This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/n_WIvS5h6VBmWCq164HwVHueP24.roa
File:                     n_WIvS5h6VBmWCq164HwVHueP24.roa (raw, json)
Hash identifier:          wk+OHeo0xjusUGjJD8S6AU7YM2boAyL/ec1rmj4YCLw=
Subject key identifier:   9F:F5:88:BD:2E:61:E9:50:66:58:2A:B5:EB:81:F0:54:7B:9E:3F:6E
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0F59
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/n_WIvS5h6VBmWCq164HwVHueP24.roa
Signing time:             Thu 06 Nov 2025 06:48:41 +0000
ROA not before:           Thu 06 Nov 2025 06:48:41 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24168
IP address blocks:        211.79.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 06:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3929 (0xf59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Nov  6 06:48:41 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9FF588BD2E61E95066582AB5EB81F0547B9E3F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:6c:25:19:85:4f:91:36:cc:67:55:28:88:
                    8e:7f:a1:75:f5:40:ef:02:e2:94:51:1a:9b:cb:e9:
                    8b:ed:03:0d:77:17:5c:99:5e:df:3f:ed:e8:37:87:
                    33:11:30:2a:54:28:da:6b:34:f1:b7:e1:06:38:57:
                    eb:b6:da:0d:3d:52:32:9a:f0:56:c1:7c:eb:a5:01:
                    c1:27:cc:e7:ce:e9:88:a8:88:13:51:07:ad:79:6e:
                    c4:91:47:ee:c1:b1:fe:44:e2:dd:35:93:39:17:52:
                    3e:98:71:cc:93:ba:53:71:ea:5f:ee:1e:80:84:da:
                    be:df:b9:25:fe:52:5b:19:35:88:1a:95:08:53:6c:
                    20:e2:84:bf:5a:01:f6:97:69:06:78:58:06:cc:86:
                    6b:c7:f2:d6:c2:b2:2e:92:af:41:8b:07:6b:12:10:
                    b0:3e:7b:cc:42:bc:93:e2:64:3d:e6:f8:31:ff:fb:
                    ca:98:22:38:18:b6:84:88:6b:17:b1:74:97:d3:87:
                    1f:04:9b:19:c7:58:38:ef:90:66:07:4b:78:98:38:
                    ee:7a:51:9b:3c:f6:ba:85:a2:c7:e3:7e:6f:26:c1:
                    7c:b3:db:9b:42:98:45:77:4a:ad:4b:13:53:bf:b8:
                    73:b2:ed:ba:d6:06:33:84:22:5e:ed:90:d8:e6:45:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F5:88:BD:2E:61:E9:50:66:58:2A:B5:EB:81:F0:54:7B:9E:3F:6E
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/n_WIvS5h6VBmWCq164HwVHueP24.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:c3:a4:ca:a8:8c:a2:1e:e5:b0:e7:f2:df:e7:e4:e2:1b:
         1f:8f:da:0a:0e:65:2c:b2:8e:73:28:74:81:b7:74:2e:32:bf:
         bd:bf:80:b5:72:f6:43:2b:52:3d:4f:c1:65:cb:2c:1d:20:d8:
         97:12:41:4c:c7:7e:c1:a1:48:f0:56:2e:20:fb:45:3f:b4:fc:
         f4:f7:db:9b:cf:fd:88:f5:12:c1:44:38:a5:31:41:38:2d:00:
         40:25:c3:0a:9d:e2:4a:8f:e4:f9:6d:72:07:3c:77:99:59:ef:
         62:6d:b9:7b:e7:88:15:a1:0d:05:69:c7:a7:03:7e:c5:16:6f:
         20:a1:02:ca:d3:72:1a:19:48:ab:3d:43:b2:9b:df:0c:11:7e:
         2d:44:c6:af:9b:a7:4e:ab:31:c1:90:39:a5:c7:7a:18:2f:9b:
         56:fd:ab:2c:b7:18:65:58:9b:95:de:e9:c7:e3:fb:6c:f8:8c:
         1a:fe:94:e2:a0:a0:08:97:bf:40:95:e7:95:91:70:6b:07:03:
         ce:e2:e8:99:2d:aa:20:73:9a:a9:1a:33:de:31:fc:49:16:f5:
         a7:96:a0:23:4f:93:12:12:c2:17:5d:69:1f:31:65:55:e1:23:
         84:75:79:4a:fa:0c:58:36:5c:f3:c2:8e:7f:6e:c9:de:db:02:
         a5:e2:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:34:43 2025 by rpki-client