This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/4NPjhG62vUzsWX-4nMU2pRnLF8k.roa
File:                     4NPjhG62vUzsWX-4nMU2pRnLF8k.roa (raw, json)
Hash identifier:          3inJX2qUX5nfsAix77upyYhCAsOPd94MXdFxHiMxLwQ=
Subject key identifier:   E0:D3:E3:84:6E:B6:BD:4C:EC:59:7F:B8:9C:C5:36:A5:19:CB:17:C9
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0DAA
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/4NPjhG62vUzsWX-4nMU2pRnLF8k.roa
Signing time:             Tue 18 Nov 2025 09:28:05 +0000
ROA not before:           Tue 18 Nov 2025 09:28:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     150288
IP address blocks:        202.148.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3498 (0xdaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Nov 18 09:28:05 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E0D3E3846EB6BD4CEC597FB89CC536A519CB17C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:b9:63:49:20:50:9e:1e:7f:11:14:c3:a7:
                    8a:57:ab:90:3a:d3:61:b6:01:93:80:96:0c:fb:9d:
                    5d:21:04:0f:75:d2:2d:9a:a1:36:87:42:44:26:f6:
                    1b:48:81:6d:4f:7a:6f:d2:cd:30:d2:d0:f5:64:18:
                    15:ac:c2:69:48:73:6a:62:00:a7:f2:c9:c4:40:ec:
                    42:76:7c:89:67:f6:2e:b4:fa:57:45:c0:c9:bc:7a:
                    bf:3e:de:da:c4:f6:f1:23:39:ed:5c:aa:d1:89:25:
                    f0:7d:5b:17:60:a1:88:4f:7a:cc:32:1b:29:ba:58:
                    9b:0d:94:e1:d0:86:1a:9a:f0:f4:2e:86:0a:29:73:
                    d9:83:20:c7:6f:4c:1c:9f:61:b9:66:7f:63:b7:8a:
                    0e:1f:4d:d4:84:73:06:25:06:ba:74:53:c0:dc:df:
                    9b:9f:d3:ad:ee:19:eb:97:d8:30:6e:38:06:6e:95:
                    92:14:92:52:e7:d9:3a:c2:fc:3e:e6:ef:c5:89:c3:
                    44:7d:e3:2a:f2:30:7a:dc:1e:db:b2:bf:c5:e3:a6:
                    e4:97:50:a5:8f:96:74:28:f5:99:fc:87:50:86:ba:
                    9e:79:ea:36:e1:e8:6a:d5:2b:9d:8f:1a:b5:e0:f2:
                    34:e9:06:04:6c:3b:49:58:3d:f4:ab:bc:9b:53:5b:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D3:E3:84:6E:B6:BD:4C:EC:59:7F:B8:9C:C5:36:A5:19:CB:17:C9
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/4NPjhG62vUzsWX-4nMU2pRnLF8k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:81:4a:f3:d2:92:74:04:c7:32:01:3b:ba:3b:be:c0:8a:28:
         db:a5:2d:e8:f4:bf:f6:1f:1c:ce:d4:6c:29:0d:60:4e:75:21:
         72:21:ef:9e:49:30:9e:73:13:49:09:c3:d8:65:21:09:e8:f7:
         ec:c5:44:e2:be:ef:73:b8:f6:23:72:13:03:85:46:8a:c1:17:
         3a:2f:53:c4:bb:a4:4e:ac:c4:1c:ca:5d:bc:04:f3:27:8c:30:
         bc:fb:bf:fa:39:30:62:f7:be:2d:9e:97:3d:64:2c:12:8f:63:
         c5:7b:f4:a6:6e:8a:b4:14:67:ce:63:26:09:3e:76:e9:fb:fc:
         29:65:73:3c:54:28:28:9b:b0:1f:ae:96:7a:12:8d:af:d7:01:
         70:71:47:d6:5d:d7:4c:3f:50:47:26:82:58:ae:73:c5:58:58:
         39:2c:f0:c2:8b:7e:90:a5:ff:c0:71:6f:b0:dd:ef:e6:ff:b4:
         61:4f:27:fe:90:52:a0:e7:12:84:8d:d4:36:b4:59:86:f4:61:
         31:8e:7d:5f:ec:32:a7:2d:a4:bb:59:e4:cb:b9:49:84:cc:29:
         46:04:ab:d3:61:a3:eb:78:d9:96:a3:7d:8c:35:52:51:f7:8e:
         17:e3:d6:b8:2c:47:5f:b9:8f:be:5b:64:c0:2c:25:b4:78:bb:
         58:82:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:39:38 2025 by rpki-client