8b:54:00:
                    d8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:03:9A:56:23:DC:37:82:FD:F3:24:48:80:54:A7:DC:76:93:19:8B
            X509v3 Authority Key Identifier:
                keyid:9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/qgOaViPcN4L98yRIgFSn3HaTGYs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:07:39:3b:4a:ba:cd:4a:75:f8:57:b1:f3:b0:41:12:37:
         2d:e9:bd:d9:1a:52:96:82:7e:23:3f:ae:77:61:81:e7:c6:65:
         ce:37:38:24:c2:fb:d9:d1:c3:05:7a:77:ee:1a:58:45:ed:a5:
         29:42:ba:b7:88:f5:82:e5:85:6a:09:fe:46:4f:70:a1:c0:8f:
         d2:f4:0c:06:7a:f0:19:a6:36:28:fa:a2:9b:84:f5:59:56:c3:
         ba:12:46:98:25:db:8e:9c:da:37:07:b3:85:4f:86:85:c6:ed:
         78:5c:2e:59:60:99:0b:77:bb:8c:03:67:1d:22:6c:6d:29:c7:
         08:a3:73:f1:2b:9b:42:f8:03:92:4a:e7:85:73:e2:42:90:72:
         b0:56:81:19:82:7d:99:c3:18:0e:48:3c:8d:7e:83:7b:89:75:
         9e:45:aa:60:a5:b2:cf:f6:6e:ce:1a:a7:2c:36:02:c9:a7:24:
         e6:cf:bc:10:61:dd:ad:07:8a:a1:0d:b6:03:25:80:ec:cc:e1:
         05:74:09:07:87:25:77:dd:2e:79:d9:f2:70:06:9a:c3:85:19:
         ed:81:f3:08:64:b7:fa:6b:01:a5:04:f9:33:ca:d2:58:07:84:
         e2:6c:25:b5:86:22:25:74:0a:07:42:52:09:29:a7:5a:e0:f6:
         ca:96:48:08
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEw
Q0MwQkI2MzFEMTUxMzEwMjM4NDkwODNEOTQxQTJEQkNERkE2NTAeFw0yNjAxMTYw
MzI2MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFBMDM5QTU2MjNEQzM3
ODJGREYzMjQ0ODgwNTRBN0RDNzY5MzE5OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHgEKAu6m02Htyds43twjkCcEJUGECZC63xc9Pj1CR11/MjPkh
yhfvtZSSQttrCY1Y1FJWPPLlU8CWQIvbjMFWEuHDYhJawz2pYgm+SCkQG+YE+Qrw
AR1oyjNTgcdiI2iqK4LYpZ1k/kiCIlnmVE54KmmC5KBO1lksKT9z92AnBOCY6ZF5
tyD++W2rIV4izpU33sXoTyNUjB+TZbc751N4xoCV6j2+RRyKCTUYddLTz0NqhYdr
ENSXcZE5tY8AlsiQjQUfUaHSOU9BuSwvz3gpmEV+TNbbZF64a9GZ0iyMtmpyUHD7
QbzkwENStX5u2sdKaPAYcea/cCL2IYtUANizAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUqgOaViPcN4L98yRIgFSn3HaTGYswHwYDVR0jBBgwFoAUmgzAu2MdFRMQI4SQ
g9lBotvN+mUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1ZS0wv
bWd6QXUyTWRGUk1RSTRTUWc5bEJvdHZOLW1VLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9tZ3pBdTJNZEZSTVFJNFNRZzlsQm90dk4tbVUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTVlLTC9xZ09hVmlQY040TDk4eVJJZ0ZT
bjNIYVRHWXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoL8E
MA0GCSqGSIb3DQEBCwUAA4IBAQCODgc5O0q6zUp1+Fex87BBEjct6b3ZGlKWgn4j
P653YYHnxmXONzgkwvvZ0cMFenfuGlhF7aUpQrq3iPWC5YVqCf5GT3ChwI/S9AwG
evAZpjYo+qKbhPVZVsO6EkaYJduOnNo3B7OFT4aFxu14XC5ZYJkLd7uMA2cdImxt
KccIo3PxK5tC+AOSSueFc+JCkHKwVoEZgn2ZwxgOSDyNfoN7iXWeRapgpbLP9m7O
GqcsNgLJpyTmz7wQYd2tB4qhDbYDJYDszOEFdAkHhyV33S552fJwBprDhRntgfMI
ZLf6awGlBPkzytJYB4TibCW1hiIldAoHQlIJKada4PbKlkgI
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:48:50 2026 by rpki-client