This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/KuToQpouoXELr_sCGVOW15C1sxc.roa
File:                     KuToQpouoXELr_sCGVOW15C1sxc.roa (raw, json)
Hash identifier:          jcebaTxWEKb45yvzv2HZ6yv9+qkkeSFNfJYyD61UAV0=
Subject key identifier:   2A:E4:E8:42:9A:2E:A1:71:0B:AF:FB:02:19:53:96:D7:90:B5:B3:17
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0D9F
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/KuToQpouoXELr_sCGVOW15C1sxc.roa
Signing time:             Fri 07 Nov 2025 00:20:30 +0000
ROA not before:           Fri 07 Nov 2025 00:20:30 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     21859
IP address blocks:        223.26.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 15:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3487 (0xd9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Nov  7 00:20:30 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2AE4E8429A2EA1710BAFFB02195396D790B5B317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:f8:dc:7e:f4:1c:4b:2f:c9:56:e9:97:ec:
                    d3:17:37:91:60:97:86:ef:2c:07:28:71:dd:77:fc:
                    61:52:8b:30:67:fe:8d:02:cb:3d:f5:3f:58:e3:62:
                    bd:f1:51:8f:03:7c:d1:52:1c:1e:1d:4b:ff:53:8a:
                    02:f5:8c:8a:01:1d:eb:4d:5f:04:c7:c4:e0:71:49:
                    a8:62:0f:aa:bc:4b:89:e5:65:67:a3:86:b7:aa:b2:
                    d7:4a:b4:64:ac:29:6e:e4:9c:3f:02:63:66:eb:82:
                    a5:80:66:00:61:21:9a:81:e1:b4:4b:13:0b:81:60:
                    6e:8e:1e:9b:b5:fb:24:69:20:03:4e:3c:a7:b8:94:
                    d6:15:9e:98:33:86:81:49:8c:38:20:35:71:a5:39:
                    ab:06:c5:01:c8:b1:b8:ea:77:64:64:1a:9d:5f:e0:
                    66:9f:a5:6a:dd:91:18:89:8f:0c:4c:27:59:a1:0f:
                    74:9c:a2:e6:8a:a1:19:86:3a:cd:3e:71:bd:d5:b0:
                    c8:bb:d6:e6:71:f8:66:71:06:08:14:38:67:1f:f2:
                    a2:bc:06:bc:4b:37:86:3d:c3:b9:2d:82:f9:ea:f5:
                    08:af:ff:aa:9a:fa:62:80:53:1e:ac:92:4e:8c:d6:
                    dc:65:6c:fd:0d:b6:d3:52:e8:87:e8:fe:eb:d0:8b:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E4:E8:42:9A:2E:A1:71:0B:AF:FB:02:19:53:96:D7:90:B5:B3:17
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/KuToQpouoXELr_sCGVOW15C1sxc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.26.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:86:f3:53:27:89:f7:52:6c:30:d5:e8:77:1d:fd:84:12:3a:
         a0:4e:87:a8:64:c2:48:bc:ed:0a:cc:25:3a:22:68:6c:77:58:
         14:29:81:84:11:5c:cf:9c:f1:7f:ba:1d:be:69:7c:bd:60:10:
         3d:6b:a3:b6:9a:d0:7e:b4:ef:15:08:2d:4b:f3:09:03:dd:73:
         05:63:0e:d7:f2:24:cd:a1:bb:14:f5:24:17:f6:cd:60:59:1c:
         19:ab:1d:fe:ea:0d:7a:5c:28:b0:29:3c:9c:1a:44:1f:34:de:
         ad:c1:90:1d:41:70:da:06:a2:9e:a4:6e:8e:0a:a8:e7:1a:26:
         44:d7:0f:13:fb:2e:e0:b3:03:1f:da:24:fc:b7:cb:3c:63:91:
         b7:fe:f1:07:9f:5e:f4:bc:33:18:6b:b7:9d:3a:e2:dc:2f:08:
         54:18:81:2d:0f:a4:ad:67:8e:09:5d:d0:8e:1a:6e:b8:dd:e7:
         36:44:fd:73:ff:05:e7:45:f3:43:5c:10:f1:97:d9:75:bf:04:
         d1:69:a5:fc:40:3c:f8:bc:b1:a0:4d:e2:c1:61:6a:bf:c9:ef:
         e3:83:ba:bc:9f:ac:3d:06:7c:2e:ea:3f:ab:0a:c6:83:47:67:
         e4:2c:b7:2f:a6:0a:87:88:7e:de:83:ae:57:08:6b:41:1f:ef:
         b0:47:84:66
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx
ODNEN0NCQTZCOUE5Q0FGRTZGNTBCRkIwMzhENjQ1RDI2REM3RjAeFw0yNTExMDcw
MDIwMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJBRTRFODQyOUEyRUEx
NzEwQkFGRkIwMjE5NTM5NkQ3OTBCNUIzMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCKPjcfvQcSy/JVumX7NMXN5Fgl4bvLAcocd13/GFSizBn/o0C
yz31P1jjYr3xUY8DfNFSHB4dS/9TigL1jIoBHetNXwTHxOBxSahiD6q8S4nlZWej
hreqstdKtGSsKW7knD8CY2brgqWAZgBhIZqB4bRLEwuBYG6OHpu1+yRpIANOPKe4
lNYVnpgzhoFJjDggNXGlOasGxQHIsbjqd2RkGp1f4GafpWrdkRiJjwxMJ1mhD3Sc
ouaKoRmGOs0+cb3VsMi71uZx+GZxBggUOGcf8qK8BrxLN4Y9w7ktgvnq9Qiv/6qa
+mKAUx6skk6M1txlbP0NttNS6Ifo/uvQi3VpAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUKuToQpouoXELr/sCGVOW15C1sxcwHwYDVR0jBBgwFoAUjBg9fLprmpyv5vUL
+wONZF0m3H8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tZQ0xP
VUQvakJnOWZMcHJtcHl2NXZVTC13T05aRjBtM0g4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9qQmc5Zkxwcm1weXY1dlVMLXdPTlpGMG0zSDguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS1lDTE9VRC9LdVRvUXBvdW9YRUxy
X3NDR1ZPVzE1QzFzeGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQB3xoIMA0GCSqGSIb3DQEBCwUAA4IBAQCkhvNTJ4n3Umww1eh3Hf2EEjqgToeo
ZMJIvO0KzCU6Imhsd1gUKYGEEVzPnPF/uh2+aXy9YBA9a6O2mtB+tO8VCC1L8wkD
3XMFYw7X8iTNobsU9SQX9s1gWRwZqx3+6g16XCiwKTycGkQfNN6twZAdQXDaBqKe
pG6OCqjnGiZE1w8T+y7gswMf2iT8t8s8Y5G3/vEHn170vDMYa7edOuLcLwhUGIEt
D6StZ44JXdCOGm643ec2RP1z/wXnRfNDXBDxl9l1vwTRaaX8QDz4vLGgTeLBYWq/
ye/jg7q8n6w9Bnwu6j+rCsaDR2fkLLcvpgqHiH7eg65XCGtBH++wR4Rm
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:03:04 2025 by rpki-client