This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/6Tb8Vku7GpQTXMgrcSfBCQql3h0.roa
File:                     6Tb8Vku7GpQTXMgrcSfBCQql3h0.roa (raw, json)
Hash identifier:          OZ8yGMy1G/cgORwhSSTEg8tQ4ROMWE1ihe91nhPYIjg=
Subject key identifier:   E9:36:FC:56:4B:BB:1A:94:13:5C:C8:2B:71:27:C1:09:0A:A5:DE:1D
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11F1
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/6Tb8Vku7GpQTXMgrcSfBCQql3h0.roa
Signing time:             Tue 03 Feb 2026 02:54:15 +0000
ROA not before:           Tue 03 Feb 2026 02:54:15 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        203.64.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4593 (0x11f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:54:15 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E936FC564BBB1A94135CC82B7127C1090AA5DE1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:ab:ca:fc:34:e5:9a:e9:11:02:fc:cc:c5:
                    1a:66:f5:21:42:0a:08:10:1f:43:6f:1c:1c:a4:30:
                    4a:4e:78:c1:c1:f9:ff:19:8c:f8:ea:43:3b:a0:d0:
                    0a:9e:98:40:41:0f:8d:91:1f:11:2a:59:22:fb:7d:
                    d6:c7:45:1a:ed:a8:de:be:b4:2b:3d:b9:57:e3:dc:
                    71:93:f9:7d:7e:13:0b:7d:36:49:7e:a9:88:0f:9f:
                    b3:da:42:b9:84:d8:d9:7b:b4:10:03:b4:75:6a:3b:
                    79:a2:52:c6:b8:70:76:82:32:09:df:4a:c4:13:c4:
                    d7:ed:9e:a4:f3:02:cd:1c:85:32:8a:de:d7:83:61:
                    96:fc:33:d6:be:a5:a6:6a:5c:e0:0f:8e:41:fe:a0:
                    a4:ea:4b:62:3d:ea:51:d2:b7:a7:c7:90:68:e3:95:
                    db:92:6c:39:46:3c:03:08:3a:f6:ea:20:0b:5b:7a:
                    6a:c0:7f:3d:a5:fd:b3:4e:2c:48:e3:24:fa:91:02:
                    47:4d:9f:82:ad:53:a8:fa:97:70:c7:db:02:dd:1b:
                    88:63:b2:d9:99:86:df:be:f6:4e:ba:59:e7:e5:30:
                    62:42:14:53:60:34:a5:28:36:49:2e:2a:ec:bd:cf:
                    0b:a9:54:ce:a2:85:97:16:65:fa:3a:73:2c:9d:6e:
                    16:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:36:FC:56:4B:BB:1A:94:13:5C:C8:2B:71:27:C1:09:0A:A5:DE:1D
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/6Tb8Vku7GpQTXMgrcSfBCQql3h0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:a8:5d:5e:f6:d9:14:00:b5:a2:74:90:9a:43:00:c8:e6:47:
         24:f8:35:66:c0:95:51:c7:77:91:1a:48:b0:dd:23:32:00:ec:
         9f:d3:3e:6e:0b:bb:87:3b:1e:a3:49:75:73:4b:5c:e6:aa:f2:
         0e:0f:59:31:8e:b5:58:f2:2d:35:a9:89:3d:c6:2c:86:6b:2f:
         7d:2d:62:ef:dc:c3:12:d0:51:5a:e5:fe:08:e8:7c:fa:ba:1f:
         76:6c:65:b2:e8:50:3d:0f:28:70:37:c7:62:3c:8a:f7:b7:7e:
         3d:aa:85:1e:2f:03:9d:76:b6:24:b3:51:ed:1e:94:cc:34:5d:
         66:65:16:4b:9f:f3:8d:61:b7:d9:14:18:c6:7d:01:7c:16:aa:
         e0:9c:f3:bc:40:cd:0a:80:a6:cd:de:d5:eb:ab:a2:24:dd:4e:
         1f:ec:b2:94:3d:10:6b:fa:f9:ea:2b:86:8d:95:ea:3e:bb:0e:
         1c:1c:6f:95:43:5a:20:fe:5a:b5:bc:06:c0:25:06:c8:d5:41:
         4b:72:ec:8e:9f:8d:92:54:60:ae:64:dc:49:f8:c9:34:68:25:
         45:40:df:4e:59:29:ac:a6:b0:cc:e3:d1:58:3c:fa:47:36:77:
         9d:55:5b:f2:43:30:f4:5c:34:dd:fb:b6:ff:26:58:b4:57:ec:
         55:c5:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:25 2026 by rpki-client