This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/HUFHAC8e6ei26OTysq4iMSJmzek.roa
File:                     HUFHAC8e6ei26OTysq4iMSJmzek.roa (raw, json)
Hash identifier:          uK74mTjIvJozmOBWkEB/b48x/k5/7RaYYDHkuMqEJro=
Subject key identifier:   1D:41:47:00:2F:1E:E9:E8:B6:E8:E4:F2:B2:AE:22:31:22:66:CD:E9
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0EB1
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/HUFHAC8e6ei26OTysq4iMSJmzek.roa
Signing time:             Tue 02 Dec 2025 02:40:35 +0000
ROA not before:           Tue 02 Dec 2025 02:40:35 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9676
IP address blocks:        150.107.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3761 (0xeb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Dec  2 02:40:35 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1D4147002F1EE9E8B6E8E4F2B2AE22312266CDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:25:c4:85:c5:4e:09:55:09:42:44:8a:7f:7a:
                    64:64:bb:3c:df:02:2c:c8:95:24:51:ae:e9:46:58:
                    07:97:8e:9e:5f:a7:f3:45:b6:83:73:85:fe:77:b2:
                    ed:0f:97:4d:04:8e:b5:7f:f8:15:d4:98:af:a4:2c:
                    69:67:b5:03:9f:2c:84:d4:ca:2e:43:d1:28:a2:bb:
                    31:d8:d6:81:5b:b1:b4:68:69:64:57:52:3f:2c:91:
                    96:7c:79:d8:c7:40:84:98:82:b4:56:9e:69:26:55:
                    5c:d3:0c:ff:d9:bd:09:d3:b9:75:f5:ec:96:52:d0:
                    fb:3a:76:aa:32:dd:90:ad:6b:fe:f4:03:f2:9c:56:
                    38:f4:e7:0e:a9:56:ba:20:3e:08:3c:a1:87:74:98:
                    5f:06:09:57:4c:a6:03:92:45:3a:43:9f:dc:86:6c:
                    97:ad:f8:8d:4e:70:3f:7d:ca:36:35:8b:ba:b3:fe:
                    98:4d:46:9e:32:39:1a:67:39:9e:af:e9:47:48:ab:
                    60:18:ea:4e:72:cd:79:bb:99:a6:68:bc:53:11:c3:
                    bb:b1:c8:32:0b:be:83:c2:6c:63:74:75:94:6e:af:
                    45:94:28:af:89:31:06:db:ec:4b:8f:8a:cd:a6:32:
                    3f:29:36:fc:00:6f:4b:11:94:ce:16:bc:f7:43:a8:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:41:47:00:2F:1E:E9:E8:B6:E8:E4:F2:B2:AE:22:31:22:66:CD:E9
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/HUFHAC8e6ei26OTysq4iMSJmzek.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:e8:d7:28:f2:7e:3b:53:55:ff:3a:cd:c2:ac:44:87:62:
         99:1e:0b:ee:b4:6b:e8:ca:40:ca:cc:8f:e0:66:93:8f:8b:45:
         7d:75:60:c0:2b:7a:c5:b7:44:26:cf:cc:ed:76:53:82:b3:76:
         dd:1b:a2:4f:fc:41:2f:0b:6b:ce:5b:da:8f:a1:1a:02:f5:dc:
         bc:0d:dd:12:98:f6:af:35:35:fb:e5:be:e2:ad:98:3e:74:a0:
         20:1b:d4:45:a5:ae:f0:d3:78:25:b9:6f:dd:58:e3:d9:39:0c:
         5b:b9:b3:f2:43:56:86:77:e1:e7:51:98:f2:c0:9d:47:b7:22:
         aa:8e:05:06:bf:14:03:6a:30:3c:80:16:7e:83:10:e1:22:fb:
         23:a2:8b:43:b1:e8:61:29:56:26:a2:64:98:56:cc:f1:38:ad:
         6f:23:0d:3a:30:01:3f:7e:0e:e6:7b:d8:4f:6f:56:6a:c3:62:
         c7:d9:0a:7d:c1:9f:fd:5c:a4:3a:a1:91:4a:fc:d4:f1:80:80:
         01:5f:5b:ce:2e:5e:97:ab:56:9b:48:38:4f:b1:4c:4e:a6:88:
         db:39:ec:da:9a:29:f6:bb:41:c2:ab:a3:cc:8d:da:b8:fb:db:
         79:a8:cc:df:e1:43:49:5d:9d:7c:8d:14:a2:fb:d5:e2:4f:8d:
         fd:dd:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:41:10 2025 by rpki-client