This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAIFENG/lmA8GefZsR6NM55-zxg0JhYieI4.roa
File:                     lmA8GefZsR6NM55-zxg0JhYieI4.roa (raw, json)
Hash identifier:          5qAFiv773azfGfYACdsPSmMuO3V1odMGFRHA6lf6z14=
Subject key identifier:   96:60:3C:19:E7:D9:B1:1E:8D:33:9E:7E:CF:18:34:26:16:22:78:8E
Certificate issuer:       /CN=52F9A727317A768DD89403B0D99CAAFA0BF7291F
Certificate serial:       03FF
Authority key identifier: 52:F9:A7:27:31:7A:76:8D:D8:94:03:B0:D9:9C:AA:FA:0B:F7:29:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UvmnJzF6do3YlAOw2Zyq-gv3KR8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENG/lmA8GefZsR6NM55-zxg0JhYieI4.roa
Signing time:             Wed 28 Jan 2026 09:47:35 +0000
ROA not before:           Wed 28 Jan 2026 09:47:35 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     21859
IP address blocks:        103.188.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENG/UvmnJzF6do3YlAOw2Zyq-gv3KR8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENG/UvmnJzF6do3YlAOw2Zyq-gv3KR8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UvmnJzF6do3YlAOw2Zyq-gv3KR8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F9A727317A768DD89403B0D99CAAFA0BF7291F
        Validity
            Not Before: Jan 28 09:47:35 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=96603C19E7D9B11E8D339E7ECF1834261622788E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:51:df:72:91:41:b0:10:89:6b:1f:f5:b5:
                    fc:a4:83:28:26:15:04:c0:8a:f1:a7:c8:9e:51:80:
                    62:4f:f6:e1:92:2c:66:c1:1c:16:cb:ff:48:65:d4:
                    18:ac:9b:f6:05:29:ca:31:d5:e6:fb:3e:e9:52:3b:
                    23:ff:2d:a1:46:ac:0f:6f:5c:30:46:e2:a7:48:f0:
                    b8:b1:81:70:a1:18:6f:38:8a:2f:4c:e6:31:3d:ad:
                    52:cd:5d:64:98:30:31:28:ee:23:26:cf:a8:8a:70:
                    bf:bc:a0:9b:fa:b8:03:32:07:cf:b5:ab:46:c6:60:
                    4f:5d:51:83:fe:8c:a9:9d:d5:b7:b1:13:08:e5:f2:
                    57:7e:e2:02:a2:8f:e8:31:3c:a5:2c:94:24:29:84:
                    d5:f2:17:2c:36:df:c3:6f:12:65:5c:43:d6:93:b2:
                    57:91:7c:00:e4:f5:02:94:e3:50:cb:f7:b2:de:f6:
                    ab:42:1d:ee:d1:9b:94:fc:4d:93:3a:35:bf:1c:92:
                    13:60:1d:99:9c:d7:33:6c:10:21:e0:86:87:82:c4:
                    f5:56:d9:c9:9a:51:30:25:1b:c0:91:45:a5:2d:56:
                    2f:15:e3:d9:b0:2c:ef:81:b4:b7:79:e4:80:3d:1d:
                    f5:5a:53:c7:15:4b:80:10:75:ec:a6:df:c0:69:28:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:60:3C:19:E7:D9:B1:1E:8D:33:9E:7E:CF:18:34:26:16:22:78:8E
            X509v3 Authority Key Identifier:
                keyid:52:F9:A7:27:31:7A:76:8D:D8:94:03:B0:D9:9C:AA:FA:0B:F7:29:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENG/UvmnJzF6do3YlAOw2Zyq-gv3KR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UvmnJzF6do3YlAOw2Zyq-gv3KR8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENG/lmA8GefZsR6NM55-zxg0JhYieI4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:a8:a1:a2:f8:21:b6:77:7e:f9:0d:24:c7:1d:a2:65:6c:ae:
         dd:9b:d9:20:39:e1:0f:63:d9:ea:be:48:57:d6:22:23:e9:af:
         c0:d8:7d:cc:82:d5:53:86:f3:7b:50:44:b9:e3:95:16:35:3f:
         63:79:1b:e7:5d:d5:c8:99:63:0c:56:d1:37:eb:0b:14:56:97:
         7e:79:a4:2a:4c:e3:da:f2:89:e4:b5:43:1c:7f:df:12:a0:8a:
         a9:f6:9f:dd:fe:3c:48:57:c6:d3:66:cb:f7:9b:a1:d1:00:8a:
         06:eb:be:ee:90:10:97:c7:07:02:93:e1:27:fb:df:a6:28:1b:
         69:28:7b:01:e5:1a:03:9c:db:18:09:54:25:1e:98:fc:43:91:
         e1:33:86:d4:66:53:ef:b9:67:fd:e8:cf:35:b6:09:ec:a7:2f:
         36:7a:72:ef:f5:2e:08:fc:5a:b6:27:78:ac:70:1f:dc:b3:0a:
         3c:ee:0c:10:e3:a4:7a:17:a4:e5:17:7e:e8:f1:71:c9:ef:ac:
         bc:0f:24:0d:85:f3:cd:72:4b:1b:d2:82:f8:28:8e:10:8e:27:
         5d:ef:2a:e0:dc:ef:1f:cc:ff:50:d5:4f:9e:8a:b3:a4:2f:e3:
         0b:3a:5a:10:54:b9:5e:32:e3:a5:26:7d:35:6b:74:20:c2:ac:
         e0:03:a6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:55 2026 by rpki-client