This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/7ofSRswcAuiHNjlnfDGsBxX681w.roa
File:                     7ofSRswcAuiHNjlnfDGsBxX681w.roa (raw, json)
Hash identifier:          XqA02YiLw4yu3NR4RwIFhm2l+l5oiAyrXQwEsCmk7Bk=
Subject key identifier:   EE:87:D2:46:CC:1C:02:E8:87:36:39:67:7C:31:AC:07:15:FA:F3:5C
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       130E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/7ofSRswcAuiHNjlnfDGsBxX681w.roa
Signing time:             Tue 03 Feb 2026 09:02:48 +0000
ROA not before:           Tue 03 Feb 2026 09:02:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.71.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4878 (0x130e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 09:02:48 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EE87D246CC1C02E8873639677C31AC0715FAF35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:09:d0:eb:e5:80:f2:fb:a1:d9:a3:a0:72:
                    26:35:e3:60:99:c0:35:14:ce:59:c9:ac:be:b7:5d:
                    f1:57:ca:12:8b:d7:2f:7d:bb:a0:88:dd:79:45:5f:
                    10:8a:35:c3:ba:02:4e:41:4a:86:93:35:44:60:3a:
                    fb:fb:5c:4d:ad:47:d9:13:06:e4:66:22:79:05:87:
                    38:21:7c:53:15:64:82:7d:71:c0:4e:36:46:96:b5:
                    6e:13:34:4d:58:22:c7:9c:dd:96:3c:5a:cd:0f:87:
                    fe:f4:8c:ac:cd:c6:de:03:8d:d2:4b:7a:7f:c7:2a:
                    39:fe:44:c8:df:ff:43:ef:63:76:2c:4c:bf:67:e6:
                    0b:78:5e:c5:7d:5a:66:60:cb:74:8e:83:ef:50:26:
                    b1:ca:ea:9b:24:2e:6f:ad:c5:61:cd:ca:41:90:db:
                    8d:15:9a:ca:aa:3d:d7:50:4a:1f:64:08:82:35:b7:
                    73:65:0b:8a:04:1d:50:fd:a3:32:32:55:10:a3:28:
                    93:60:ef:14:eb:fd:57:e9:52:7e:32:8f:9c:6e:fa:
                    44:9b:0c:13:74:6d:bf:4d:45:bc:92:b9:68:1c:0d:
                    74:24:03:94:e4:3d:bf:af:06:1e:9d:dc:f3:54:90:
                    cf:23:ac:79:c7:6b:4f:01:35:0c:f9:b4:7a:d2:0d:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:87:D2:46:CC:1C:02:E8:87:36:39:67:7C:31:AC:07:15:FA:F3:5C
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/7ofSRswcAuiHNjlnfDGsBxX681w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.71.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8b:16:f7:fd:f7:83:f5:00:5f:a1:e2:8f:8e:62:5c:b4:d3:
         41:8d:90:ef:47:d8:56:34:1e:2f:84:fc:42:68:07:f7:cc:ca:
         8b:35:c7:cf:41:1d:c2:26:85:b0:b0:71:7b:d9:a7:08:b7:37:
         40:80:98:fd:77:83:45:7d:ca:dc:3d:c2:92:8c:c6:48:d8:8e:
         c2:1e:a6:98:03:66:55:43:00:80:c7:e9:d7:51:f1:2c:82:cd:
         9a:2d:36:7c:eb:c1:92:3f:34:5e:5d:45:3f:e2:40:e2:36:26:
         f0:92:96:cb:d7:f2:25:92:18:12:08:a3:b5:05:b4:24:79:14:
         31:db:1b:58:75:48:26:df:e2:1c:bd:2c:a4:80:70:39:ad:54:
         ff:40:7f:87:b5:c6:27:6d:f2:fd:70:34:7a:6e:4b:a0:09:b3:
         d1:6a:35:af:85:7f:56:27:54:04:e9:98:52:32:72:dc:1d:40:
         84:66:cf:38:ea:1c:69:3c:c9:bb:d4:93:1c:b0:70:0f:a1:75:
         86:cc:19:46:3a:1a:61:3e:39:d1:5c:0f:1d:07:50:af:36:f2:
         46:68:00:20:df:70:71:61:7d:86:d5:7a:c3:e5:6d:0a:0c:24:
         be:8b:aa:30:82:7b:58:02:51:75:98:ff:44:7c:2c:7b:30:7a:
         34:66:9b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:57 2026 by rpki-client