This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/06arqP7STPX64Gk_ekXVGkt4xvE.roa
File:                     06arqP7STPX64Gk_ekXVGkt4xvE.roa (raw, json)
Hash identifier:          FohD4oNScGj53tM8TBjLtbk+VT8EkU19WAAPFm+sUA0=
Subject key identifier:   D3:A6:AB:A8:FE:D2:4C:F5:FA:E0:69:3F:7A:45:D5:1A:4B:78:C6:F1
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       114B
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/06arqP7STPX64Gk_ekXVGkt4xvE.roa
Signing time:             Tue 03 Feb 2026 02:02:53 +0000
ROA not before:           Tue 03 Feb 2026 02:02:53 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.71.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4427 (0x114b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:02:53 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D3A6ABA8FED24CF5FAE0693F7A45D51A4B78C6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:ff:a9:25:81:f8:3a:7e:71:cf:ab:de:44:
                    44:fd:b9:58:8a:8a:be:cc:c0:a4:19:e8:5e:b3:5e:
                    eb:08:6d:cd:79:ff:3b:38:77:38:2e:7e:5a:04:cf:
                    37:7e:a5:e9:95:7f:d5:15:5a:67:d7:04:31:e0:18:
                    60:9c:f9:2b:d0:96:af:d2:7c:cd:14:4b:95:23:e2:
                    c8:5c:2f:2c:23:6e:07:62:e5:33:87:83:55:ee:e6:
                    b4:8d:77:66:d5:ca:6a:b2:b1:91:9b:b1:be:d7:e9:
                    cb:7a:d5:c7:6f:2b:3b:5c:09:08:06:81:99:28:62:
                    12:a5:98:92:0b:0b:89:b2:98:6d:77:79:8d:c5:b5:
                    b5:6e:40:08:90:95:db:a9:d0:51:d2:89:1f:31:79:
                    b7:5e:5f:47:56:2c:12:61:b9:51:bc:e8:ff:dc:f3:
                    fe:e8:70:18:fd:46:d1:d2:31:b6:89:35:70:64:a5:
                    e0:34:31:67:12:64:3d:ce:15:87:61:5f:75:fd:e3:
                    c2:76:cb:f6:61:35:44:88:6f:85:8e:7a:93:09:0c:
                    96:8e:aa:ba:f6:cf:24:79:e8:32:0b:69:55:0d:e7:
                    bf:5b:a2:0d:01:73:31:43:3a:d3:d0:7e:35:64:61:
                    25:f3:2d:71:d7:e4:ba:98:52:c0:1e:eb:a3:69:75:
                    6c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A6:AB:A8:FE:D2:4C:F5:FA:E0:69:3F:7A:45:D5:1A:4B:78:C6:F1
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/06arqP7STPX64Gk_ekXVGkt4xvE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:f6:19:30:59:30:7d:f5:96:85:8d:3d:90:3c:27:60:d1:0d:
         b1:2c:d3:5c:c0:1c:0d:5d:b2:0d:92:94:64:54:ad:f2:0d:4b:
         61:2c:c9:f7:c0:7d:78:86:27:29:e3:dc:08:4c:ff:b4:41:67:
         15:9f:24:0c:1a:2f:db:51:11:fa:5c:a0:85:67:63:a2:16:be:
         f2:cb:28:ca:56:ac:cd:2e:51:0a:31:e6:1e:af:c4:5d:6a:59:
         3b:53:0f:e7:6c:b3:78:90:b8:58:97:39:ac:30:98:08:aa:2e:
         fa:0e:f3:d0:34:17:2c:f9:d2:44:2e:f8:9a:13:eb:07:fe:86:
         68:f1:cc:36:ae:6f:11:06:81:00:f0:c1:c2:35:46:8b:94:d9:
         42:f9:ff:b9:aa:85:53:94:75:64:7b:12:2e:d0:3d:86:87:bc:
         e2:d7:2f:1a:6b:1b:de:b4:af:f5:3a:ff:03:2f:bc:9c:52:9a:
         94:cd:0d:d0:11:62:4c:30:1c:f9:8b:e6:a0:9f:d6:d0:7f:78:
         a9:1c:66:4c:71:c3:98:f3:f2:4f:e8:bf:77:e9:b3:0b:65:41:
         34:1f:ad:2d:fa:1c:f6:3a:50:e0:be:00:3a:d7:0b:99:36:e7:
         7c:37:89:aa:68:5f:b9:b9:fe:88:41:d0:84:eb:99:da:4d:97:
         98:e9:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:43 2026 by rpki-client