This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5gOWgzlXzh8Di9fOeRmJM6zhU54.roa
File:                     5gOWgzlXzh8Di9fOeRmJM6zhU54.roa (raw, json)
Hash identifier:          VvBiqk2/VqtIQqOTWvvH5rx9DnWqmoZ+xSHbVUR1Ea0=
Subject key identifier:   E6:03:96:83:39:57:CE:1F:03:8B:D7:CE:79:19:89:33:AC:E1:53:9E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       122E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5gOWgzlXzh8Di9fOeRmJM6zhU54.roa
Signing time:             Tue 03 Feb 2026 03:00:48 +0000
ROA not before:           Tue 03 Feb 2026 03:00:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17712
IP address blocks:        203.72.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4654 (0x122e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:00:48 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E60396833957CE1F038BD7CE79198933ACE1539E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:70:5e:d4:71:6b:97:09:03:82:68:46:40:
                    a3:bf:f8:bf:f1:55:29:e4:e2:07:6b:d0:69:6d:10:
                    14:90:f6:07:62:10:17:66:a7:c7:f9:07:71:c9:e6:
                    90:26:69:2a:63:ce:e5:0d:cf:04:d9:4e:49:76:76:
                    7f:2c:a0:41:88:ad:44:0f:35:d9:58:76:ac:97:50:
                    9d:ce:99:29:a0:60:cb:6c:54:c6:52:83:f9:fd:ff:
                    f5:7e:f1:20:2b:3c:3c:2b:0a:54:47:88:f2:4b:7b:
                    8c:80:a9:c9:fb:8d:15:d2:00:fc:fd:45:6c:23:18:
                    d2:86:b7:6e:6f:7a:66:d4:58:18:5d:bf:0b:e4:5a:
                    29:8c:6f:60:f1:75:f5:6e:24:44:88:db:fe:d1:9d:
                    78:73:42:ff:88:3c:8b:c4:27:e1:10:17:b5:2c:66:
                    a0:27:5c:cf:e3:57:c3:ea:d5:26:33:20:76:87:66:
                    5b:a1:73:7d:8d:42:0c:8a:e7:c6:d0:37:c0:dc:50:
                    8a:89:85:a3:86:87:32:9f:6d:ba:42:2f:31:10:64:
                    ea:20:02:8c:e7:02:9e:31:9e:36:7e:05:9e:12:a4:
                    32:62:ed:ca:88:52:52:b1:c4:8b:8c:63:e3:d3:01:
                    bb:0a:74:2e:33:ec:3f:f0:90:bb:76:1f:5b:06:5d:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:03:96:83:39:57:CE:1F:03:8B:D7:CE:79:19:89:33:AC:E1:53:9E
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5gOWgzlXzh8Di9fOeRmJM6zhU54.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:20:b5:38:49:0e:db:c5:3a:da:eb:d7:07:d8:a9:b5:cf:a8:
         6e:68:4b:71:8d:ee:79:0e:1d:6e:2e:fc:97:00:35:77:46:1f:
         47:d8:1a:a8:79:9f:43:a9:36:0b:c7:aa:f1:1a:5b:13:3b:f9:
         b6:b2:6f:49:91:e9:5b:b3:51:c9:ce:7d:e6:ec:fb:83:0b:f3:
         68:2a:67:2f:18:09:08:df:d7:45:93:68:c4:40:ae:c6:63:08:
         a7:7a:5d:61:29:d1:35:71:5a:56:bf:fc:5d:08:6f:cd:e4:f8:
         b8:cb:c1:50:d8:23:9d:1c:66:f4:21:d2:e8:78:8f:e8:4d:7f:
         b4:a6:92:3c:9b:2d:7d:71:84:c8:f4:9e:8f:d1:a5:ba:d6:cf:
         42:c7:c9:a3:46:a7:4e:b5:b4:98:8d:e3:f5:df:ef:69:bc:90:
         7f:f8:c9:94:ba:92:06:62:dd:49:cb:d4:06:77:73:be:c0:df:
         07:f2:10:ad:6b:87:e4:33:3b:81:3a:8d:5c:8b:ec:70:50:0c:
         e8:3b:1b:4e:83:b5:83:f0:22:f3:3e:3f:24:eb:14:24:55:52:
         58:e5:15:6b:27:be:43:f8:d6:85:fb:70:8d:be:6a:54:ef:e8:
         40:d3:f7:c4:83:5d:bf:7f:df:f6:63:7c:94:42:66:c2:6e:d1:
         0c:6a:c9:8a
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MzAwNDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU2MDM5NjgzMzk1N0NF
MUYwMzhCRDdDRTc5MTk4OTMzQUNFMTUzOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdo3Be1HFrlwkDgmhGQKO/+L/xVSnk4gdr0GltEBSQ9gdiEBdm
p8f5B3HJ5pAmaSpjzuUNzwTZTkl2dn8soEGIrUQPNdlYdqyXUJ3OmSmgYMtsVMZS
g/n9//V+8SArPDwrClRHiPJLe4yAqcn7jRXSAPz9RWwjGNKGt25vembUWBhdvwvk
WimMb2DxdfVuJESI2/7RnXhzQv+IPIvEJ+EQF7UsZqAnXM/jV8Pq1SYzIHaHZluh
c32NQgyK58bQN8DcUIqJhaOGhzKfbbpCLzEQZOogAoznAp4xnjZ+BZ4SpDJi7cqI
UlKxxIuMY+PTAbsKdC4z7D/wkLt2H1sGXZkfAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU5gOWgzlXzh8Di9fOeRmJM6zhU54wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC81Z09XZ3psWHpoOERpOWZPZVJt
Sk02emhVNTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0gU
MA0GCSqGSIb3DQEBCwUAA4IBAQBUILU4SQ7bxTra69cH2Km1z6huaEtxje55Dh1u
LvyXADV3Rh9H2BqoeZ9DqTYLx6rxGlsTO/m2sm9Jkelbs1HJzn3m7PuDC/NoKmcv
GAkI39dFk2jEQK7GYwinel1hKdE1cVpWv/xdCG/N5Pi4y8FQ2COdHGb0IdLoeI/o
TX+0ppI8my19cYTI9J6P0aW61s9Cx8mjRqdOtbSYjeP13+9pvJB/+MmUupIGYt1J
y9QGd3O+wN8H8hCta4fkMzuBOo1ci+xwUAzoOxtOg7WD8CLzPj8k6xQkVVJY5RVr
J75D+NaF+3CNvmpU7+hA0/fEg12/f9/2Y3yUQmbCbtEMasmK
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:26 2026 by rpki-client