This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/qEJVWpWmJJrNCizVxdw_eM9c950.roa
File:                     qEJVWpWmJJrNCizVxdw_eM9c950.roa (raw, json)
Hash identifier:          Zuwa9IoZAqG1EtrmcLuUZYEZN0l6kbBV+SvY+svGVB4=
Subject key identifier:   A8:42:55:5A:95:A6:24:9A:CD:0A:2C:D5:C5:DC:3F:78:CF:5C:F7:9D
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0EAE
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/qEJVWpWmJJrNCizVxdw_eM9c950.roa
Signing time:             Tue 02 Dec 2025 02:37:01 +0000
ROA not before:           Tue 02 Dec 2025 02:37:01 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     133952
IP address blocks:        150.107.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 15:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3758 (0xeae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Dec  2 02:37:01 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A842555A95A6249ACD0A2CD5C5DC3F78CF5CF79D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:90:4e:b6:d0:0c:76:56:9f:fb:77:87:0f:
                    81:e9:1b:7f:7d:2e:1f:d1:ba:78:24:1d:2a:85:fa:
                    8b:dd:6f:b5:56:72:f3:99:dd:b3:3f:64:36:8c:fc:
                    ed:1a:4e:95:a7:02:a8:c0:34:da:40:30:e5:8c:23:
                    56:c1:e7:32:f6:f3:4f:a5:06:16:3f:53:5e:48:df:
                    13:7b:96:36:5a:25:6e:4e:38:e3:73:ba:89:7d:af:
                    43:27:e5:cb:9d:72:6d:0d:44:09:8d:7b:45:27:ce:
                    07:f7:1c:2f:64:26:52:30:92:55:5b:b3:96:32:ce:
                    bc:4b:cf:9b:d6:12:48:25:f0:73:7c:b8:38:33:3f:
                    e9:ee:1d:2d:f5:66:da:1c:68:8f:c9:0c:91:c9:37:
                    03:2c:b3:79:58:2d:05:10:39:76:6d:2b:b6:c0:13:
                    0d:fd:4b:ca:56:95:f6:f8:06:2d:85:f0:a8:69:29:
                    47:62:06:85:8f:f7:17:75:2e:54:88:91:2a:e3:29:
                    c6:76:7a:a9:02:81:36:e3:cc:de:81:59:67:9a:79:
                    ce:06:20:54:60:31:2b:88:6a:7d:ae:dd:d6:6b:c3:
                    06:47:99:1b:3d:96:7a:37:8a:fe:c8:16:74:0f:13:
                    b4:82:45:ad:01:27:04:6f:88:7b:18:26:33:c5:39:
                    ab:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:42:55:5A:95:A6:24:9A:CD:0A:2C:D5:C5:DC:3F:78:CF:5C:F7:9D
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/qEJVWpWmJJrNCizVxdw_eM9c950.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:6d:93:b1:d4:db:02:5b:35:fd:3c:56:da:37:a5:1e:6c:d0:
         55:57:82:28:4b:dd:23:81:0a:2f:98:8e:8a:9d:e4:83:bd:52:
         01:3d:b0:39:bd:9d:2e:f8:76:fa:4c:cf:b8:bd:cf:2b:2d:aa:
         e4:26:31:e1:9b:a8:84:66:16:20:89:af:14:a8:d1:29:71:67:
         94:68:13:b9:70:af:30:8b:1f:5d:ed:1e:8b:81:96:de:0c:77:
         74:00:38:5e:69:fa:f3:0f:27:f7:3f:56:98:4a:be:63:d9:07:
         12:ce:f0:b8:1c:78:3b:e5:62:74:0f:c9:b2:0d:83:b6:73:4c:
         55:83:d1:96:f5:32:a2:fb:9c:55:4a:9b:d8:86:b2:7e:02:02:
         39:15:be:e7:b8:13:bd:24:bb:bb:b3:28:f3:03:4b:55:51:75:
         d4:8b:2a:38:9b:b6:88:21:27:29:f0:c8:b6:53:25:b5:50:3c:
         50:2d:9a:6e:c5:fc:94:9d:d1:c5:3b:20:ac:2a:db:2a:24:2a:
         a7:a1:49:bc:d0:de:72:bc:88:e9:9f:b2:7d:13:da:b8:6e:ec:
         d4:22:19:94:8f:29:a7:47:71:ac:a9:8e:95:00:43:ad:a5:e5:
         4b:75:b4:fc:29:80:0c:d6:12:36:59:87:70:8a:78:00:6f:43:
         d1:94:c7:92
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDq4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB
NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNTEyMDIw
MjM3MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE4NDI1NTVBOTVBNjI0
OUFDRDBBMkNENUM1REMzRjc4Q0Y1Q0Y3OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKiJBOttAMdlaf+3eHD4HpG399Lh/RungkHSqF+ovdb7VWcvOZ
3bM/ZDaM/O0aTpWnAqjANNpAMOWMI1bB5zL280+lBhY/U15I3xN7ljZaJW5OOONz
uol9r0Mn5cudcm0NRAmNe0Unzgf3HC9kJlIwklVbs5YyzrxLz5vWEkgl8HN8uDgz
P+nuHS31ZtocaI/JDJHJNwMss3lYLQUQOXZtK7bAEw39S8pWlfb4Bi2F8KhpKUdi
BoWP9xd1LlSIkSrjKcZ2eqkCgTbjzN6BWWeaec4GIFRgMSuIan2u3dZrwwZHmRs9
lno3iv7IFnQPE7SCRa0BJwRviHsYJjPFOavLAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUqEJVWpWmJJrNCizVxdw/eM9c950wHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+
LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP
TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vcUVKVldwV21KSnJOQ2l6
Vnhkd19lTTljOTUwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AJZrPTANBgkqhkiG9w0BAQsFAAOCAQEAwm2TsdTbAls1/TxW2jelHmzQVVeCKEvd
I4EKL5iOip3kg71SAT2wOb2dLvh2+kzPuL3PKy2q5CYx4ZuohGYWIImvFKjRKXFn
lGgTuXCvMIsfXe0ei4GW3gx3dAA4Xmn68w8n9z9WmEq+Y9kHEs7wuBx4O+VidA/J
sg2DtnNMVYPRlvUyovucVUqb2IayfgICORW+57gTvSS7u7Mo8wNLVVF11IsqOJu2
iCEnKfDItlMltVA8UC2absX8lJ3RxTsgrCrbKiQqp6FJvNDecryI6Z+yfRPauG7s
1CIZlI8pp0dxrKmOlQBDraXlS3W0/CmADNYSNlmHcIp4AG9D0ZTHkg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:03:11 2025 by rpki-client