This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/AP086IOtidpvtFup2Y6KVpu-oxE.roa
File:                     AP086IOtidpvtFup2Y6KVpu-oxE.roa (raw, json)
Hash identifier:          NqMq6MY2Jyh1Omf0O7khvnfxV+mV5Annlg026rPtT1w=
Subject key identifier:   00:FD:3C:E8:83:AD:89:DA:6F:B4:5B:A9:D9:8E:8A:56:9B:BE:A3:11
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       137A
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/AP086IOtidpvtFup2Y6KVpu-oxE.roa
Signing time:             Fri 06 Feb 2026 01:09:48 +0000
ROA not before:           Fri 06 Feb 2026 01:09:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.60.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4986 (0x137a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:09:48 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=00FD3CE883AD89DA6FB45BA9D98E8A569BBEA311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:d2:ca:70:87:1a:a5:a8:ac:7e:31:31:3a:
                    ed:d2:81:c9:91:fe:a0:98:51:fd:8e:64:82:99:d6:
                    60:17:48:5e:04:61:a6:1b:f5:ed:16:0d:1e:cc:52:
                    47:9a:0b:fb:8c:83:cc:0d:51:c1:e1:3b:9c:29:bb:
                    b7:2d:97:5e:d7:bd:72:81:63:30:70:e5:88:e8:2e:
                    c0:42:3a:d6:54:5f:81:e9:5f:64:29:78:1a:48:2c:
                    d1:fa:78:ed:0f:f2:b9:7a:c6:f3:ee:5c:60:95:8d:
                    76:13:2b:4d:77:25:b1:a9:53:1d:23:7c:4e:0d:d9:
                    cc:ce:5b:f4:3b:62:e8:2e:2c:2f:f2:ef:18:29:e9:
                    e1:bf:d0:77:57:13:bf:b6:b3:ed:8c:0d:ba:d9:98:
                    c6:14:f9:a7:63:3d:cf:af:98:97:fa:e5:e1:0b:89:
                    64:a5:3f:88:23:01:00:4b:78:cd:0b:42:d0:ba:49:
                    ae:82:cd:a5:2e:3c:6f:e9:e3:0e:d2:35:86:6b:73:
                    ed:c5:05:cd:04:8a:d3:b2:3e:04:cc:d2:4e:f0:37:
                    7d:ae:61:16:d6:4a:59:08:9f:42:58:75:8e:93:87:
                    96:c3:3f:16:9a:10:9b:79:82:6d:4f:f6:50:5c:f2:
                    03:91:e0:d6:b8:08:66:a9:ff:67:38:fb:4b:9b:76:
                    b1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FD:3C:E8:83:AD:89:DA:6F:B4:5B:A9:D9:8E:8A:56:9B:BE:A3:11
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/AP086IOtidpvtFup2Y6KVpu-oxE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:46:4c:f3:a5:86:8f:e0:49:b6:ec:88:65:9d:49:1b:08:f3:
         51:09:ea:68:a8:46:db:6d:9d:59:c7:b5:4c:fe:bf:91:cf:c6:
         b0:38:2c:0a:d3:f2:9e:5c:9b:44:02:59:8f:86:9d:27:78:88:
         44:07:ba:3c:ab:44:a7:ca:4e:2a:e0:25:77:4b:0a:84:4d:11:
         3e:e5:7f:17:12:ce:b3:a2:30:55:88:d0:65:7a:ad:7a:55:68:
         11:d5:dc:58:09:13:90:04:4c:0f:07:82:54:59:eb:3f:2e:7a:
         0a:f9:72:a8:b2:13:12:71:12:a7:36:f9:59:23:7c:94:26:a6:
         b9:9f:b6:c1:aa:06:b1:80:47:2f:c8:58:2f:0c:31:49:56:dd:
         a6:c8:b3:80:d8:3a:a9:af:ce:49:3d:1e:f9:4b:c4:e4:7d:d6:
         da:b2:85:ff:78:f4:96:f9:44:80:f7:df:73:b7:82:24:c2:f3:
         c6:f3:e9:60:89:99:b3:18:11:b2:04:89:1b:a9:48:77:7c:24:
         d6:a0:47:1b:05:ed:6d:dc:ef:3e:77:87:17:cf:0c:60:4a:64:
         30:9d:6b:6d:e8:b6:67:8f:d6:19:27:a5:a9:ae:9d:5c:93:48:
         97:20:72:df:bc:25:30:ea:9f:55:9f:30:6d:07:7b:76:2c:07:
         a4:92:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:50 2026 by rpki-client