This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/MpTb35fkjOSqjTUwEqtrfSHiGCM.roa
File:                     MpTb35fkjOSqjTUwEqtrfSHiGCM.roa (raw, json)
Hash identifier:          b+Tx07LZ8wNsApmlgvA07kz5pbI4TNylvZvi1NV7OA0=
Subject key identifier:   32:94:DB:DF:97:E4:8C:E4:AA:8D:35:30:12:AB:6B:7D:21:E2:18:23
Certificate issuer:       /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Certificate serial:       030C
Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/MpTb35fkjOSqjTUwEqtrfSHiGCM.roa
Signing time:             Fri 16 Jan 2026 05:16:54 +0000
ROA not before:           Fri 16 Jan 2026 05:16:54 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     38042
IP address blocks:        211.76.186.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
        Validity
            Not Before: Jan 16 05:16:54 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3294DBDF97E48CE4AA8D353012AB6B7D21E21823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:fb:e2:a5:5c:1e:83:28:85:97:ea:87:8f:
                    86:0b:79:e9:7c:3a:92:07:3d:78:db:84:1b:8a:75:
                    55:ce:2c:b2:32:cf:74:7f:5b:03:cd:0e:69:af:51:
                    71:80:f5:58:80:9c:27:c6:da:f1:70:b8:e9:c3:bf:
                    dc:2a:6f:29:ed:d4:83:a8:15:d4:df:46:cf:d2:01:
                    53:5b:08:05:eb:d8:f0:5a:af:81:02:6f:9f:ef:b2:
                    c0:a6:64:32:ec:cd:3d:8d:21:60:46:0e:33:7e:95:
                    48:42:c8:50:b4:99:0e:43:83:37:a7:a2:18:29:0d:
                    75:32:b9:a1:38:a8:37:de:eb:49:8e:43:2b:2e:21:
                    b4:0b:97:3c:c5:d2:21:a5:ad:95:2b:12:ae:3b:00:
                    6a:c9:1a:32:24:7d:ac:02:78:ed:7b:36:17:e0:e7:
                    97:8a:86:2d:19:e0:b1:39:c4:eb:46:53:aa:cf:6d:
                    8c:ea:e7:b0:1a:3e:e5:0a:1f:d2:2c:fb:5c:0f:a1:
                    5c:2d:64:82:8e:b4:5e:81:b7:be:14:d6:cd:82:02:
                    5e:9e:9e:a3:df:96:58:16:c4:75:8d:9a:5e:4c:d4:
                    da:5d:80:63:91:b7:90:87:ad:d8:b1:69:a2:ba:4d:
                    89:71:8b:a2:29:f4:af:82:5d:84:74:2b:fc:d1:73:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:94:DB:DF:97:E4:8C:E4:AA:8D:35:30:12:AB:6B:7D:21:E2:18:23
            X509v3 Authority Key Identifier:
                keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/MpTb35fkjOSqjTUwEqtrfSHiGCM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:cb:12:9e:96:31:80:06:63:94:4a:85:da:16:a7:88:17:19:
         6c:0b:c2:cd:f1:8f:0e:cd:7d:36:f4:57:7c:84:6d:cc:26:82:
         e3:ac:df:da:fd:ea:9a:9a:cd:c0:5a:52:03:b6:aa:2b:2d:ed:
         75:87:4c:d8:96:b9:88:58:73:e0:3c:40:6d:df:17:d9:cb:4b:
         97:5f:90:a1:c5:46:2a:d7:57:55:72:4c:d6:e5:e6:57:55:d1:
         9c:b0:5e:80:9e:23:48:f0:fc:9b:cc:ee:cd:89:4b:dc:35:ed:
         a1:f2:d7:ea:96:d8:2e:aa:63:dd:74:a0:74:ce:f0:b6:a0:ea:
         a6:d4:c0:2c:8e:a3:57:2a:2e:80:5e:39:26:39:ea:d5:63:52:
         1c:e5:34:96:e4:ed:2a:09:0d:2d:96:41:ac:d4:9b:db:e9:3b:
         9a:e8:65:f5:4a:4d:99:cb:ce:bd:bb:73:d9:63:98:20:5c:91:
         81:9b:e1:ec:6d:5d:8c:63:4f:09:e2:76:7e:57:f9:88:8e:c7:
         8c:0e:dd:2c:00:a9:51:d6:4d:66:de:d5:0b:f4:52:ac:d4:c7:
         1f:19:ce:73:4d:f9:97:26:e6:57:87:4d:02:df:91:39:98:61:
         28:e0:2c:47:dc:f4:f8:3a:b5:d5:76:05:3c:ed:d0:7c:be:1f:
         1f:81:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:48:03 2026 by rpki-client