This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5Yo4n06z9c8OJ53fCfeyxrHmlSg.roa
File:                     5Yo4n06z9c8OJ53fCfeyxrHmlSg.roa (raw, json)
Hash identifier:          UQ1TK1qwCmfBRbQtKx1voQUeDt5HB3ioyU8BpxgzWdE=
Subject key identifier:   E5:8A:38:9F:4E:B3:F5:CF:0E:27:9D:DF:09:F7:B2:C6:B1:E6:95:28
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12A0
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5Yo4n06z9c8OJ53fCfeyxrHmlSg.roa
Signing time:             Tue 03 Feb 2026 08:49:39 +0000
ROA not before:           Tue 03 Feb 2026 08:49:39 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.68.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4768 (0x12a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:49:39 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E58A389F4EB3F5CF0E279DDF09F7B2C6B1E69528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:40:45:15:74:66:ab:c6:21:b1:fe:ed:23:05:
                    b6:ec:e5:61:a1:bc:0e:d0:d2:d8:c7:ab:d0:41:cd:
                    96:65:23:45:6b:5c:46:25:98:5e:5b:c7:dc:57:a6:
                    3e:8e:4b:d4:ae:64:f3:e9:cf:d2:b7:f4:87:00:59:
                    07:7f:a7:36:9d:8a:62:3e:60:b1:64:ec:15:df:98:
                    35:57:fb:8c:bf:ad:b1:e5:e1:77:8c:de:3d:c6:e9:
                    95:3b:b2:82:e1:90:a8:59:6c:04:f6:59:07:c7:e8:
                    e3:a1:44:94:f6:5d:b5:4f:65:a3:d3:f5:09:bb:fe:
                    1d:b7:48:61:20:d3:2f:34:13:88:b1:ee:06:e9:b9:
                    6a:94:8c:53:2e:86:fc:62:b0:60:fa:fc:a5:2b:0a:
                    44:c5:7b:7c:13:53:3c:8f:98:c5:c0:f9:bf:ef:28:
                    7c:86:bc:96:31:71:c1:ec:b0:0e:a0:3d:c8:a0:bd:
                    bc:da:aa:91:74:c6:28:c9:44:09:9c:44:2e:6b:36:
                    7d:e5:3e:32:4e:9d:47:3c:32:07:d4:e8:14:c0:63:
                    0b:f6:b0:6b:46:9e:6a:17:56:8b:f8:cf:fb:48:19:
                    0d:a1:5f:db:1a:e6:4c:a9:2d:18:fc:c8:cb:22:1e:
                    f0:ea:66:5d:08:e7:3e:40:df:5e:7b:96:79:04:25:
                    b1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8A:38:9F:4E:B3:F5:CF:0E:27:9D:DF:09:F7:B2:C6:B1:E6:95:28
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5Yo4n06z9c8OJ53fCfeyxrHmlSg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:05:71:88:8d:68:b2:fd:13:4b:5d:0d:07:77:4c:9f:1e:e4:
         99:46:c6:5c:c5:10:bb:fa:92:bb:0f:cc:85:3d:19:f7:8c:25:
         69:a1:1c:43:1a:1c:2e:fb:ff:c1:f9:26:64:ef:8b:f8:e2:d7:
         a7:e8:07:77:cb:57:84:ed:aa:62:6b:9e:e1:5f:68:3f:44:4f:
         22:fe:7e:ef:8e:e8:bb:40:68:c4:a9:a0:b4:3d:7c:14:53:6d:
         40:f8:32:15:c8:04:bc:c6:45:44:9a:e1:b2:1b:63:1c:22:1f:
         75:6f:28:75:20:15:c1:a3:33:ec:97:43:64:42:b6:5e:67:a6:
         71:ae:60:33:df:69:93:e3:05:d5:9d:69:2a:58:45:1d:7c:db:
         c1:0f:52:44:e9:bd:26:2d:db:ff:70:51:72:b9:e1:f4:1d:22:
         b0:8e:68:03:62:99:4a:a5:44:0d:6e:29:c7:ad:82:84:a4:dd:
         f4:04:a0:eb:f7:87:b5:53:0c:85:ed:c0:be:e3:85:d7:2e:5a:
         22:d9:86:dc:5b:f6:7b:32:3e:ea:b4:d0:11:06:59:1e:85:0b:
         a0:2c:4b:55:c2:7c:f1:f7:cf:5b:42:c9:b7:81:4a:21:68:4b:
         d3:64:46:8d:27:44:1c:6b:9b:13:2a:54:d6:98:a9:04:4a:ae:
         93:3d:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:26 2026 by rpki-client