This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/BL-sf_uzOcY1hv4mhHE7WMNDdqA.roa
File:                     BL-sf_uzOcY1hv4mhHE7WMNDdqA.roa (raw, json)
Hash identifier:          jMnzgLxGEiKVsbBsDqVO+GY8clc8JA4KedeyGoUojEc=
Subject key identifier:   04:BF:AC:7F:FB:B3:39:C6:35:86:FE:26:84:71:3B:58:C3:43:76:A0
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       108D
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/BL-sf_uzOcY1hv4mhHE7WMNDdqA.roa
Signing time:             Tue 03 Feb 2026 01:53:15 +0000
ROA not before:           Tue 03 Feb 2026 01:53:15 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        192.192.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4237 (0x108d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 01:53:15 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=04BFAC7FFBB339C63586FE2684713B58C34376A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:ef:bf:3f:9c:02:6f:11:47:0c:3b:36:94:
                    08:60:b4:a5:78:ed:71:4d:a1:ef:29:eb:07:f6:10:
                    a8:0d:ea:7a:ca:1a:1f:58:f1:66:de:c2:0c:3d:38:
                    e1:3d:2e:bf:0a:d4:c1:6b:36:9e:cb:91:08:ac:4d:
                    13:d1:77:0f:34:d4:c7:b3:66:4a:ce:7c:b4:fc:41:
                    a9:ac:2e:c6:b9:a4:51:18:f7:f8:fd:01:00:d4:3b:
                    ff:d6:fc:d7:1e:95:95:46:1c:80:22:c1:e7:98:b8:
                    59:83:12:60:21:86:19:87:49:0c:b4:42:a7:55:1b:
                    69:f8:07:7f:40:56:1a:f2:5c:09:95:5d:fb:71:c3:
                    78:56:ad:f0:6d:1f:11:c8:5f:2a:d4:0d:c1:ad:10:
                    14:16:b8:fb:3b:4b:55:7f:b0:6c:12:2e:e4:cb:93:
                    d8:5f:02:91:51:0e:ee:4f:2a:c5:af:98:05:2b:03:
                    fe:78:43:cc:0a:84:67:d0:45:d1:be:fb:68:ed:62:
                    90:d7:80:29:07:5f:81:87:66:5c:7d:3a:de:c7:57:
                    df:05:48:a3:ad:5a:7c:33:1c:92:27:bf:fe:02:44:
                    01:06:38:fd:5e:f3:f7:cc:58:29:50:c9:70:3d:0e:
                    46:e9:2d:29:08:5c:d1:b3:3f:df:d2:eb:40:da:d7:
                    ae:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BF:AC:7F:FB:B3:39:C6:35:86:FE:26:84:71:3B:58:C3:43:76:A0
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/BL-sf_uzOcY1hv4mhHE7WMNDdqA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:cc:0d:5e:78:96:7a:43:0b:67:2b:4b:5d:54:a0:90:a2:6f:
         3c:e4:07:b1:03:e0:29:95:23:5b:ed:eb:af:df:7c:0c:de:61:
         ed:94:65:ed:ce:af:db:e5:6c:42:84:03:66:e1:a6:d3:60:4b:
         cd:75:36:8c:7f:64:bc:70:ef:be:8c:6a:be:21:16:85:b7:4a:
         2a:08:6e:9c:1f:6b:8b:af:04:57:b3:51:f2:9d:7b:cd:bd:75:
         fc:59:c1:a0:0f:15:6f:2b:16:44:d1:7b:7b:b2:32:28:65:3d:
         ad:be:cd:84:c2:c0:8d:15:4e:40:6b:99:6c:ab:56:33:95:c2:
         aa:5b:c0:0d:a3:22:db:7b:30:80:97:3d:20:02:c2:d8:e7:d9:
         ed:33:0b:7e:1f:99:d3:b9:d4:5b:c6:fe:8b:ff:a9:5e:24:3f:
         9b:36:70:67:14:dd:e4:5d:2b:17:84:13:8a:ee:85:55:da:74:
         56:69:3d:f9:f0:80:bf:6b:5f:57:8a:df:36:33:7b:1e:b9:24:
         f1:e0:77:5f:d4:3d:88:c5:ec:ff:27:4c:7f:be:c2:53:3f:78:
         17:3c:39:1c:6c:94:5c:09:8e:08:79:3b:58:6c:b0:e8:ae:1c:
         a7:d0:14:d8:d4:47:76:85:ef:4b:28:c1:d2:0a:f1:27:98:80:
         c6:40:19:6b
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNjAyMDMw
MTUzMTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA0QkZBQzdGRkJCMzM5
QzYzNTg2RkUyNjg0NzEzQjU4QzM0Mzc2QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC82e+/P5wCbxFHDDs2lAhgtKV47XFNoe8p6wf2EKgN6nrKGh9Y
8Wbewgw9OOE9Lr8K1MFrNp7LkQisTRPRdw801MezZkrOfLT8QamsLsa5pFEY9/j9
AQDUO//W/NcelZVGHIAiweeYuFmDEmAhhhmHSQy0QqdVG2n4B39AVhryXAmVXftx
w3hWrfBtHxHIXyrUDcGtEBQWuPs7S1V/sGwSLuTLk9hfApFRDu5PKsWvmAUrA/54
Q8wKhGfQRdG++2jtYpDXgCkHX4GHZlx9Ot7HV98FSKOtWnwzHJInv/4CRAEGOP1e
8/fMWClQyXA9DkbpLSkIXNGzP9/S60Da167BAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUBL+sf/uzOcY1hv4mhHE7WMNDdqAwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9CTC1zZl91ek9jWTFodjRtaEhF
N1dNTkRkcUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwMBo
MA0GCSqGSIb3DQEBCwUAA4IBAQA7zA1eeJZ6QwtnK0tdVKCQom885AexA+AplSNb
7euv33wM3mHtlGXtzq/b5WxChANm4abTYEvNdTaMf2S8cO++jGq+IRaFt0oqCG6c
H2uLrwRXs1HynXvNvXX8WcGgDxVvKxZE0Xt7sjIoZT2tvs2EwsCNFU5Aa5lsq1Yz
lcKqW8ANoyLbezCAlz0gAsLY59ntMwt+H5nTudRbxv6L/6leJD+bNnBnFN3kXSsX
hBOK7oVV2nRWaT358IC/a19Xit82M3seuSTx4Hdf1D2Ixez/J0x/vsJTP3gXPDkc
bJRcCY4IeTtYbLDorhyn0BTY1Ed2he9LKMHSCvEnmIDGQBlr
-----END CERTIFICATE-----
Generated at Thu Feb 12 18:42:57 2026 by rpki-client