This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/AGL-AQoYf2RdW6KxXqGo5RFexHQ.roa
File:                     AGL-AQoYf2RdW6KxXqGo5RFexHQ.roa (raw, json)
Hash identifier:          ByiKKYOWu65NK9u46mxhQ4imgQz06IW+1ILwatZcJuY=
Subject key identifier:   00:62:FE:01:0A:18:7F:64:5D:5B:A2:B1:5E:A1:A8:E5:11:5E:C4:74
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12DC
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/AGL-AQoYf2RdW6KxXqGo5RFexHQ.roa
Signing time:             Tue 03 Feb 2026 08:56:57 +0000
ROA not before:           Tue 03 Feb 2026 08:56:57 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.59.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4828 (0x12dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:56:57 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0062FE010A187F645D5BA2B15EA1A8E5115EC474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fb:84:cc:2c:07:76:28:f0:ac:a2:85:d4:8e:
                    9e:58:e4:e2:a1:20:be:84:42:46:c2:94:80:f9:d0:
                    77:c4:46:ec:b1:be:91:47:38:bc:24:85:ec:bb:71:
                    4c:d9:c7:2e:2d:ba:54:b0:d6:ed:9b:2e:e8:c8:e6:
                    1f:ce:d8:51:57:30:b3:a2:b2:6e:16:4a:e9:f3:bd:
                    ab:72:cd:3a:ea:5f:5e:f4:94:32:17:46:4f:40:84:
                    42:e1:4a:71:bc:9d:6c:bf:17:fe:8f:a7:d6:f3:28:
                    12:db:1b:d5:26:5f:db:81:06:d1:d1:3e:42:96:59:
                    59:34:bf:50:e6:73:23:ea:03:e3:f9:63:a1:a0:9c:
                    ba:ac:0a:1e:2e:ae:a6:a2:71:2b:fa:55:60:13:3c:
                    50:3c:02:69:34:fc:d8:8a:d2:16:71:a0:44:2b:b5:
                    c5:46:74:41:12:a9:60:ad:92:45:03:4f:2d:48:92:
                    69:bf:c1:eb:ab:36:15:5a:23:e8:16:34:14:e3:8e:
                    d5:96:18:1b:e8:53:06:51:59:0f:fb:de:21:03:90:
                    79:54:9e:3c:ca:12:56:eb:c4:b2:3b:56:12:e2:bb:
                    6c:b2:e7:29:00:d7:26:c3:3c:1e:8c:ca:14:0b:79:
                    30:45:4a:53:31:52:97:26:37:5c:53:e4:eb:59:46:
                    01:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:62:FE:01:0A:18:7F:64:5D:5B:A2:B1:5E:A1:A8:E5:11:5E:C4:74
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/AGL-AQoYf2RdW6KxXqGo5RFexHQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.59.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e3:fe:58:93:d3:01:ae:42:ba:a6:bc:70:32:4e:c0:e1:c7:
         f2:a1:32:c8:14:1a:b6:b6:67:41:5c:ce:6a:23:5a:0e:79:10:
         29:4d:f8:af:10:4b:7a:c2:13:bb:96:15:7b:f7:92:9f:65:14:
         9d:47:c7:27:4c:b5:e4:53:d7:6d:e3:2e:49:69:72:e9:42:09:
         cf:64:e1:c7:1d:76:23:af:64:55:c8:33:7f:bb:de:b0:c5:5b:
         69:bd:45:eb:bb:6c:6b:3e:b2:93:19:14:fa:b4:cc:ac:7e:15:
         6c:fd:0b:51:0e:70:bd:10:3b:12:5e:83:59:1f:08:f8:54:67:
         44:30:14:ff:7d:00:f3:93:f6:f4:e4:17:bb:16:86:9f:e9:e5:
         e4:11:41:b5:75:7e:3a:49:77:61:b8:ca:e2:d9:65:65:cb:ac:
         99:27:da:c3:7e:1e:cd:bb:76:54:73:13:4e:69:79:1b:56:af:
         b1:9c:b4:36:56:9b:d3:2b:0c:df:fb:00:2e:94:99:09:74:a9:
         ac:15:20:2b:6c:a6:43:33:ac:f1:55:87:2d:f5:65:fd:b9:9a:
         24:9c:1b:ad:fa:de:04:90:54:93:a2:3a:dc:0f:38:f8:91:28:
         48:57:1a:63:bf:39:05:81:95:ac:3b:95:69:bb:11:35:54:66:
         2f:f8:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:31 2026 by rpki-client