This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5AFrpceB-0ujevBQzkQEDqyRvng.roa
File:                     5AFrpceB-0ujevBQzkQEDqyRvng.roa (raw, json)
Hash identifier:          4sZ82xWPGCcBAvO30VjLMc07t9PNJkupmwyT6SDeCpg=
Subject key identifier:   E4:01:6B:A5:C7:81:FB:4B:A3:7A:F0:50:CE:44:04:0E:AC:91:BE:78
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11C9
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5AFrpceB-0ujevBQzkQEDqyRvng.roa
Signing time:             Tue 03 Feb 2026 02:35:25 +0000
ROA not before:           Tue 03 Feb 2026 02:35:25 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        163.25.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4553 (0x11c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:35:25 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E4016BA5C781FB4BA37AF050CE44040EAC91BE78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f1:ee:6a:97:04:e6:7b:7e:0d:c4:6d:ca:3d:
                    46:de:6b:cd:c4:6e:ed:4f:2a:03:80:1e:e8:bf:b4:
                    aa:ad:65:13:14:20:07:91:23:11:f7:d4:57:cd:d0:
                    0e:78:7d:bd:e5:0e:a4:4b:ca:59:73:c0:7f:73:ba:
                    9d:74:f6:6e:bc:4f:6a:fc:3a:ac:50:83:54:cc:0b:
                    71:22:f4:a9:73:3f:c8:e5:42:e0:5e:55:2c:77:6a:
                    fd:f1:73:c2:6a:8d:97:b6:05:bc:9c:98:3a:b7:2e:
                    54:bb:04:77:f4:58:21:d4:01:62:fb:28:52:04:e8:
                    1d:0f:70:fa:57:1b:41:ba:1c:b9:4a:4c:21:4d:0e:
                    16:d9:ac:79:c2:0b:10:f8:2f:87:a5:f9:12:36:61:
                    88:2c:15:4b:e7:ea:25:d2:8a:52:7d:4b:eb:9f:b3:
                    bf:03:3a:c9:e2:85:7f:c1:c9:9f:01:85:7b:06:d4:
                    86:a7:70:07:4a:f2:33:3e:49:45:f7:be:aa:9d:54:
                    cc:26:ac:a9:4d:42:fe:97:a1:e9:01:bd:99:4a:64:
                    37:b3:02:a8:58:db:0b:a8:8e:de:39:e0:50:8f:8a:
                    a7:04:38:19:06:fc:08:be:36:0d:a0:ff:dd:d9:b9:
                    a7:4d:6a:27:ea:a6:54:03:25:11:03:77:7b:a6:2c:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:01:6B:A5:C7:81:FB:4B:A3:7A:F0:50:CE:44:04:0E:AC:91:BE:78
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5AFrpceB-0ujevBQzkQEDqyRvng.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.25.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:46:80:e3:2e:11:dc:1e:71:14:97:5d:92:17:68:4a:31:c8:
         06:93:35:49:53:48:db:6b:d6:cd:66:a6:98:84:00:61:cc:5e:
         24:23:1e:97:fb:74:d3:48:59:8a:a6:b2:e0:7f:ab:dc:0c:60:
         3e:a8:83:32:55:81:8a:43:40:2d:9c:d1:6d:0b:7a:87:f8:63:
         0b:0b:67:6a:8b:a7:93:f8:18:97:af:1a:09:d7:c1:7a:26:f3:
         c5:f5:68:68:ff:a5:19:c3:dc:95:05:cd:af:4d:85:4f:3a:5b:
         b8:08:f0:4c:bc:3c:1d:13:11:a9:48:bc:02:ee:78:59:ab:85:
         93:a8:af:e4:c7:cc:8e:e1:f8:37:6c:4f:97:cd:56:0f:c6:0e:
         05:50:2e:d5:2c:de:e2:cb:d8:e4:8e:0d:38:34:ba:54:c1:39:
         76:6a:a1:ec:62:a4:12:b7:3c:71:f8:c7:57:48:13:79:d0:10:
         f1:d4:42:60:fa:9e:d1:7d:fe:00:7c:e0:60:06:81:c9:22:8d:
         a8:ad:00:1c:19:a7:2e:e3:83:fa:08:39:41:9e:e0:f8:8c:4e:
         b7:6a:05:37:35:c8:e7:70:10:83:93:4d:20:dd:64:5e:53:23:
         b4:6c:c4:bf:54:28:10:a9:d7:53:f7:71:b3:73:2f:4a:8f:fd:
         ca:fe:71:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:50 2026 by rpki-client