This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/3oKQ0Ww7FhoY2QkvjO6i4etOB6I.roa
File:                     3oKQ0Ww7FhoY2QkvjO6i4etOB6I.roa (raw, json)
Hash identifier:          Onbc9x39sAh+9GgDxZuYwMd7GVn/dGd9PHg4h9YluUQ=
Subject key identifier:   DE:82:90:D1:6C:3B:16:1A:18:D9:09:2F:8C:EE:A2:E1:EB:4E:07:A2
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1358
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3oKQ0Ww7FhoY2QkvjO6i4etOB6I.roa
Signing time:             Fri 06 Feb 2026 01:06:47 +0000
ROA not before:           Fri 06 Feb 2026 01:06:47 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.72.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4952 (0x1358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:06:47 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=DE8290D16C3B161A18D9092F8CEEA2E1EB4E07A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:2f:e4:d4:6f:56:91:86:07:56:e0:85:03:
                    1c:56:8f:39:e4:13:8d:20:4f:39:9a:51:1f:17:54:
                    97:25:37:84:23:77:db:14:24:9c:ac:e4:85:8e:ed:
                    63:9f:f9:fc:d1:f7:5f:70:50:c6:ee:da:80:28:24:
                    89:41:51:40:80:a2:a6:05:1a:21:f1:b1:42:b7:d5:
                    64:6d:1b:c3:0f:45:a4:06:54:2c:b5:ac:ac:2e:47:
                    b6:62:15:52:9e:17:3f:99:52:56:6b:00:f9:f9:0d:
                    8d:5e:e0:a9:96:0c:5b:d1:6c:aa:d9:42:6e:20:ef:
                    20:3d:b9:93:67:cb:30:54:ce:d0:9e:5f:a0:db:f5:
                    ba:79:b3:f6:55:22:71:cd:42:bf:ce:ee:ff:1b:5c:
                    2e:2a:ae:03:f6:a9:a5:7e:0c:2c:2b:eb:8b:ee:da:
                    ca:84:af:21:2b:0d:1d:8b:df:68:8f:6a:5d:f2:94:
                    7c:e3:fe:6e:1c:6a:7c:3c:d9:f3:5e:d4:68:cd:53:
                    cb:be:e1:86:73:81:b5:c2:e7:de:62:9b:b2:80:7e:
                    f3:78:12:f1:2c:47:bb:d6:5b:33:43:7a:7d:ea:35:
                    b9:90:e7:17:c1:fe:c2:51:aa:83:8c:79:04:35:05:
                    e4:60:40:91:bc:07:a5:6e:f3:9f:0d:cd:29:f4:8c:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:82:90:D1:6C:3B:16:1A:18:D9:09:2F:8C:EE:A2:E1:EB:4E:07:A2
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3oKQ0Ww7FhoY2QkvjO6i4etOB6I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:97:f1:00:fc:ad:dd:61:64:e1:d0:d6:93:58:a2:ef:c3:
         25:95:2d:05:99:0c:71:58:d5:65:da:7b:46:f1:e5:5e:61:60:
         f0:32:cf:ff:13:b6:57:7a:ca:f7:54:b5:d4:24:32:27:10:b6:
         d7:cf:4f:6c:d2:fe:a2:5e:33:95:96:37:67:72:10:27:ff:92:
         ae:13:13:8b:8f:40:1e:d4:9d:7e:55:98:a2:93:e5:18:4c:d7:
         9e:a2:49:11:c8:0d:f2:30:1f:33:63:04:26:df:77:65:7d:ff:
         7d:68:50:a8:86:15:4e:00:d2:8f:8f:a3:34:04:31:7c:80:53:
         ff:38:c5:21:f4:4d:a2:43:88:95:ce:40:09:0b:85:26:2f:69:
         b1:a8:fe:27:9a:e6:ea:d8:57:db:43:92:30:cb:68:36:3f:0e:
         61:9e:21:83:98:0b:e1:6b:7a:ca:cd:00:75:f7:10:d4:4b:9b:
         21:6a:b9:22:92:49:b9:57:a4:ef:f4:f5:84:e1:3f:34:3c:d4:
         0d:38:fd:4c:94:92:73:41:fe:2e:31:25:65:e6:b8:b5:49:f6:
         1b:63:07:b6:91:e4:46:f5:e6:6e:e3:cf:f6:70:80:1b:b7:a0:
         70:55:33:8d:e6:29:15:08:d0:94:6f:82:3f:df:84:5d:96:67:
         63:01:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:31 2026 by rpki-client