This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/0b1eyREuy-Ha32NflpFZyrTkxIo.roa
File:                     0b1eyREuy-Ha32NflpFZyrTkxIo.roa (raw, json)
Hash identifier:          3w0KOB8US5/Jz2iCTpd8Czo9YJIHe9h3+wvpRBVl8wQ=
Subject key identifier:   D1:BD:5E:C9:11:2E:CB:E1:DA:DF:63:5F:96:91:59:CA:B4:E4:C4:8A
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       117E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/0b1eyREuy-Ha32NflpFZyrTkxIo.roa
Signing time:             Tue 03 Feb 2026 02:25:56 +0000
ROA not before:           Tue 03 Feb 2026 02:25:56 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        210.240.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4478 (0x117e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:25:56 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D1BD5EC9112ECBE1DADF635F969159CAB4E4C48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:42:33:76:3c:6d:95:53:35:29:5a:7f:17:3b:
                    e0:44:b1:51:ee:e4:83:83:ca:95:dc:bf:f0:f0:ab:
                    a3:cc:1c:84:d0:63:0a:84:14:8a:70:af:c3:5c:c6:
                    cb:dc:23:99:ad:3e:0a:c3:48:1a:11:56:97:c0:f9:
                    31:55:9e:24:77:46:7c:c2:48:81:be:9b:14:e7:56:
                    b3:a1:be:9c:eb:b4:39:a5:4f:bd:1e:db:b3:e7:72:
                    eb:29:21:75:74:4b:90:35:8f:6e:84:f9:e9:a0:7e:
                    56:46:07:e9:ac:f5:fe:55:9f:ab:5e:ca:eb:97:71:
                    09:02:c6:37:a8:ad:99:3e:e4:c0:29:a6:22:0e:d1:
                    ae:49:0d:ec:94:d0:1c:ee:91:2f:78:49:7b:f9:58:
                    61:a3:de:c8:42:f4:2a:e6:b0:8e:85:c9:89:dd:3f:
                    fc:ba:24:d6:6b:7a:19:c8:aa:9a:e2:0e:a2:24:49:
                    d6:23:c8:0f:d5:2e:50:91:50:62:cf:32:75:5a:25:
                    0f:d0:32:e4:5b:90:55:7e:62:2a:18:38:e1:3c:06:
                    81:32:0d:9f:c1:07:d1:9e:a7:e0:75:11:ea:99:cc:
                    22:87:cf:f8:92:bf:0f:13:4e:16:03:05:81:00:87:
                    11:5a:3b:c5:8e:c1:3d:f1:82:6c:f6:b7:af:b5:d3:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BD:5E:C9:11:2E:CB:E1:DA:DF:63:5F:96:91:59:CA:B4:E4:C4:8A
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/0b1eyREuy-Ha32NflpFZyrTkxIo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.240.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ea:b3:35:f2:71:f7:5c:8f:14:c3:a7:33:b1:4d:89:e5:52:
         45:19:b1:73:8f:dc:8d:63:50:73:fe:dc:ec:0e:38:5d:ba:6e:
         d7:c5:27:7d:13:5e:c5:20:df:8f:7b:0d:00:c8:f0:0b:44:2f:
         55:8e:61:2d:dc:a1:f5:7f:7c:f6:a3:99:be:22:f0:d0:fd:05:
         c8:26:80:58:1b:35:ce:b0:ab:eb:d8:ef:2a:df:11:27:73:8b:
         ed:f1:44:f1:d1:80:31:92:b4:9e:66:09:36:2f:73:39:b3:e0:
         7c:8e:a8:64:56:c1:75:97:97:6f:21:0c:c1:ac:ee:f9:d7:ff:
         9b:75:e5:92:da:76:f2:ca:27:13:c1:86:d1:8e:7e:6e:ff:87:
         95:e5:f7:5a:87:ca:56:e4:0b:eb:9b:d2:2e:76:53:12:c9:e3:
         39:59:d1:ed:81:30:46:df:2a:be:8f:8f:04:fd:6d:ef:92:5e:
         74:c4:e6:6b:dd:70:2f:52:67:3f:12:91:0a:46:e2:89:85:fa:
         b4:36:7c:19:35:4b:09:75:6a:89:12:71:ee:17:b9:69:94:ee:
         98:a6:3f:aa:0b:8b:24:15:21:c2:1a:e0:e2:1a:f9:81:35:a1:
         4f:76:63:26:ef:b1:34:f4:dc:1e:ea:74:08:bf:14:21:07:a7:
         2f:68:38:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:58 2026 by rpki-client