This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7wicKlNqjZ1DCk_AADAqALgySOs.roa
File:                     7wicKlNqjZ1DCk_AADAqALgySOs.roa (raw, json)
Hash identifier:          3enTaiy6dE/Ima2ZAE5soFjUh8ZWPZkJNWjH3EALbHE=
Subject key identifier:   EF:08:9C:2A:53:6A:8D:9D:43:0A:4F:C0:00:30:2A:00:B8:32:48:EB
Certificate issuer:       /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial:       02F5
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7wicKlNqjZ1DCk_AADAqALgySOs.roa
Signing time:             Mon 05 Jan 2026 09:34:22 +0000
ROA not before:           Mon 05 Jan 2026 09:34:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     148996
IP address blocks:        202.160.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 10:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
        Validity
            Not Before: Jan  5 09:34:22 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EF089C2A536A8D9D430A4FC000302A00B83248EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:41:82:3d:04:b7:e2:fc:98:bb:46:f8:7a:
                    7e:6e:63:1b:48:d0:4c:86:4a:84:e3:90:42:1e:74:
                    ed:b5:e1:1c:0c:17:3b:df:21:4d:58:f0:71:08:e5:
                    e6:0c:47:3c:c8:c6:d3:c7:2d:6d:cd:af:c6:43:0a:
                    df:ff:e3:0f:d3:b6:ad:b7:61:1b:62:ff:4d:dc:8a:
                    4c:91:45:00:9d:a8:2c:79:c1:4f:04:2a:f0:31:ee:
                    92:3d:8d:b4:0c:a0:13:99:bf:30:5c:33:b7:d3:96:
                    32:f5:53:34:c2:85:66:55:4f:e6:00:ee:b1:d5:da:
                    a8:3b:6e:f9:c3:e7:88:a8:a5:8d:9a:d0:cf:0f:1f:
                    60:9e:d4:41:93:51:32:40:7e:67:1b:14:2f:20:13:
                    97:3f:dd:e2:d4:2a:fe:73:15:e8:dd:4e:60:56:5d:
                    42:37:86:8e:4c:85:6e:f0:6a:b3:6a:85:95:09:88:
                    fc:a3:1c:80:70:56:41:6e:df:71:d0:fb:1b:8e:08:
                    c9:d9:c4:43:b1:09:36:e6:a5:ea:bf:07:0d:58:25:
                    57:77:a3:86:bc:12:48:57:73:d2:b7:5c:59:9d:59:
                    b6:29:d4:cf:ce:0b:58:f3:39:86:de:d0:0a:b6:1c:
                    13:d5:28:94:b4:58:32:63:ec:04:e2:46:0c:1e:ca:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:08:9C:2A:53:6A:8D:9D:43:0A:4F:C0:00:30:2A:00:B8:32:48:EB
            X509v3 Authority Key Identifier:
                keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7wicKlNqjZ1DCk_AADAqALgySOs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:7f:10:a2:ef:ab:d0:6b:57:d0:35:64:4c:13:a6:5f:1f:30:
         db:fb:29:aa:b1:01:90:22:30:65:9f:4a:92:1c:91:89:a8:69:
         aa:c2:34:9b:e8:72:9f:3f:61:35:4e:a6:77:4b:1b:69:a6:3f:
         39:fb:8c:bb:9f:c6:24:ec:64:d2:f3:7c:ba:b3:d2:b6:4a:9a:
         ac:4a:98:78:43:df:c4:dc:ad:0e:20:50:1b:4f:3a:5c:cd:07:
         45:f7:7d:18:89:ec:90:cf:1b:c7:41:f1:d7:38:83:b8:1c:b2:
         ef:48:0a:2f:cb:91:8f:46:3b:b6:57:f1:35:d1:8d:03:d0:2c:
         35:fa:bb:7a:9a:f0:06:73:c1:8f:55:b3:74:5d:b5:5f:4d:15:
         cc:02:67:49:2a:08:0f:fb:2c:c3:10:ba:fd:70:66:08:f4:a6:
         68:58:18:83:8b:50:7b:e3:9e:8f:91:d1:b5:26:d0:58:0a:92:
         45:1a:16:8e:de:c8:b2:6b:4c:1d:06:61:b1:4e:10:b8:83:77:
         89:9c:51:62:af:94:b6:90:84:94:2f:6d:27:83:6e:21:0c:af:
         bc:00:66:fa:80:f8:2d:25:e4:61:d7:ab:c4:b7:67:fd:62:8a:
         b2:a4:f7:3e:ef:1b:6c:38:68:9e:a2:ae:b2:28:3a:96:16:6b:
         02:e0:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:49:02 2026 by rpki-client