This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/1tsgjce0uXJsf4ym09l5kYmJQfs.roa
File:                     1tsgjce0uXJsf4ym09l5kYmJQfs.roa (raw, json)
Hash identifier:          WoDhjVf3ajrkZjPyRwyOQtsWtehiDUXzcOf+ijxbtE0=
Subject key identifier:   D6:DB:20:8D:C7:B4:B9:72:6C:7F:8C:A6:D3:D9:79:91:89:89:41:FB
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       119F
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/1tsgjce0uXJsf4ym09l5kYmJQfs.roa
Signing time:             Tue 03 Feb 2026 02:29:30 +0000
ROA not before:           Tue 03 Feb 2026 02:29:30 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        120.106.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4511 (0x119f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:29:30 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D6DB208DC7B4B9726C7F8CA6D3D97991898941FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:87:8b:bd:d8:5d:d2:ab:90:0b:f2:41:76:
                    4c:c4:07:d8:0c:d6:8c:54:a2:20:95:58:8f:65:b5:
                    5c:74:df:27:66:aa:43:31:86:8f:90:90:74:15:33:
                    9d:e2:0d:b3:ad:1a:5e:99:d2:45:67:76:6a:15:51:
                    51:41:be:f7:a3:a5:cb:42:05:63:b0:b6:69:1d:e9:
                    16:37:9a:5a:63:cc:d0:e2:5a:52:6b:38:a7:2e:9d:
                    cb:61:4e:e1:bc:42:74:d8:23:f3:86:03:d6:73:d6:
                    be:85:83:69:be:92:f9:74:50:ef:10:35:26:04:36:
                    b7:9a:53:50:cf:82:ab:b3:de:fd:72:70:d8:75:9f:
                    de:81:64:f2:a0:7b:84:5f:0f:c5:1d:f3:57:df:06:
                    24:dc:8c:33:e4:1a:ee:13:60:21:d8:7b:16:35:3a:
                    9d:e2:68:d0:e5:da:e7:43:7c:a4:9d:01:db:93:a9:
                    6e:e8:0f:e5:ef:61:46:3f:0d:af:94:6b:dc:94:3a:
                    3b:38:2f:94:aa:8f:37:a8:4e:94:8c:96:bb:ae:7e:
                    45:51:56:15:52:30:91:1a:a6:34:24:cf:ec:0c:8c:
                    c0:4a:59:34:09:e3:e1:3b:83:32:b9:8b:04:7c:48:
                    3d:f8:31:bd:68:43:8e:96:d7:16:fd:e0:ba:0c:20:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DB:20:8D:C7:B4:B9:72:6C:7F:8C:A6:D3:D9:79:91:89:89:41:FB
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/1tsgjce0uXJsf4ym09l5kYmJQfs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.106.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:d0:dd:e3:2b:e4:82:75:76:ab:4a:d3:6d:2a:ec:33:87:
         9e:8d:96:9b:3b:f1:c4:24:ab:b2:5d:8f:f8:4f:75:52:f9:1d:
         06:62:ab:07:e8:fd:60:db:0c:79:60:ff:80:49:b8:f4:7c:fc:
         5f:d9:a0:35:2e:28:98:41:87:23:5b:14:88:d8:97:b5:13:25:
         67:13:6a:99:a3:4b:d1:dd:f7:b1:88:64:6e:30:ae:4e:86:f8:
         f1:3a:08:70:fb:0d:72:51:b1:b7:ae:d4:5a:7b:f7:b0:65:8d:
         db:4c:98:dc:e5:66:54:ff:5f:d8:e6:8b:53:dd:41:1d:63:aa:
         a0:59:e1:99:16:5a:7e:71:8f:f4:43:06:45:9d:8b:1b:f7:4b:
         6f:5f:d8:61:d2:db:e9:80:18:84:4c:a0:62:3a:2a:0f:19:11:
         f4:61:4e:89:37:92:0a:1e:2b:16:14:5f:77:3d:14:d6:21:82:
         29:c4:d8:a1:52:93:83:45:70:a8:d5:5b:10:b3:77:72:5e:9e:
         ef:a6:6d:93:f9:e8:ca:8f:07:f9:aa:97:5b:26:ac:68:e4:e7:
         a1:39:d5:1f:61:0a:90:1c:53:5e:e9:c4:cc:ea:64:c6:53:a4:
         f5:19:9f:30:92:ab:12:fc:e5:7d:27:cb:d1:24:aa:50:5d:96:
         59:f3:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:47 2026 by rpki-client