This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/SzPtTUKApGxfIUWICcjp_6aEufI.roa
File:                     SzPtTUKApGxfIUWICcjp_6aEufI.roa (raw, json)
Hash identifier:          J+pro18vOxRpHP6KCnmNz91O+wAyDV9FPH2X2JslvoM=
Subject key identifier:   4B:33:ED:4D:42:80:A4:6C:5F:21:45:88:09:C8:E9:FF:A6:84:B9:F2
Certificate issuer:       /CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Certificate serial:       056F
Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/SzPtTUKApGxfIUWICcjp_6aEufI.roa
Signing time:             Tue 20 Jan 2026 05:42:33 +0000
ROA not before:           Tue 20 Jan 2026 05:42:33 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     31972
IP address blocks:        211.79.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 14:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902
        Validity
            Not Before: Jan 20 05:42:33 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4B33ED4D4280A46C5F21458809C8E9FFA684B9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:db:a6:38:a8:56:ab:08:21:a7:32:0e:56:
                    d2:27:78:60:39:34:9b:a7:8f:1c:66:f0:f5:b8:fc:
                    41:6c:26:4d:3b:08:d8:af:10:ad:81:66:70:67:c3:
                    4f:11:3c:70:3b:ba:e7:93:0e:a3:70:22:13:d6:49:
                    dc:ed:28:fb:62:bb:24:4c:f0:88:5e:f8:f6:b2:0c:
                    ee:bf:49:73:89:51:43:8b:a6:51:71:9a:44:22:1c:
                    76:c3:14:e8:80:6c:d3:39:5a:70:e8:db:94:c4:47:
                    d6:c2:6a:70:78:59:ba:65:f9:06:38:f4:f0:e2:82:
                    ae:22:70:bd:62:94:3c:c6:49:fd:bf:57:f8:27:bb:
                    1e:66:27:1e:d8:e6:35:25:d8:fa:41:08:bc:cc:b2:
                    af:81:cf:8b:29:2c:81:68:44:e0:24:20:a6:c5:3e:
                    cf:49:eb:e1:df:65:fe:4b:f0:a0:ac:83:e1:b0:3a:
                    d1:45:de:0c:ba:47:19:3e:24:0f:73:56:16:61:35:
                    5b:e3:dd:20:d0:cd:ef:f7:43:10:dd:6c:f2:6e:32:
                    99:bb:db:ea:57:61:de:df:f5:94:56:18:3b:cd:36:
                    ed:e9:60:39:c9:79:e1:6c:00:33:1c:a4:d7:c8:a4:
                    27:df:78:f8:0d:78:b4:ad:d6:51:6d:77:8e:4a:21:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:33:ED:4D:42:80:A4:6C:5F:21:45:88:09:C8:E9:FF:A6:84:B9:F2
            X509v3 Authority Key Identifier:
                keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/SzPtTUKApGxfIUWICcjp_6aEufI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:9e:61:59:d9:64:8f:f9:aa:9a:a0:ea:fb:f9:f3:d6:aa:
         66:41:11:a3:54:a2:0e:53:c1:31:55:fb:ff:fe:69:ef:7d:d0:
         93:a2:b3:9c:76:e4:3e:28:87:1a:68:56:46:0e:71:b0:15:65:
         2a:3d:86:a8:7a:bc:24:89:ed:07:59:53:65:04:9c:f3:a0:39:
         06:71:2c:29:62:82:05:1b:42:05:c5:d1:9c:76:ec:bb:5c:f5:
         1d:47:79:b9:17:9b:7f:3f:76:e7:90:40:c0:da:da:b3:5c:5c:
         86:12:bc:47:06:7e:3f:8b:5f:2c:05:7c:53:c8:5f:7e:24:2b:
         cf:4d:09:d8:cd:dd:10:37:e3:a5:c2:d3:71:b6:be:30:95:99:
         7e:63:d8:07:b5:41:fc:88:4f:9f:77:b0:3a:d6:c3:7c:22:63:
         90:95:34:0a:ce:a7:e5:cd:6f:d6:ac:87:90:31:4f:f3:be:06:
         46:ca:81:17:f6:26:5b:e6:8d:e2:e4:79:63:e1:1c:5c:49:ec:
         1e:73:8c:97:f8:ac:85:d5:6d:c2:a1:20:75:75:4d:6b:dd:0e:
         62:1f:d9:5b:76:2b:1c:d4:fe:95:74:8f:d8:eb:ad:7e:97:74:
         3c:7e:8c:1c:18:1f:cc:9a:53:15:75:f0:45:f7:54:99:b2:ff:
         67:6f:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:29:36 2026 by rpki-client