This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/9QIVmqtZOoZMSjO4o6ChxrgYEeQ.roa
File:                     9QIVmqtZOoZMSjO4o6ChxrgYEeQ.roa (raw, json)
Hash identifier:          MELFz73quiy6m55oHjkPh1yLezWF4X6usePPCtNT30U=
Subject key identifier:   F5:02:15:9A:AB:59:3A:86:4C:4A:33:B8:A3:A0:A1:C6:B8:18:11:E4
Certificate issuer:       /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Certificate serial:       0308
Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/9QIVmqtZOoZMSjO4o6ChxrgYEeQ.roa
Signing time:             Fri 16 Jan 2026 05:16:27 +0000
ROA not before:           Fri 16 Jan 2026 05:16:27 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38042
IP address blocks:        202.148.220.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
        Validity
            Not Before: Jan 16 05:16:27 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F502159AAB593A864C4A33B8A3A0A1C6B81811E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:35:d8:80:e2:c4:a7:7b:1f:2a:51:a5:79:
                    b9:13:ac:cd:3a:22:4d:17:47:ac:17:4f:61:38:25:
                    d4:8c:82:a7:06:82:a0:1b:a2:c2:27:f8:82:d2:ec:
                    b1:d3:59:bc:42:ed:c7:45:82:91:b8:80:56:d5:6c:
                    21:55:96:ca:d9:a3:78:35:8e:89:c5:12:9d:db:0c:
                    0f:2b:00:91:f2:ac:b0:66:3c:bb:84:17:c5:36:60:
                    2d:d8:d2:44:9f:21:02:eb:5a:fa:a1:62:b8:52:d8:
                    23:14:19:46:ca:54:78:52:e3:2e:ec:1c:1c:d3:1c:
                    52:ac:08:62:3b:91:43:c5:4b:b4:e3:a3:a1:3d:67:
                    96:b8:0e:ec:d4:a4:5f:81:0f:1b:11:45:f4:50:2f:
                    92:72:d4:1f:f3:ba:87:0f:07:3d:3b:14:d0:7f:4e:
                    56:7e:10:59:70:d7:4a:a4:da:55:7f:ba:34:56:50:
                    48:d3:25:b8:03:96:2d:0d:bb:86:d7:6a:50:98:4d:
                    1c:54:a5:ae:9b:72:7a:ff:aa:32:56:ca:dd:74:eb:
                    d0:2d:84:30:50:2c:33:38:ae:3b:c6:08:d8:e3:eb:
                    1d:68:34:e9:6d:ec:3f:65:25:06:69:57:07:6b:16:
                    f1:84:b9:cd:11:d0:93:bc:ae:a9:09:dc:66:c8:ba:
                    f6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:02:15:9A:AB:59:3A:86:4C:4A:33:B8:A3:A0:A1:C6:B8:18:11:E4
            X509v3 Authority Key Identifier:
                keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/9QIVmqtZOoZMSjO4o6ChxrgYEeQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:78:ac:87:0b:be:d3:c7:23:b1:7f:0b:b5:87:96:3c:91:7e:
         e4:f4:29:4a:11:6d:c9:22:a5:53:16:ed:0e:de:ee:5d:e8:0d:
         bf:a0:75:11:91:8d:4b:27:59:6e:bc:92:20:a8:2f:37:06:23:
         3a:0e:c3:74:4c:2d:29:40:86:f5:6d:cf:ca:ce:93:f3:da:14:
         bb:d3:19:17:73:6f:79:b4:39:a7:8c:bb:02:bc:3d:61:4a:a8:
         c9:b5:ac:a9:f9:00:77:ef:92:2d:e8:a4:2b:89:20:1c:7d:6c:
         6e:8f:52:da:d9:91:73:34:97:34:a4:58:eb:10:24:05:82:f1:
         4d:f9:3a:b7:60:72:73:57:71:9d:97:a3:7d:63:6b:6e:25:a4:
         11:98:a0:e9:ff:0a:80:f9:df:7f:cf:4f:91:64:23:de:d3:dc:
         d7:ec:e6:46:26:de:cb:66:c2:a5:25:23:a0:27:7c:6c:8b:75:
         dd:64:83:b2:f1:82:2b:97:f5:22:f5:0f:06:36:cb:24:0f:d7:
         9d:d7:b8:5b:cf:0c:1e:09:71:e2:74:24:6a:1c:9e:48:e1:9f:
         11:bd:65:0a:54:7c:cb:d0:83:3f:85:5a:ff:b0:24:60:53:5c:
         6d:5c:f3:e7:84:37:bc:ba:55:d1:66:81:9e:36:21:fd:97:4d:
         4e:cf:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:47:37 2026 by rpki-client