This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/RgDkEMJCY2F7bV8VjoICZToB688.roa
File:                     RgDkEMJCY2F7bV8VjoICZToB688.roa (raw, json)
Hash identifier:          E2RdXlJxuyvbQvWR6/H6hDw0kPmP0eLvhwfTrzlQacI=
Subject key identifier:   46:00:E4:10:C2:42:63:61:7B:6D:5F:15:8E:82:02:65:3A:01:EB:CF
Certificate issuer:       /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF
Certificate serial:       0A3D
Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/RgDkEMJCY2F7bV8VjoICZToB688.roa
Signing time:             Mon 22 Dec 2025 10:32:24 +0000
ROA not before:           Mon 22 Dec 2025 10:32:24 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     203548
IP address blocks:        103.157.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2621 (0xa3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF
        Validity
            Not Before: Dec 22 10:32:24 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4600E410C24263617B6D5F158E8202653A01EBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:b7:4f:32:63:9d:76:5a:9a:ed:71:18:95:
                    c6:87:a7:d2:30:9c:66:5c:37:12:d2:97:01:24:38:
                    3f:50:5a:6a:4f:3c:8f:dd:cc:10:85:fa:a6:a1:85:
                    b2:9f:fc:15:5c:dd:b7:98:02:9c:46:65:ac:dc:95:
                    6b:c2:79:7e:25:a1:65:fc:00:99:5a:8e:cb:ea:be:
                    6f:74:f4:1f:4e:b9:dd:63:aa:d9:fd:48:d9:32:ca:
                    16:e4:1c:7e:04:4a:3c:f2:18:f5:d0:a8:4d:a2:56:
                    2b:ad:d6:f1:3e:6e:ea:3a:ee:10:a4:37:4a:92:c7:
                    24:82:54:9b:22:b3:59:b2:60:71:e0:f2:a4:ab:f4:
                    a2:7a:d1:7b:e0:8c:c7:e9:7c:29:97:47:35:f4:fb:
                    ce:43:b9:82:10:15:58:08:1b:3c:f0:73:37:fd:a4:
                    e2:40:a9:93:f9:71:9c:f5:e8:65:43:66:fb:2b:33:
                    21:b6:b6:2f:9c:5f:9a:15:93:36:72:9f:0f:33:d8:
                    24:9d:08:fe:c8:5a:72:18:0d:3d:10:66:7f:9d:e4:
                    48:68:92:85:18:95:61:20:13:33:1e:90:b5:eb:be:
                    45:8c:d6:3c:d3:d6:72:c1:1a:bd:1f:ec:ea:70:06:
                    20:a0:fe:3a:c1:5b:d8:b7:22:41:cf:92:2c:3d:fe:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:00:E4:10:C2:42:63:61:7B:6D:5F:15:8E:82:02:65:3A:01:EB:CF
            X509v3 Authority Key Identifier:
                keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/RgDkEMJCY2F7bV8VjoICZToB688.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:67:61:8f:07:b5:8a:72:e5:7a:4a:75:ad:f2:bc:a3:0b:e9:
         a1:f7:39:64:6f:18:12:4e:66:99:9e:7a:21:2f:94:69:6f:04:
         59:ed:d0:54:3c:af:b6:ca:f5:45:95:87:92:5c:49:d8:d8:bd:
         b5:30:5e:6a:2b:a9:6d:9f:73:37:ce:a4:04:54:7e:b1:2d:d8:
         30:cf:98:83:2d:70:34:18:fb:b7:22:30:78:01:9c:90:12:76:
         b3:63:fe:9f:f0:b2:fc:c4:74:b4:fc:39:d5:06:bc:6e:2a:e3:
         05:ad:c0:db:5f:ea:15:d8:fe:26:d1:1d:65:21:61:68:85:45:
         9b:5b:c7:a2:02:e0:38:44:5f:a6:46:79:db:0f:cc:a1:35:71:
         49:08:b4:51:a2:0d:47:ec:00:09:15:f8:eb:7b:13:6b:74:cd:
         8a:ce:d7:6b:c9:18:93:66:2a:a3:95:d8:8b:9b:5a:61:14:79:
         a7:5e:a3:e0:0a:1a:5c:a9:29:99:78:70:d2:90:f5:61:df:2c:
         0e:7c:0f:57:05:9a:b1:3e:9c:63:9a:66:b2:af:8b:ee:8c:39:
         77:4a:d5:13:db:1b:bd:ff:b8:46:78:d5:f9:ba:58:32:d2:ad:
         93:23:5b:37:f1:82:a3:58:3a:e5:54:c4:97:56:56:2b:d2:3e:
         bd:d8:d4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:01:35 2026 by rpki-client