This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/A9WgpYeREx2Nec-mRdDCp8rYOpQ.roa
File:                     A9WgpYeREx2Nec-mRdDCp8rYOpQ.roa (raw, json)
Hash identifier:          nypNtw/1UE6rpLBn8sEKsTy7EuWKF/vU4qAr1HHK7uo=
Subject key identifier:   03:D5:A0:A5:87:91:13:1D:8D:79:CF:A6:45:D0:C2:A7:CA:D8:3A:94
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11DF
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/A9WgpYeREx2Nec-mRdDCp8rYOpQ.roa
Signing time:             Tue 03 Feb 2026 02:41:55 +0000
ROA not before:           Tue 03 Feb 2026 02:41:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        203.72.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4575 (0x11df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:41:55 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=03D5A0A58791131D8D79CFA645D0C2A7CAD83A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:ce:9d:65:5f:2b:a1:8e:08:aa:75:c6:a4:
                    23:32:fb:39:f4:74:55:a8:d6:78:1d:78:a2:e1:b8:
                    88:0b:80:d2:87:1c:65:5c:e3:00:40:f6:ec:76:1c:
                    fa:8c:ab:b4:96:5b:3c:8d:50:42:d9:bf:10:60:25:
                    a6:b4:7d:2b:6c:f2:04:24:d0:e4:10:e5:1a:37:48:
                    0b:28:f5:81:e3:b0:20:80:07:9b:06:b4:57:53:01:
                    e5:2c:91:0c:f5:8f:97:c8:07:fc:9e:2f:09:41:a3:
                    a2:39:06:52:6a:33:a2:3d:5b:f5:26:fa:7b:9f:40:
                    73:15:66:cb:ac:76:16:70:e9:f2:b3:aa:b5:ee:69:
                    89:90:80:d0:d5:ce:5f:a6:ea:13:17:f0:ed:16:c6:
                    d4:f0:d1:4d:e4:6e:d4:d3:10:d2:5f:90:30:1a:84:
                    86:9c:1f:a4:90:a0:1c:13:b3:98:5e:6b:32:e4:a7:
                    a1:4b:6f:5a:7c:d0:d2:3d:bd:51:f4:53:d1:14:13:
                    e6:80:f8:56:10:5c:aa:66:d6:11:3d:85:b7:f7:b0:
                    c6:f8:b7:77:0e:f6:e3:ae:22:11:a8:41:85:79:9b:
                    81:a9:58:4c:b6:d6:d5:85:b7:36:39:bb:ad:9c:d0:
                    2d:45:98:48:43:c6:ad:74:6e:92:64:4d:2c:5c:81:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D5:A0:A5:87:91:13:1D:8D:79:CF:A6:45:D0:C2:A7:CA:D8:3A:94
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/A9WgpYeREx2Nec-mRdDCp8rYOpQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:75:44:f4:1a:8a:19:49:ce:ad:59:4e:fb:67:c8:b0:bb:84:
         a8:b3:8b:09:44:0d:c7:f3:ab:f4:21:e9:ec:8a:9c:f9:c4:c4:
         b2:f8:54:2c:aa:78:01:b9:e2:e1:cb:0c:4e:9e:dc:2f:ef:5f:
         a2:6e:ae:11:43:0a:da:96:1b:93:4d:86:58:1f:90:98:8e:e8:
         60:12:04:04:27:c7:26:37:4a:54:bf:6a:9e:88:e6:48:06:66:
         ae:f5:4b:f3:77:c2:03:10:f2:9d:55:7d:75:7f:35:40:c1:7a:
         10:c7:93:ef:cb:e4:16:61:96:45:82:a0:48:41:97:67:fa:2e:
         2b:9f:b6:69:60:ef:c1:b4:cc:7d:06:0a:cc:0e:ed:2c:9d:ce:
         7a:ea:8f:22:01:65:b0:60:07:d5:e7:a1:62:5b:f5:4e:ad:01:
         b7:20:b4:b8:2c:dd:a7:2c:7c:75:fa:ec:03:f4:a6:eb:c4:07:
         e4:b2:99:ca:8f:c9:9e:35:ab:73:26:3b:b8:33:f7:c2:bf:94:
         fb:53:dd:17:b5:38:da:f3:68:db:65:98:e0:0e:b7:28:0a:63:
         68:b5:24:47:40:87:56:a5:af:1f:28:92:a5:ea:99:99:10:2a:
         c9:6e:e0:76:4e:c2:1f:a6:be:26:1d:45:d8:4d:4c:f9:32:84:
         1f:75:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:28 2026 by rpki-client