This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5PodzQ75pYOseJ19vBLQs1k-ADU.roa
File:                     5PodzQ75pYOseJ19vBLQs1k-ADU.roa (raw, json)
Hash identifier:          dkzQF4VIjFK4CXR9CXZW4kPuH+QaHfJ/4A/YIX+j6BQ=
Subject key identifier:   E4:FA:1D:CD:0E:F9:A5:83:AC:78:9D:7D:BC:12:D0:B3:59:3E:00:35
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1271
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5PodzQ75pYOseJ19vBLQs1k-ADU.roa
Signing time:             Tue 03 Feb 2026 03:39:17 +0000
ROA not before:           Tue 03 Feb 2026 03:39:17 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        203.72.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4721 (0x1271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:39:17 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E4FA1DCD0EF9A583AC789D7DBC12D0B3593E0035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:f3:ea:68:b6:47:4c:78:4c:f6:bf:14:3a:
                    e6:d6:90:13:c2:20:12:81:f3:25:89:c9:37:2a:1a:
                    d3:21:88:66:95:aa:46:9d:aa:f6:0d:95:ed:4b:e1:
                    b5:75:f9:e9:8c:1e:ed:85:bd:31:47:d7:26:95:ef:
                    cd:5d:50:10:4b:5a:35:b0:71:58:84:71:4b:06:27:
                    d7:36:79:d9:14:00:b2:a2:d8:b0:01:64:64:4b:bb:
                    ac:76:2f:55:fe:c7:5d:c1:b6:95:41:0d:10:c8:31:
                    dc:ac:d2:16:9e:fd:f3:fa:f2:4e:51:5a:70:09:3b:
                    ad:ce:e9:38:64:5f:c1:b6:17:55:52:5f:a1:13:fd:
                    f7:19:72:72:bc:c9:a8:f8:e6:44:29:ea:14:c8:84:
                    d2:60:da:35:4a:09:4e:bb:0b:6e:62:83:a7:e0:5d:
                    58:91:0c:53:bb:4a:2e:e0:bc:7d:af:32:8b:74:34:
                    eb:8a:f4:04:73:f4:98:0c:6e:ec:6e:e9:54:0e:34:
                    79:1e:20:15:c2:ca:e1:bc:20:c7:05:fc:cb:02:ce:
                    b9:1b:d8:65:fb:9d:b7:4a:74:fb:eb:72:89:f6:67:
                    f8:1f:3b:f1:3b:b7:c4:57:ec:c2:7f:76:83:43:f3:
                    14:c9:f8:ff:5d:86:b3:d1:64:f8:59:2e:fe:f4:4d:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FA:1D:CD:0E:F9:A5:83:AC:78:9D:7D:BC:12:D0:B3:59:3E:00:35
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5PodzQ75pYOseJ19vBLQs1k-ADU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:55:a9:76:26:fb:f5:ca:89:51:2b:80:f6:b2:3a:e9:83:af:
         82:a4:e9:3f:fe:60:aa:34:18:a0:35:08:c5:4e:71:af:35:d5:
         29:d2:d4:a2:c1:a2:ef:59:b3:40:de:8d:95:e9:8a:64:fc:c7:
         fb:b0:50:5a:a6:29:cf:1a:f8:a9:d8:bf:c7:5c:9f:fa:1b:17:
         7f:e0:c9:02:19:75:cf:ae:7c:5a:72:05:6e:8d:8d:6f:cc:4c:
         5c:24:8a:84:6e:de:4c:f8:a7:60:e0:76:c2:98:4a:80:39:f5:
         14:c4:c2:6d:94:54:de:28:c0:73:f2:36:c5:e5:a0:0b:f5:33:
         59:3c:f2:b8:d3:23:c6:52:8d:e1:5a:fe:2b:b7:20:0e:39:e2:
         99:5e:47:6f:8b:09:de:4f:6e:a0:d6:2d:f7:bb:aa:9d:37:2a:
         30:3e:da:58:d7:c8:18:67:fd:cb:bb:84:6d:53:04:c2:ca:7f:
         42:55:64:c8:9d:28:e9:18:f7:5b:7d:0f:e6:a6:6c:76:09:0e:
         03:e8:5b:00:c5:c4:1e:ea:cc:03:ff:d5:fd:5d:ef:6c:52:6b:
         ab:a6:66:22:82:5f:23:5d:de:59:5b:ec:41:a8:e7:dd:1c:08:
         82:29:ce:b2:30:2a:7a:19:fd:7b:27:37:5d:c3:5b:91:85:18:
         f6:71:e1:a1
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MzM5MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU0RkExRENEMEVGOUE1
ODNBQzc4OUQ3REJDMTJEMEIzNTkzRTAwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdMvPqaLZHTHhM9r8UOubWkBPCIBKB8yWJyTcqGtMhiGaVqkad
qvYNle1L4bV1+emMHu2FvTFH1yaV781dUBBLWjWwcViEcUsGJ9c2edkUALKi2LAB
ZGRLu6x2L1X+x13BtpVBDRDIMdys0hae/fP68k5RWnAJO63O6ThkX8G2F1VSX6ET
/fcZcnK8yaj45kQp6hTIhNJg2jVKCU67C25ig6fgXViRDFO7Si7gvH2vMot0NOuK
9ARz9JgMbuxu6VQONHkeIBXCyuG8IMcF/MsCzrkb2GX7nbdKdPvrcon2Z/gfO/E7
t8RX7MJ/doND8xTJ+P9dhrPRZPhZLv70TWMfAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU5PodzQ75pYOseJ19vBLQs1k+ADUwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC81UG9kelE3NXBZT3NlSjE5dkJM
UXMxay1BRFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCy0jU
MA0GCSqGSIb3DQEBCwUAA4IBAQCoVal2Jvv1yolRK4D2sjrpg6+CpOk//mCqNBig
NQjFTnGvNdUp0tSiwaLvWbNA3o2V6Ypk/Mf7sFBapinPGvip2L/HXJ/6Gxd/4MkC
GXXPrnxacgVujY1vzExcJIqEbt5M+Kdg4HbCmEqAOfUUxMJtlFTeKMBz8jbF5aAL
9TNZPPK40yPGUo3hWv4rtyAOOeKZXkdviwneT26g1i33u6qdNyowPtpY18gYZ/3L
u4RtUwTCyn9CVWTInSjpGPdbfQ/mpmx2CQ4D6FsAxcQe6swD/9X9Xe9sUmurpmYi
gl8jXd5ZW+xBqOfdHAiCKc6yMCp6Gf17Jzddw1uRhRj2ceGh
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:56 2026 by rpki-client