This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/7ICyPz1fO3KrbOspyyxJ6G6yvWE.roa
File:                     7ICyPz1fO3KrbOspyyxJ6G6yvWE.roa (raw, json)
Hash identifier:          90klV3PVFL/Ky1Y+gVClrCRVb/2/mTh817YOjqAOHNg=
Subject key identifier:   EC:80:B2:3F:3D:5F:3B:72:AB:6C:EB:29:CB:2C:49:E8:6E:B2:BD:61
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1273
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/7ICyPz1fO3KrbOspyyxJ6G6yvWE.roa
Signing time:             Tue 03 Feb 2026 03:39:28 +0000
ROA not before:           Tue 03 Feb 2026 03:39:28 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        210.60.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4723 (0x1273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:39:28 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EC80B23F3D5F3B72AB6CEB29CB2C49E86EB2BD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:9a:2e:dc:5d:75:60:24:b8:1b:a4:a4:fc:
                    7b:92:0f:de:8c:d9:d5:ac:a3:62:f4:ff:91:cc:5b:
                    3a:1f:1e:72:d7:fc:ed:d1:9c:48:83:e6:1f:e6:3a:
                    75:b0:85:20:f9:9b:fc:39:3f:64:6e:3c:28:21:43:
                    9a:2d:54:a1:73:3e:1f:d4:e0:cc:48:bf:8d:0b:46:
                    0e:bf:c9:46:f2:d2:63:f0:03:5c:d3:bc:16:c3:f1:
                    c9:2c:87:28:19:fe:96:e4:c9:aa:0e:78:a9:38:df:
                    42:6a:16:1a:f2:b7:9e:9e:11:15:3a:b4:9d:04:e6:
                    52:a2:38:ee:13:73:ee:94:ee:c5:09:8f:07:be:cf:
                    aa:b6:80:0d:24:22:81:9f:ab:e2:42:41:f0:ce:3f:
                    ca:33:af:10:2d:64:da:d0:5a:43:b6:be:d0:2b:de:
                    b2:e7:00:63:26:3d:db:5f:39:b6:55:63:73:7c:21:
                    b8:2c:ef:53:6f:76:0f:d4:16:37:35:f4:5b:95:88:
                    d7:1b:80:d0:ad:29:ba:1d:07:58:a3:c1:ef:e9:41:
                    05:94:e6:94:32:52:8c:c1:a3:a3:99:2d:94:9a:a8:
                    d0:71:d2:7c:6b:b4:ab:53:c2:48:d5:42:28:58:d0:
                    54:71:37:d5:a0:f1:10:2c:4c:02:ea:d1:6a:7e:6d:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:80:B2:3F:3D:5F:3B:72:AB:6C:EB:29:CB:2C:49:E8:6E:B2:BD:61
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/7ICyPz1fO3KrbOspyyxJ6G6yvWE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:31:82:2f:33:87:72:2f:c6:74:0d:aa:dc:0c:44:99:c6:04:
         b9:d5:6b:a7:eb:81:8a:3b:96:2a:df:d9:35:40:72:b1:ba:85:
         d1:20:c4:a9:7d:78:af:7a:32:f0:60:bb:03:b1:6b:09:b7:a3:
         21:7f:31:7a:a7:cd:ad:42:a4:29:2c:05:41:44:32:4b:75:13:
         6b:14:fc:51:d5:d0:1a:31:3b:fc:87:49:c9:8e:fd:e2:0b:fb:
         e4:43:52:57:ca:17:20:90:be:92:26:96:76:f9:1c:ed:1c:94:
         80:42:a9:69:c3:5a:30:09:ef:ee:40:21:40:fe:28:5d:b7:d6:
         bb:39:38:9b:0a:3e:31:05:94:a3:1f:49:71:17:d3:c6:db:48:
         41:c5:3b:58:d6:6a:50:8b:be:13:6e:d3:0b:a5:c0:30:cf:d4:
         02:43:a8:0e:ba:be:39:3d:ef:9e:fe:49:bd:fe:67:be:00:f8:
         4c:9b:0f:cd:8d:c7:7c:0b:4d:cb:93:7b:00:a6:f6:5d:5a:6a:
         f3:6a:2c:ea:52:19:d8:a6:47:9d:4f:e1:aa:24:03:d6:22:6d:
         08:81:e5:31:8e:bc:f4:96:63:cb:5d:c9:78:1c:44:a7:3b:9e:
         a7:43:9d:92:60:1d:e9:07:15:19:1d:42:d3:f6:c1:1e:b2:e1:
         50:cc:52:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:53 2026 by rpki-client