This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/64lKWi2CLTxbaOcC9ryXLvWXMGg.roa
File:                     64lKWi2CLTxbaOcC9ryXLvWXMGg.roa (raw, json)
Hash identifier:          G/cbKdg9SCR73gAP0tNIuBprDsRwYsdTKmkBsIWHvRA=
Subject key identifier:   EB:89:4A:5A:2D:82:2D:3C:5B:68:E7:02:F6:BC:97:2E:F5:97:30:68
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       121D
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/64lKWi2CLTxbaOcC9ryXLvWXMGg.roa
Signing time:             Tue 03 Feb 2026 02:57:28 +0000
ROA not before:           Tue 03 Feb 2026 02:57:28 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        210.240.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4637 (0x121d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:57:28 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EB894A5A2D822D3C5B68E702F6BC972EF5973068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:1c:6a:74:d5:0a:6a:27:e4:a3:21:80:a6:
                    cb:12:30:dc:cc:b9:61:67:aa:9b:f5:7b:be:f2:83:
                    c5:15:42:e5:72:04:c8:20:59:f7:ef:02:54:d5:99:
                    6e:28:e2:c2:07:42:6d:63:9c:94:8e:e0:82:3d:c7:
                    27:f0:28:d9:9e:2a:68:35:0c:43:67:6d:e9:56:ac:
                    84:dd:73:43:c0:b5:93:24:12:ce:51:d8:f1:57:f2:
                    20:79:47:9c:3e:68:37:41:b0:15:66:8b:2d:57:05:
                    a7:ff:02:9c:5f:5d:97:3f:67:62:ba:35:ca:a5:7b:
                    46:4a:f7:46:bb:e8:b7:99:be:61:7a:de:5d:f3:65:
                    07:42:4a:ad:b6:9a:6d:41:71:0c:b3:84:28:c9:9f:
                    e0:2e:db:a5:46:9f:d6:2a:e5:b5:82:28:9d:3c:6d:
                    e0:7f:d0:1e:7a:a9:69:db:85:2e:bf:cf:4c:26:3a:
                    2f:19:03:2e:c1:f7:de:c8:12:c0:d8:ef:cf:60:76:
                    0e:69:bd:03:b2:82:3b:c3:c7:26:43:c4:67:9d:64:
                    bb:a2:d6:93:69:fa:fe:73:20:df:bf:da:f7:35:05:
                    bd:0d:9a:b0:c0:c6:5b:e3:dd:0b:64:82:00:32:0b:
                    82:d0:63:65:93:6a:aa:87:d1:11:3a:36:8a:25:b4:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:89:4A:5A:2D:82:2D:3C:5B:68:E7:02:F6:BC:97:2E:F5:97:30:68
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/64lKWi2CLTxbaOcC9ryXLvWXMGg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.240.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:6d:a7:b5:9e:66:08:b5:02:cc:ae:ab:e9:57:94:90:e5:10:
         08:99:4b:33:bf:9c:e9:bd:1f:f7:fb:08:e7:70:a1:13:8f:89:
         18:1e:85:f1:8f:ef:96:52:21:31:28:0b:19:cd:ba:b1:42:eb:
         0e:2c:ff:e8:de:50:4d:52:e8:aa:2c:e6:d2:eb:aa:09:a9:c6:
         8c:55:0d:c0:4a:b3:f0:45:d9:66:74:0c:53:39:67:24:2f:a2:
         91:b6:8e:e8:4b:22:69:11:d0:80:c5:b5:41:96:f7:8b:ae:2e:
         5d:3d:a1:36:34:ea:f7:4e:eb:4f:7f:e8:9f:ef:2a:e3:4a:16:
         8f:bc:69:40:18:43:47:1f:35:c8:ae:dd:a5:d6:14:81:1f:80:
         ce:66:d1:b4:cf:59:b1:42:54:7e:1c:38:46:5a:85:43:c2:2a:
         fe:91:f7:47:25:7f:32:8a:13:70:77:bc:87:25:c2:5d:b1:f4:
         3b:d3:ba:d4:8a:78:8a:68:30:e4:62:d1:e5:3a:8d:3a:60:e7:
         d4:9e:4d:47:41:78:b4:50:34:da:1e:e8:88:5e:79:a0:9e:bb:
         1e:6f:c8:95:32:08:e8:5c:43:20:ed:81:c5:9d:57:72:93:83:
         41:b6:91:79:2c:75:69:43:98:cb:4d:f9:40:13:a3:2f:e1:fc:
         e7:cf:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:25 2026 by rpki-client