This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4BE-PiLGInQLF7wmkIGlP03g_II.roa
File:                     4BE-PiLGInQLF7wmkIGlP03g_II.roa (raw, json)
Hash identifier:          dPb+/tCISP4I3PseY+DryHESxDP66dZeGgdJLE+WjgA=
Subject key identifier:   E0:11:3E:3E:22:C6:22:74:0B:17:BC:26:90:81:A5:3F:4D:E0:FC:82
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1223
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4BE-PiLGInQLF7wmkIGlP03g_II.roa
Signing time:             Tue 03 Feb 2026 02:57:52 +0000
ROA not before:           Tue 03 Feb 2026 02:57:52 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        210.243.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4643 (0x1223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:57:52 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E0113E3E22C622740B17BC269081A53F4DE0FC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:cf:75:f4:99:10:50:c5:0b:0b:79:2d:85:
                    62:8a:1c:76:3c:23:90:7e:b9:e4:f9:3d:29:35:46:
                    b3:8b:8e:f6:e2:00:71:a9:86:0d:4a:2a:0e:9f:9f:
                    d1:35:89:a8:12:39:89:da:18:96:6c:b9:97:1a:45:
                    30:b0:d6:b7:fc:b4:75:51:c4:10:42:17:81:09:7e:
                    35:72:5f:4f:f0:66:ba:bf:c7:92:79:36:da:8e:85:
                    86:fe:b6:7f:05:7e:04:58:fa:c9:a3:d4:cd:60:51:
                    a5:4f:bd:9f:67:2d:5f:15:d8:86:ba:f2:b6:c4:0f:
                    dc:a9:b8:f2:8c:ad:33:97:d6:8e:88:00:8a:76:f3:
                    a2:22:8d:ce:d4:fb:8e:b4:2a:dd:7d:ee:12:31:5c:
                    76:8c:ec:48:e3:a8:33:c0:e1:f8:a9:e9:ed:20:eb:
                    3d:4b:19:e4:5e:fc:53:cb:a4:cf:c9:e5:22:fd:63:
                    72:b1:02:66:da:d8:65:84:6f:4c:a6:87:0c:d8:ee:
                    af:ad:10:74:5e:4c:94:d4:06:9f:44:ea:19:8d:41:
                    36:bb:a3:93:35:bb:a8:58:6f:77:2c:63:59:6a:3e:
                    d8:39:8e:25:b6:9b:8d:7a:6a:c0:57:01:05:dd:65:
                    69:89:e6:7f:47:fe:8b:18:e9:e2:57:ab:a6:d3:67:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:11:3E:3E:22:C6:22:74:0B:17:BC:26:90:81:A5:3F:4D:E0:FC:82
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4BE-PiLGInQLF7wmkIGlP03g_II.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.243.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:7b:e6:c3:57:bf:e6:da:8b:c5:cd:82:cf:a3:a4:e1:31:5a:
         08:49:20:6a:93:65:2e:73:00:26:6b:50:04:5f:ba:53:42:c4:
         b9:0e:4e:50:3d:80:12:ad:f5:b3:a6:89:de:59:3d:92:2a:8e:
         a8:52:b0:7d:16:a5:22:bc:9d:97:cf:f7:c1:50:17:2a:a4:4e:
         4a:fe:0a:f1:3b:80:67:87:a1:32:46:96:94:53:43:aa:d8:c9:
         42:ce:00:47:a4:08:59:c3:ed:39:ce:da:ed:00:a2:d5:51:c9:
         04:9b:46:98:82:53:ab:79:40:58:ca:4c:df:3a:d7:8c:fe:85:
         ae:9f:4e:d4:1e:81:16:cb:01:12:e2:8c:05:53:25:9f:2e:2d:
         1b:66:ef:69:f2:14:a1:41:97:23:69:7c:e9:2e:26:9d:d7:02:
         e2:00:ef:58:b8:9f:71:7a:43:13:c9:62:45:7d:48:10:e4:44:
         51:34:fc:3b:c7:87:9d:c1:1e:a2:3f:fc:93:cb:9e:1d:74:d3:
         13:38:8e:42:a9:48:c1:01:f4:a6:26:16:4c:61:27:8f:6b:e4:
         6e:91:e8:2a:5c:ab:e0:0d:46:0c:cc:fe:bc:1f:72:fd:b9:4e:
         28:76:8d:f2:18:f1:62:38:4a:4c:57:e5:04:58:1a:89:1b:7c:
         e7:17:78:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:56 2026 by rpki-client