This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/aQ1uMMQFc2AEpO5ntLROiwGUw3c.roa
File:                     aQ1uMMQFc2AEpO5ntLROiwGUw3c.roa (raw, json)
Hash identifier:          gtBIgjTUrU6h76lCxKyiJAAXj2VqYRxABmToI/q/ffM=
Subject key identifier:   69:0D:6E:30:C4:05:73:60:04:A4:EE:67:B4:B4:4E:8B:01:94:C3:77
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0DB2
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/aQ1uMMQFc2AEpO5ntLROiwGUw3c.roa
Signing time:             Fri 28 Nov 2025 06:27:16 +0000
ROA not before:           Fri 28 Nov 2025 06:27:16 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     21859
IP address blocks:        202.148.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 20:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3506 (0xdb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Nov 28 06:27:16 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=690D6E30C405736004A4EE67B4B44E8B0194C377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:f5:f9:bb:02:a5:b8:58:47:d6:41:6e:57:
                    e0:98:c4:16:d1:e6:f2:7a:f7:10:ba:db:89:82:52:
                    06:f4:69:7d:8d:d8:6b:3d:1a:e4:d1:fd:7a:46:4c:
                    26:9a:c3:c0:ea:71:c8:e0:4f:57:12:c0:5b:18:35:
                    af:60:ed:86:2f:a2:f5:d0:6e:3c:93:a8:a7:88:cd:
                    e1:2d:90:06:12:65:82:48:c1:09:f5:0d:a2:c9:57:
                    3f:a6:0e:c9:c8:26:82:f7:8a:d7:c0:7e:62:53:27:
                    8d:5d:72:aa:c7:e5:1c:1d:20:3d:6b:10:3a:c2:fa:
                    59:36:68:ec:01:fd:b1:01:fa:45:27:c8:f4:1b:68:
                    0f:f0:93:9d:ae:2d:1d:f1:8b:6d:e6:46:8a:7f:e8:
                    eb:17:67:fa:fb:fc:80:46:2b:4c:42:f5:48:b5:86:
                    13:1f:94:35:d5:6e:9c:6c:43:83:d8:9a:dc:23:73:
                    b1:b7:7b:e0:16:1f:87:a5:00:98:f0:ee:23:16:03:
                    54:d4:eb:94:a7:05:33:8b:a1:7d:f6:d6:d3:50:22:
                    38:aa:86:c5:9c:3b:47:b4:de:d8:51:d5:bd:59:6b:
                    53:a9:45:61:7f:08:a5:6d:96:92:42:c3:04:80:23:
                    ed:4d:d0:c5:3e:c7:b9:32:9f:20:5e:38:83:9b:47:
                    e4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0D:6E:30:C4:05:73:60:04:A4:EE:67:B4:B4:4E:8B:01:94:C3:77
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/aQ1uMMQFc2AEpO5ntLROiwGUw3c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:28:f8:ba:51:b9:02:36:f4:c1:bc:89:62:fc:b1:63:ae:9d:
         9c:67:ed:8d:76:79:a4:41:e5:99:de:7e:f8:02:0d:bb:0e:a9:
         cf:75:c0:aa:db:66:21:37:ad:d5:40:c4:14:47:0b:a9:97:31:
         7f:a0:f6:7c:7a:8f:6f:da:c8:37:12:f8:d2:36:dd:ef:c3:39:
         23:95:d9:05:58:0e:47:f0:7b:fe:52:c2:82:c1:4e:a3:c1:1d:
         28:17:39:39:35:d5:d1:7d:40:16:22:44:82:ac:5c:04:1f:fa:
         7a:3e:4a:cf:ac:45:53:bf:86:b9:a7:21:9c:99:f3:b6:11:e6:
         8b:16:b1:1f:44:9a:27:66:e9:c1:46:ad:9b:1d:bc:ee:06:4b:
         1f:17:10:37:3e:46:84:5c:81:fc:5a:b8:81:e3:dc:cc:74:bd:
         cd:06:78:1b:4f:a5:a9:f9:2e:ff:41:cc:6d:64:1b:1f:f0:72:
         2b:a5:da:29:60:46:d9:64:fa:c5:c3:aa:ad:00:2b:89:02:59:
         54:df:3a:da:fe:80:b8:6e:54:ba:fd:74:a5:82:6a:62:25:0e:
         5a:f3:80:48:88:0c:f8:86:57:18:e6:1e:51:8e:3e:ec:f6:ed:
         43:e8:d5:ed:86:92:a8:37:37:b8:f7:a3:be:f0:a4:df:c7:30:
         fc:7d:bc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:39:47 2025 by rpki-client