This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NORDATW/mDQjt_emyadAlttOVDShKh1l_w0.roa
File:                     mDQjt_emyadAlttOVDShKh1l_w0.roa (raw, json)
Hash identifier:          zTtzqfvR/HuPjUJQKLdzAjzv3aTDx46mFFGsqZw9h0U=
Subject key identifier:   98:34:23:B7:F7:A6:C9:A7:40:96:DB:4E:54:34:A1:2A:1D:65:FF:0D
Certificate issuer:       /CN=159D5F897276F0DEC857E7E2DEDD649876E8A482
Certificate serial:       0F73
Authority key identifier: 15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/mDQjt_emyadAlttOVDShKh1l_w0.roa
Signing time:             Wed 03 Dec 2025 02:18:55 +0000
ROA not before:           Wed 03 Dec 2025 02:18:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     7483
IP address blocks:        211.79.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 06:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3955 (0xf73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159D5F897276F0DEC857E7E2DEDD649876E8A482
        Validity
            Not Before: Dec  3 02:18:55 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=983423B7F7A6C9A74096DB4E5434A12A1D65FF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a0:0f:b5:e0:45:7a:04:b0:c2:0d:89:7e:d5:
                    b8:88:fd:1c:8a:11:18:3b:f4:20:da:1b:81:c7:3d:
                    28:37:e8:fc:20:08:12:95:00:b2:3a:64:4b:6a:e2:
                    42:39:f4:16:c5:e6:36:40:45:18:df:04:c1:ff:61:
                    7c:23:b6:77:05:c9:fb:6f:44:ab:02:60:bd:73:e8:
                    b0:fb:a8:57:cb:50:91:7c:ce:4b:70:56:b5:40:f0:
                    97:cc:84:5c:6f:c0:34:f1:87:11:5e:3f:ad:84:75:
                    73:b7:8e:8c:05:3d:00:a1:bc:bc:cf:ef:08:1b:11:
                    7d:fc:32:9c:7a:56:5d:db:7d:6c:2f:7f:34:89:e1:
                    65:7f:a4:56:e3:93:2a:90:d6:3c:e1:ad:7b:d2:75:
                    3d:cb:58:ea:be:b7:6c:40:bb:81:df:3f:a5:70:64:
                    8f:64:a5:29:50:6d:25:a6:85:e0:7a:b9:e5:61:25:
                    0b:46:91:7a:ec:3a:64:cd:ec:20:2c:ee:a9:36:0c:
                    a4:f2:50:6b:a3:b0:0d:f6:21:f0:f4:51:db:86:ad:
                    64:cb:de:0a:7a:3a:09:af:e0:5e:9b:08:e6:2b:85:
                    81:4d:10:39:9f:fd:66:2a:74:48:7d:54:e9:ca:3e:
                    94:0f:96:bc:da:2c:59:d9:09:ec:f9:1a:26:73:fc:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:34:23:B7:F7:A6:C9:A7:40:96:DB:4E:54:34:A1:2A:1D:65:FF:0D
            X509v3 Authority Key Identifier:
                keyid:15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/mDQjt_emyadAlttOVDShKh1l_w0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:b3:fb:af:5b:e6:91:b1:5a:d4:15:a4:f5:e6:ba:39:35:fe:
         22:7c:6f:da:47:b5:eb:48:c0:c8:9a:09:f4:ab:af:e6:fe:9c:
         69:59:95:6d:81:7f:fe:ad:f0:18:ee:3c:dc:47:02:d2:41:a4:
         a5:79:7f:3d:50:85:d4:1d:6c:58:1e:82:54:fe:91:7a:e2:f9:
         22:39:0b:d0:56:94:37:90:fd:b6:e1:37:d0:4c:28:42:be:10:
         6c:99:10:73:52:f8:c2:25:c6:bb:c7:96:09:97:6a:bb:9b:f7:
         d1:65:d6:53:ec:97:2c:61:46:9e:75:ce:03:cb:c2:09:0a:25:
         5f:82:47:18:b0:27:35:77:95:72:8e:55:57:0d:99:f3:64:a5:
         1b:ad:30:57:95:a1:b3:52:df:32:dc:d9:68:ff:8a:04:0e:4b:
         31:6f:6c:73:3b:92:95:04:bf:41:74:51:8f:f7:37:d7:1f:ce:
         4d:c0:c6:34:ca:c3:48:91:f4:20:5e:33:56:ea:7c:02:e1:28:
         cd:17:a3:ba:46:35:a0:eb:e8:87:22:83:6d:f5:8f:84:78:19:
         21:f1:0e:c2:ed:74:1d:55:19:a0:40:14:b5:e7:ee:9e:c3:e1:
         7a:ed:77:d9:7b:eb:d8:f6:bd:ad:38:ce:4c:e1:7e:e2:e4:48:
         44:66:99:75
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD3MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTU5
RDVGODk3Mjc2RjBERUM4NTdFN0UyREVERDY0OTg3NkU4QTQ4MjAeFw0yNTEyMDMw
MjE4NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk4MzQyM0I3RjdBNkM5
QTc0MDk2REI0RTU0MzRBMTJBMUQ2NUZGMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmoA+14EV6BLDCDYl+1biI/RyKERg79CDaG4HHPSg36PwgCBKV
ALI6ZEtq4kI59BbF5jZARRjfBMH/YXwjtncFyftvRKsCYL1z6LD7qFfLUJF8zktw
VrVA8JfMhFxvwDTxhxFeP62EdXO3jowFPQChvLzP7wgbEX38Mpx6Vl3bfWwvfzSJ
4WV/pFbjkyqQ1jzhrXvSdT3LWOq+t2xAu4HfP6VwZI9kpSlQbSWmheB6ueVhJQtG
kXrsOmTN7CAs7qk2DKTyUGujsA32IfD0UduGrWTL3gp6Ogmv4F6bCOYrhYFNEDmf
/WYqdEh9VOnKPpQPlrzaLFnZCez5GiZz/BBBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUmDQjt/emyadAlttOVDShKh1l/w0wHwYDVR0jBBgwFoAUFZ1fiXJ28N7IV+fi
3t1kmHbopIIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTk9SREFU
Vy9GWjFmaVhKMjhON0lWLWZpM3Qxa21IYm9wSUkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0ZaMWZpWEoyOE43SVYtZmkzdDFrbUhib3BJSS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05PUkRBVFcvbURRanRfZW15YWRBbHR0
T1ZEU2hLaDFsX3cwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AdNPYjANBgkqhkiG9w0BAQsFAAOCAQEAAbP7r1vmkbFa1BWk9ea6OTX+Inxv2ke1
60jAyJoJ9Kuv5v6caVmVbYF//q3wGO483EcC0kGkpXl/PVCF1B1sWB6CVP6ReuL5
IjkL0FaUN5D9tuE30EwoQr4QbJkQc1L4wiXGu8eWCZdqu5v30WXWU+yXLGFGnnXO
A8vCCQolX4JHGLAnNXeVco5VVw2Z82SlG60wV5Whs1LfMtzZaP+KBA5LMW9sczuS
lQS/QXRRj/c31x/OTcDGNMrDSJH0IF4zVup8AuEozRejukY1oOvohyKDbfWPhHgZ
IfEOwu10HVUZoEAUtefunsPheu132Xvr2Pa9rTjOTOF+4uRIRGaZdQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:15:21 2025 by rpki-client