This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/92DJ-k2lSSPkgWatwFbSAqk11jg.roa
File:                     92DJ-k2lSSPkgWatwFbSAqk11jg.roa (raw, json)
Hash identifier:          i4puN5rkCNLS52L3j3mgglVzHSgzVLU2AUBfvt4k2l8=
Subject key identifier:   F7:60:C9:FA:4D:A5:49:23:E4:81:66:AD:C0:56:D2:02:A9:35:D6:38
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       13B8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/92DJ-k2lSSPkgWatwFbSAqk11jg.roa
Signing time:             Fri 06 Feb 2026 01:14:42 +0000
ROA not before:           Fri 06 Feb 2026 01:14:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.240.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5048 (0x13b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:14:42 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F760C9FA4DA54923E48166ADC056D202A935D638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:22:a3:7f:04:3e:a7:8d:c7:fe:61:1f:bc:
                    2a:72:91:81:d1:65:62:23:d8:5c:a7:63:ab:4f:9e:
                    44:2a:f1:f5:08:52:91:51:8f:f2:bb:2c:aa:ef:c9:
                    c8:3a:63:f5:f9:04:85:0d:81:b6:de:66:72:5e:d0:
                    e2:42:4e:36:d9:7a:49:1e:1e:f6:33:70:4f:f0:f5:
                    ba:43:49:b0:1b:fa:09:aa:5c:b6:4c:f1:fc:93:44:
                    6a:3e:22:5a:43:b8:a5:ec:67:21:1f:94:b8:ea:42:
                    d6:c7:bf:6a:09:af:89:88:57:db:aa:cf:1a:a3:4c:
                    1d:c1:a5:80:3d:5c:fe:4c:6c:a3:ca:92:bb:68:e1:
                    ea:60:53:90:cd:33:de:78:db:25:17:82:66:97:42:
                    4a:07:7d:71:7d:14:e7:4f:1e:2e:20:09:61:00:f4:
                    2a:4a:a3:f6:d3:a9:42:73:bd:1d:bb:ed:1c:8b:5d:
                    97:93:40:44:a7:34:58:d0:be:87:54:68:b5:de:7f:
                    39:75:78:61:ca:71:0c:d7:74:ec:26:b6:41:8c:4b:
                    c7:6d:23:5b:dd:5e:d0:e3:21:3a:d7:df:ff:69:6d:
                    7a:02:af:bd:4c:83:71:e3:63:c0:c6:f7:dd:7d:3f:
                    b7:76:e0:76:08:85:bb:5d:0c:e3:07:18:99:a9:dc:
                    c9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:60:C9:FA:4D:A5:49:23:E4:81:66:AD:C0:56:D2:02:A9:35:D6:38
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/92DJ-k2lSSPkgWatwFbSAqk11jg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.240.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:61:cd:df:24:64:6d:03:e7:6f:06:a3:91:dc:b7:bb:49:b6:
         63:95:3b:24:35:d0:ff:e5:1e:df:4f:cb:1e:e6:d9:46:e5:31:
         9a:32:0d:27:33:0d:6e:1c:f0:34:84:d9:e3:e5:58:9d:10:a3:
         71:c2:c8:0b:04:93:c2:65:8c:27:b4:96:80:74:0d:9b:b3:37:
         7d:28:8c:4a:ee:12:50:1a:e6:59:c2:9f:9b:79:d2:fd:fa:f0:
         79:9f:11:2e:b0:51:b3:2e:c9:02:41:1a:ab:0f:df:bc:51:19:
         bc:6c:c1:a4:70:9f:15:86:01:1e:3a:ac:48:9f:ad:91:7f:0c:
         30:d5:d7:50:21:ff:dd:d1:7b:2c:f0:a9:fc:3e:13:6d:a4:35:
         98:3d:b9:68:02:e8:c2:7b:16:45:0d:28:24:56:12:af:7e:83:
         60:b0:24:73:b1:bd:50:95:36:cc:21:ae:ce:29:55:01:d0:8a:
         da:88:04:ec:34:39:a1:8e:07:7b:02:69:86:62:80:d8:c2:93:
         3a:62:6d:1c:b1:2d:bb:2b:92:f7:45:a6:3c:b4:9c:07:6f:65:
         0e:79:b2:5e:b0:fb:a3:7e:a8:7d:57:48:24:85:7e:e0:c8:99:
         6e:a4:33:ae:0f:47:38:11:4f:3b:12:c5:42:a2:54:d0:59:a3:
         e4:ad:7a:b2
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICE7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDYw
MTE0NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY3NjBDOUZBNERBNTQ5
MjNFNDgxNjZBREMwNTZEMjAyQTkzNUQ2MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAjiKjfwQ+p43H/mEfvCpykYHRZWIj2FynY6tPnkQq8fUIUpFR
j/K7LKrvycg6Y/X5BIUNgbbeZnJe0OJCTjbZekkeHvYzcE/w9bpDSbAb+gmqXLZM
8fyTRGo+IlpDuKXsZyEflLjqQtbHv2oJr4mIV9uqzxqjTB3BpYA9XP5MbKPKkrto
4epgU5DNM9542yUXgmaXQkoHfXF9FOdPHi4gCWEA9CpKo/bTqUJzvR277RyLXZeT
QESnNFjQvodUaLXefzl1eGHKcQzXdOwmtkGMS8dtI1vdXtDjITrX3/9pbXoCr71M
g3HjY8DG9919P7d24HYIhbtdDOMHGJmp3MkzAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU92DJ+k2lSSPkgWatwFbSAqk11jgwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC85MkRKLWsybFNTUGtnV2F0d0Zi
U0FxazExamcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0vDo
MA0GCSqGSIb3DQEBCwUAA4IBAQBeYc3fJGRtA+dvBqOR3Le7SbZjlTskNdD/5R7f
T8se5tlG5TGaMg0nMw1uHPA0hNnj5VidEKNxwsgLBJPCZYwntJaAdA2bszd9KIxK
7hJQGuZZwp+bedL9+vB5nxEusFGzLskCQRqrD9+8URm8bMGkcJ8VhgEeOqxIn62R
fwww1ddQIf/d0Xss8Kn8PhNtpDWYPbloAujCexZFDSgkVhKvfoNgsCRzsb1QlTbM
Ia7OKVUB0IraiATsNDmhjgd7AmmGYoDYwpM6Ym0csS27K5L3RaY8tJwHb2UOebJe
sPujfqh9V0gkhX7gyJlupDOuD0c4EU87EsVColTQWaPkrXqy
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:30 2026 by rpki-client