This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4SSpf4T62BmtAJeCm0OsgASypeI.roa
File:                     4SSpf4T62BmtAJeCm0OsgASypeI.roa (raw, json)
Hash identifier:          5NsC/Qaliko6A8GBgsvdWEMGTOGPeEyje+sKRJrz2zQ=
Subject key identifier:   E1:24:A9:7F:84:FA:D8:19:AD:00:97:82:9B:43:AC:80:04:B2:A5:E2
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12E2
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4SSpf4T62BmtAJeCm0OsgASypeI.roa
Signing time:             Tue 03 Feb 2026 08:57:34 +0000
ROA not before:           Tue 03 Feb 2026 08:57:34 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.60.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4834 (0x12e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:57:34 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E124A97F84FAD819AD0097829B43AC8004B2A5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1e:ef:cd:8f:6e:4a:aa:3a:26:ab:d9:a6:c3:
                    45:ae:eb:27:5c:83:32:ca:60:10:6d:c9:08:25:b4:
                    fa:90:94:b4:2c:ff:3d:30:96:a6:1c:2c:33:6f:8e:
                    ac:37:1c:30:ec:69:a6:ab:89:31:94:d9:37:8e:87:
                    c6:82:05:4a:00:3c:6d:3b:74:9f:ef:69:66:17:a8:
                    b3:f2:22:82:c5:d2:70:d2:f2:7b:2c:84:c4:4c:b0:
                    5b:aa:dd:fc:50:22:70:a8:2b:e4:29:66:c5:01:59:
                    04:74:aa:09:28:92:cd:bd:85:6a:41:9d:dd:a4:0d:
                    9e:1c:23:db:e6:06:9f:7b:9c:a4:73:1d:e0:df:40:
                    ef:72:18:e2:5f:91:22:1e:ab:18:f6:00:1c:c5:6f:
                    8d:d2:26:53:2e:10:3b:2a:ef:01:eb:71:19:c7:c4:
                    78:bb:5e:43:86:75:e3:f4:f4:60:12:41:e5:f4:7c:
                    ca:3a:11:1b:ba:5f:ed:fd:de:a7:f3:f2:05:46:7d:
                    b6:9b:35:0b:d5:a5:80:f9:f4:90:69:e6:03:f3:14:
                    c9:ff:9f:85:ad:9c:b2:97:e4:96:82:c8:4b:8f:82:
                    3d:be:14:e6:c7:ac:1e:50:53:26:7f:22:53:80:33:
                    e6:23:1b:e3:0c:15:bb:4a:be:14:7c:7e:86:6d:b5:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:24:A9:7F:84:FA:D8:19:AD:00:97:82:9B:43:AC:80:04:B2:A5:E2
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4SSpf4T62BmtAJeCm0OsgASypeI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:cf:a2:68:8d:9e:e7:62:75:d6:ae:f7:81:bb:c6:f8:53:
         0b:79:0e:e5:64:64:13:be:0e:44:b1:74:a1:ae:30:e9:4f:bb:
         90:f4:c0:f6:69:ac:7d:8a:6d:b9:25:00:be:94:13:e4:f4:92:
         2b:e1:dc:7b:57:db:13:6f:d9:43:b5:13:bd:3d:7e:f0:74:ae:
         10:ce:40:a7:ae:42:6d:5b:27:19:bb:f4:f2:09:ed:f5:9f:df:
         fd:d3:6a:34:e4:90:ee:88:60:ef:bd:38:26:0d:f3:75:1d:09:
         6f:1b:60:0d:da:de:8f:5a:66:b9:7d:f9:b3:88:ae:5c:14:b5:
         5e:c9:0b:cc:b7:c4:af:ba:c9:e7:1a:49:dd:6b:7b:b5:d3:2a:
         2a:4d:9f:20:67:9d:54:97:dd:d1:39:a2:6e:d2:a1:fd:ac:cf:
         35:d8:2d:29:fe:42:dc:d0:c2:09:45:42:38:9f:c9:51:7a:c1:
         51:8f:e5:5b:2e:73:a7:15:61:7c:ed:7c:30:c5:30:55:96:7f:
         b8:a7:f4:5a:57:d9:7c:92:8f:1f:1d:6c:84:57:36:f2:53:7b:
         bd:0a:bb:99:37:e3:f2:36:f3:c3:a8:08:89:e8:9f:dc:5c:6b:
         ed:bf:b5:2a:34:99:41:01:e8:7b:98:04:42:1c:c9:ff:35:cc:
         32:e6:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:54 2026 by rpki-client