This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/3uj-MaCrgo3PsJj8OeipWiX5oQk.roa
File:                     3uj-MaCrgo3PsJj8OeipWiX5oQk.roa (raw, json)
Hash identifier:          Bbjx/WV5/I+VYO4X5mW1I/Sh/mGEWZXg9SCgqA12CzM=
Subject key identifier:   DE:E8:FE:31:A0:AB:82:8D:CF:B0:98:FC:39:E8:A9:5A:25:F9:A1:09
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11F9
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3uj-MaCrgo3PsJj8OeipWiX5oQk.roa
Signing time:             Tue 03 Feb 2026 02:54:47 +0000
ROA not before:           Tue 03 Feb 2026 02:54:47 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        203.68.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4601 (0x11f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:54:47 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=DEE8FE31A0AB828DCFB098FC39E8A95A25F9A109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:78:0c:04:43:55:b5:1c:09:e4:a2:af:31:c4:
                    0c:ba:b7:0d:8b:56:b6:02:58:89:d6:90:c9:7f:44:
                    0d:78:a0:15:03:6f:73:72:14:7d:8a:1b:ea:d6:28:
                    db:6d:75:14:c1:b6:6a:b6:ed:56:f3:98:d7:e5:e0:
                    1f:16:32:41:fd:70:7c:8c:42:35:22:5b:30:4e:4c:
                    dc:37:a1:90:58:e5:e0:eb:18:21:df:f8:22:ed:a2:
                    34:f6:66:d8:14:e2:95:7c:15:d9:38:85:2b:85:15:
                    c3:ee:0d:15:c4:77:07:98:c8:65:b3:d7:bb:46:84:
                    cb:4b:62:9c:eb:85:29:c2:11:9f:13:4d:fe:bb:01:
                    dc:03:55:ac:ca:c4:fb:0e:f1:e3:70:af:17:9c:c2:
                    cb:43:3a:03:58:93:b4:ab:9e:8e:0f:a3:dd:22:33:
                    dd:32:18:0a:00:ef:bf:1e:bf:62:65:31:6c:3a:05:
                    65:66:81:61:7b:94:1a:e1:16:b0:cb:94:bb:6a:79:
                    96:f6:6f:c2:58:a3:7b:09:52:19:9f:d7:b6:ee:60:
                    d6:1a:fb:26:3c:56:54:21:c4:c6:1f:29:44:b4:1f:
                    94:3c:4a:8e:3e:88:35:aa:d1:09:13:ce:00:38:87:
                    63:76:4f:dc:31:1a:09:64:8e:84:6c:c2:54:60:b4:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E8:FE:31:A0:AB:82:8D:CF:B0:98:FC:39:E8:A9:5A:25:F9:A1:09
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3uj-MaCrgo3PsJj8OeipWiX5oQk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:f3:2c:bd:fb:f3:6a:b9:08:0e:27:ff:8b:ec:e3:cc:fd:47:
         b0:b9:ee:d2:6d:b9:f7:3d:d7:c4:38:62:58:f6:4f:43:59:e9:
         72:7f:d8:4b:44:7a:a5:7a:b9:49:de:a8:5d:2e:6b:19:b8:40:
         6d:db:af:af:69:68:bf:3b:31:30:32:ba:41:c7:2c:ab:63:f7:
         9e:ef:b0:ba:f7:f3:57:01:aa:ab:44:0d:55:ea:38:98:a2:87:
         81:20:94:33:c9:d4:6f:f8:5c:af:c2:4c:e5:9e:f0:5a:25:7c:
         a1:d3:19:89:3a:fc:9d:3d:f1:aa:3f:ac:50:4b:2a:0c:87:37:
         48:9f:2f:4e:41:fb:90:9e:84:d5:1b:44:d0:04:80:dd:b1:c3:
         9d:08:9b:55:1a:e1:64:01:47:e3:3b:12:81:45:5c:39:0f:34:
         e2:8e:ca:4f:32:35:46:72:f5:c3:b1:65:0f:7c:87:cd:e3:5f:
         ff:8c:b5:59:d1:ce:8d:a2:be:75:00:d4:4f:3d:ed:e9:f8:bb:
         d0:73:6b:18:36:6a:80:b7:0f:34:df:be:77:ef:c5:71:59:2f:
         5c:cc:36:10:0e:22:3c:d4:86:75:5d:f8:a6:b3:3a:8f:d3:0e:
         c3:b3:e3:36:55:ba:a3:65:c8:49:4c:69:1c:6b:77:e1:29:f7:
         39:ec:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:26 2026 by rpki-client