This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/6rRihwqKWwNKOU17GSzibn3GzCw.roa
File:                     6rRihwqKWwNKOU17GSzibn3GzCw.roa (raw, json)
Hash identifier:          W8XG7g7c14wUsLJ4gR7A+TNK3YqZGRTWEqHfz/5Cqvo=
Subject key identifier:   EA:B4:62:87:0A:8A:5B:03:4A:39:4D:7B:19:2C:E2:6E:7D:C6:CC:2C
Certificate issuer:       /CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
Certificate serial:       01FF
Authority key identifier: 1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/6rRihwqKWwNKOU17GSzibn3GzCw.roa
Signing time:             Fri 14 Nov 2025 04:14:27 +0000
ROA not before:           Fri 14 Nov 2025 04:14:27 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     199203
IP address blocks:        2401:e3e0:900::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 10:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
        Validity
            Not Before: Nov 14 04:14:27 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EAB462870A8A5B034A394D7B192CE26E7DC6CC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:e0:7c:39:d3:38:5d:cf:f4:59:55:0e:1e:
                    2b:37:c4:82:e6:af:ed:b5:95:4b:04:09:8c:4d:db:
                    91:c8:56:2f:7a:b9:6c:6d:07:92:55:67:b4:4c:a0:
                    ff:d2:23:db:75:35:ae:3e:53:18:69:94:45:71:cd:
                    24:b0:2b:de:b1:c2:df:f9:2d:f7:64:c4:f8:80:10:
                    01:02:53:98:07:09:1f:6f:cc:dc:0a:dd:55:57:05:
                    ac:ca:da:4d:1d:57:d5:68:a5:81:d8:fd:14:1b:3d:
                    f3:31:5b:f5:7a:f5:1e:fe:46:80:1d:fd:c2:d3:fd:
                    ee:8c:e1:b1:01:7a:57:0d:1a:c3:38:ad:da:79:ef:
                    c4:1f:b2:b0:41:df:87:0e:d5:f7:5e:3c:c8:df:10:
                    4b:f9:e4:8d:05:03:45:4d:06:d5:58:42:f3:26:e0:
                    27:b8:2b:77:08:3d:83:c1:0d:d3:64:10:a0:83:14:
                    0d:c6:7e:70:75:9f:7d:87:d8:13:bc:00:91:6f:0e:
                    ee:90:a4:27:8e:55:aa:84:aa:bf:6e:16:1c:db:8b:
                    47:10:62:5d:dd:b3:aa:bd:d3:35:97:e6:63:31:8c:
                    6e:da:9e:b7:2f:86:5e:de:78:de:93:ee:3e:17:9b:
                    cf:e7:0b:23:7a:49:48:8f:42:1a:b5:55:d7:2e:d2:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B4:62:87:0A:8A:5B:03:4A:39:4D:7B:19:2C:E2:6E:7D:C6:CC:2C
            X509v3 Authority Key Identifier:
                keyid:1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/6rRihwqKWwNKOU17GSzibn3GzCw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e3e0:900::/44

    Signature Algorithm: sha256WithRSAEncryption
         0a:e7:3d:13:41:4d:28:15:68:0b:5b:a1:ed:92:61:12:32:32:
         21:a8:0a:7d:a9:3b:a9:27:32:f1:97:2e:9a:5c:94:0a:ab:89:
         ee:ad:9d:8d:7c:24:0d:f6:fa:75:6a:ab:7c:4f:b3:0e:a0:4f:
         27:ed:15:44:e9:b6:13:4e:24:07:d9:d1:1e:85:81:9a:34:74:
         7f:75:f3:ee:e4:5b:53:47:35:74:b2:f3:85:9c:0c:4f:f5:a1:
         62:1a:b7:bd:74:ef:01:a2:a8:37:6a:87:f4:1d:2c:59:97:75:
         41:a7:99:7c:78:6c:78:6a:e6:59:21:33:7d:2e:12:9b:2c:d9:
         40:bb:43:c5:55:3b:23:a1:ad:aa:0e:bc:b4:20:24:f8:ed:87:
         03:7f:3e:0e:fc:4f:9f:36:b8:3a:38:91:7b:ce:8d:2f:f6:81:
         ac:c6:6b:d9:dd:d2:94:93:75:bd:9c:f5:e0:b6:ee:c9:90:d2:
         94:50:17:25:b7:35:b6:99:71:04:65:b3:1f:ba:97:3d:0f:50:
         6c:0b:2f:b7:10:96:68:84:9e:49:63:53:32:84:4e:73:a4:34:
         06:fb:f8:4c:12:ee:71:3c:a6:c4:be:2a:5f:3e:d0:5e:77:f3:
         8a:68:16:2b:7d:51:2d:7a:5d:5e:75:f7:4b:d8:fe:72:3a:04:
         b2:df:98:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:46:47 2025 by rpki-client