This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/2x-0Ek6xm3CJCyXpFLLpe67Qem4.roa
File:                     2x-0Ek6xm3CJCyXpFLLpe67Qem4.roa (raw, json)
Hash identifier:          HnqlrbYK/Z/wUtu6yx2536QfUiEJYqKZECSfMn+IdT8=
Subject key identifier:   DB:1F:B4:12:4E:B1:9B:70:89:0B:25:E9:14:B2:E9:7B:AE:D0:7A:6E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1382
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/2x-0Ek6xm3CJCyXpFLLpe67Qem4.roa
Signing time:             Fri 06 Feb 2026 01:10:26 +0000
ROA not before:           Fri 06 Feb 2026 01:10:26 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.60.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4994 (0x1382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:10:26 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=DB1FB4124EB19B70890B25E914B2E97BAED07A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:b8:dc:ee:27:20:08:ef:ed:8b:89:ed:35:
                    cb:22:25:b0:f0:56:5c:bc:89:33:61:3e:3d:43:40:
                    40:bf:07:c7:d2:0e:a1:42:05:72:44:5e:80:eb:d6:
                    27:ce:4b:78:7d:5e:67:db:8e:bb:e4:55:12:9c:b3:
                    6f:3c:22:21:74:e4:14:18:67:0d:be:21:5e:89:5c:
                    8a:5d:e4:da:1c:17:a8:e9:e9:98:20:41:0d:19:c1:
                    ef:f8:71:90:61:09:72:87:ce:0e:85:fd:f8:87:ee:
                    e1:2e:4e:78:b6:f6:ca:80:4f:64:8a:59:d2:86:b8:
                    ad:3a:ec:f8:11:68:6c:d0:fb:d6:36:18:9f:bf:07:
                    98:3f:41:62:b0:74:0a:75:5d:15:d1:e6:45:4b:ac:
                    c3:18:68:c2:e6:c7:e2:9b:37:4c:3b:5b:c7:68:df:
                    cd:68:81:75:13:3c:55:1a:77:14:c7:a5:f6:a1:0e:
                    22:8c:b8:f7:a7:75:00:9e:6c:8f:d4:73:39:c5:af:
                    a1:bb:86:a6:00:04:b3:a1:90:a7:ee:ec:83:58:0b:
                    3c:94:9b:5e:4c:a5:a5:63:82:98:85:0d:ab:1b:16:
                    a5:2a:9a:2a:d8:cd:cb:1f:e8:43:a6:a1:80:58:91:
                    fc:57:41:12:46:6f:2f:5b:c7:04:77:e3:10:66:7d:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1F:B4:12:4E:B1:9B:70:89:0B:25:E9:14:B2:E9:7B:AE:D0:7A:6E
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/2x-0Ek6xm3CJCyXpFLLpe67Qem4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:0c:86:de:9d:b8:51:44:6f:5e:61:d2:51:5b:6f:37:83:29:
         4d:07:ac:63:49:a8:2d:ab:7d:a4:dd:10:22:f4:f2:00:e0:4d:
         51:2f:c2:5f:3e:d1:02:32:0c:be:0e:7d:3f:c5:aa:b9:6e:78:
         09:d4:52:b6:78:f7:50:8d:b9:7e:d3:ed:99:72:28:8b:b8:6e:
         01:72:02:f4:67:9c:de:9b:2d:94:ce:95:b2:e7:87:f6:1c:78:
         f8:8d:25:e5:ad:18:e4:29:d6:eb:91:91:0f:c9:7d:68:70:97:
         15:3a:3d:08:79:c1:1e:d2:4e:7a:18:41:1a:ae:a2:5a:13:c1:
         20:47:56:62:0e:42:e3:c5:62:c2:35:34:9e:ae:c8:c1:eb:cc:
         b9:d9:03:ca:71:42:1b:4a:71:56:ef:e8:02:9c:36:0a:ab:bf:
         c0:30:7b:5e:11:c4:70:2e:e4:df:4c:98:70:ea:0f:27:de:c3:
         dd:cd:99:f3:95:e1:78:84:fb:29:1c:12:a5:de:1f:25:11:19:
         be:23:a4:eb:40:a1:f2:61:ed:49:cb:8f:4a:76:17:57:ae:6e:
         c6:af:d5:47:3e:cc:23:f2:a7:7d:4c:c8:51:24:a2:ac:3b:85:
         83:65:39:f2:db:73:32:aa:87:ca:ea:b3:84:34:23:9e:fa:dc:
         1c:dc:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:49 2026 by rpki-client