This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5CwU-hbsIT-Uzz6ekdK4neLQliw.roa
File:                     5CwU-hbsIT-Uzz6ekdK4neLQliw.roa (raw, json)
Hash identifier:          ANs23IfV2/FvkMKErCKr5d3IpYRN/z14MuX/AUYg824=
Subject key identifier:   E4:2C:14:FA:16:EC:21:3F:94:CF:3E:9E:91:D2:B8:9D:E2:D0:96:2C
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       13A8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5CwU-hbsIT-Uzz6ekdK4neLQliw.roa
Signing time:             Fri 06 Feb 2026 01:13:33 +0000
ROA not before:           Fri 06 Feb 2026 01:13:33 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.70.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5032 (0x13a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:13:33 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E42C14FA16EC213F94CF3E9E91D2B89DE2D0962C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:11:71:e2:66:35:67:7b:8b:7d:3e:ed:d3:
                    e4:e4:d7:a9:39:fd:40:1a:91:1c:43:63:82:1f:83:
                    8d:eb:41:cc:cf:91:6e:40:28:9a:1f:73:39:b2:0a:
                    86:46:ec:45:be:9d:4a:f5:a9:10:20:d3:fc:b6:73:
                    15:24:2a:06:a2:b0:14:fa:fe:e5:ac:d9:59:99:41:
                    37:5c:ea:49:15:2e:ac:5c:1d:ff:d3:08:36:b4:88:
                    bd:a7:df:e4:23:05:9b:f0:f3:93:d3:eb:d5:da:ed:
                    35:a1:47:95:f9:99:83:42:94:82:31:92:20:78:e7:
                    00:17:f5:f9:b1:a8:f3:73:ef:f6:73:a4:0b:56:76:
                    e4:54:3a:14:50:bd:12:4b:91:99:f5:a2:db:6d:db:
                    a1:f5:67:fb:14:39:1c:80:70:55:7a:da:6c:9d:a4:
                    0f:ac:97:5c:0d:8c:c1:6f:d0:f5:2b:91:71:a9:be:
                    dc:15:7f:32:7a:db:b2:f5:36:39:8b:3d:40:d6:24:
                    5f:fd:bb:62:7c:45:dc:75:f5:a4:e8:b8:7c:91:2e:
                    6f:8a:ff:75:74:65:1c:f8:52:d2:d4:ed:27:41:36:
                    25:ec:a3:c1:62:00:7d:45:64:69:bb:30:70:9c:ca:
                    df:f1:21:1a:c9:2a:21:e5:0f:89:1a:1b:b2:87:b2:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2C:14:FA:16:EC:21:3F:94:CF:3E:9E:91:D2:B8:9D:E2:D0:96:2C
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5CwU-hbsIT-Uzz6ekdK4neLQliw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:40:ea:d7:d3:c6:7d:0a:7c:e3:f5:47:87:2b:c8:9b:51:d9:
         2f:ec:22:4f:ed:4d:69:92:e8:c5:43:a5:79:a9:f0:15:06:d8:
         cb:9a:27:a2:0e:34:a7:ca:cb:c2:b0:83:40:07:29:2e:bf:df:
         97:76:32:67:0a:3d:28:09:85:65:c3:2b:56:3b:c0:75:e7:06:
         e1:05:2b:3b:95:90:0e:90:66:2b:58:32:a5:e2:e4:e0:06:76:
         2f:9e:a6:cc:29:b7:f1:22:7f:87:be:17:6e:9e:ee:8d:bd:3e:
         7a:da:83:e8:84:96:c4:a0:6c:00:b0:2d:3a:71:1b:43:15:22:
         d2:17:00:e4:d3:15:67:cf:c5:88:f0:f1:32:f2:89:2c:b9:3f:
         18:fe:63:01:2e:10:df:0c:1f:6d:41:1f:51:50:92:53:95:9c:
         8a:a5:13:b8:ad:9e:8c:df:05:38:ad:a9:f2:f4:bc:90:f8:bb:
         7b:d3:24:06:d3:74:a1:38:a1:4e:5f:fd:fc:fb:72:1c:3d:af:
         5b:74:83:91:ee:bb:01:a8:1e:32:14:2d:31:13:56:dc:16:f4:
         01:d4:cb:e4:92:53:34:fc:5f:8b:13:52:49:01:ae:5d:c7:37:
         93:b8:39:9d:26:67:ca:69:5c:75:67:dc:b6:a0:4b:81:6c:be:
         87:0b:fa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:54 2026 by rpki-client