This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/9KmBqtfd1XaALsiQorPNTv9YEns.roa
File:                     9KmBqtfd1XaALsiQorPNTv9YEns.roa (raw, json)
Hash identifier:          8TpfvrAEL1utZsE/sG1CGOwv9rmhEpqOX9sAi9qXEOA=
Subject key identifier:   F4:A9:81:AA:D7:DD:D5:76:80:2E:C8:90:A2:B3:CD:4E:FF:58:12:7B
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       118D
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9KmBqtfd1XaALsiQorPNTv9YEns.roa
Signing time:             Tue 03 Feb 2026 02:27:48 +0000
ROA not before:           Tue 03 Feb 2026 02:27:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        120.106.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4493 (0x118d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:27:48 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F4A981AAD7DDD576802EC890A2B3CD4EFF58127B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:90:f6:2c:54:ca:42:80:d6:ef:0d:e4:5e:
                    d0:0d:54:57:2d:5c:d1:5c:6d:99:ec:8b:0c:35:cd:
                    b0:10:d7:37:1b:8d:10:1f:a9:3f:64:0f:af:c4:32:
                    0f:6b:ed:b4:bc:7a:a1:1e:b8:cd:fe:e6:eb:03:b7:
                    fa:72:c1:71:22:a0:6d:b2:44:d0:f8:68:c2:11:3f:
                    65:28:c1:08:28:53:f4:d3:5f:44:67:fc:87:0d:f9:
                    95:f4:34:1f:b4:51:9a:4f:74:76:3a:70:4e:e6:8c:
                    3f:e5:07:2b:18:e9:33:d8:db:3e:24:8e:d4:a0:5e:
                    83:9f:37:36:e6:d1:71:1f:3d:1c:1e:c8:34:e4:c4:
                    5c:1a:56:30:f7:10:1f:fd:5b:85:8a:ab:20:0b:03:
                    76:d3:ee:f2:b1:38:32:1a:86:be:40:10:f9:59:73:
                    65:29:72:96:f0:95:20:05:de:eb:6d:c8:76:a6:a0:
                    04:83:9e:d8:88:d0:99:47:a4:b1:7d:98:ab:1e:de:
                    9f:73:9f:15:3e:82:04:78:66:51:a6:84:ae:90:d5:
                    d1:24:15:6b:87:ee:76:73:5c:0e:71:b0:17:93:3f:
                    bd:ac:32:3d:eb:44:ba:4b:af:d4:d6:90:34:2c:6b:
                    34:56:6f:49:39:85:07:59:78:5c:39:71:54:9a:85:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A9:81:AA:D7:DD:D5:76:80:2E:C8:90:A2:B3:CD:4E:FF:58:12:7B
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9KmBqtfd1XaALsiQorPNTv9YEns.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.106.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:96:a2:3f:aa:13:c5:6d:cd:c7:dc:57:6a:97:b6:38:40:
         bb:14:7e:3b:dd:35:f6:d3:9d:d2:c5:66:2d:9d:3a:c8:de:57:
         56:5d:b9:cf:9e:47:19:05:b6:9b:2e:9a:cd:89:69:e6:44:0b:
         76:8a:54:26:22:d9:e5:34:87:0f:ec:73:cb:81:c9:f3:56:a3:
         1f:7e:97:13:e2:2e:a1:36:24:2a:7b:14:5e:28:81:86:97:c8:
         33:5a:bc:b0:f4:5f:9c:be:83:05:e5:73:14:af:91:23:12:81:
         a0:39:92:d7:d0:76:61:42:94:16:e8:a9:21:3f:53:f6:24:08:
         3c:04:dc:85:a6:bc:54:1b:8a:9f:d6:e7:5f:c5:15:db:a7:fc:
         18:87:7e:86:78:69:38:e6:35:7a:25:24:0e:75:e3:60:57:ae:
         d1:c0:b9:90:95:c4:e0:8f:c0:54:16:40:78:38:af:af:e6:63:
         98:b2:1a:99:71:26:eb:12:bd:49:13:d1:3d:be:af:67:96:b0:
         0b:d6:58:6d:e7:6f:bf:55:59:c6:36:28:15:ff:2d:54:ef:d0:
         ce:f8:f0:90:b9:c6:4e:18:bd:ec:98:fd:d0:0d:a2:cc:10:1f:
         ac:9a:b1:e9:20:ea:9a:b0:1f:2c:78:e3:85:c1:80:00:d1:a1:
         01:3e:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:27 2026 by rpki-client