This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/BQJx7IMeCRCwRftAxYQ2Eq9ETIk.roa
File:                     BQJx7IMeCRCwRftAxYQ2Eq9ETIk.roa (raw, json)
Hash identifier:          VrqAbEN9pCpZmhdH8sdOLmGQFoKkqbZ6sk6DAmZwsi4=
Subject key identifier:   05:02:71:EC:83:1E:09:10:B0:45:FB:40:C5:84:36:12:AF:44:4C:89
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1180
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/BQJx7IMeCRCwRftAxYQ2Eq9ETIk.roa
Signing time:             Tue 03 Feb 2026 02:26:06 +0000
ROA not before:           Tue 03 Feb 2026 02:26:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        210.240.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4480 (0x1180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:26:06 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=050271EC831E0910B045FB40C5843612AF444C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:e8:18:b6:c1:8a:65:6e:b6:6a:fa:a1:ec:
                    c6:1c:3d:6f:12:f6:d0:88:e9:8b:20:10:68:72:64:
                    f3:3e:f4:47:29:c0:5b:c6:33:9e:d1:a2:e7:0e:13:
                    5b:78:06:7a:36:fb:71:8f:a8:33:55:a2:58:eb:43:
                    ad:e6:71:06:fb:8b:08:cb:a9:55:20:0a:89:ef:36:
                    ff:18:01:b4:0b:8c:27:b9:13:5e:69:c4:5a:33:1a:
                    db:46:ba:c8:c6:69:16:5e:48:6e:27:18:25:fe:a6:
                    e2:89:12:7d:77:09:e8:4f:9b:46:9b:72:71:5a:df:
                    d4:97:9a:53:f8:f9:d5:d6:51:05:d8:bd:d6:bc:8c:
                    95:e4:e7:fc:79:7c:2a:30:8f:f6:42:40:84:47:80:
                    f0:44:9f:e7:61:20:c1:fe:53:dc:f8:f8:53:b7:06:
                    8c:ed:76:c4:64:5b:71:b1:d1:57:f1:a7:87:54:8c:
                    1a:86:b2:ec:63:53:d0:0c:80:02:f9:67:c6:b2:b5:
                    99:53:22:cf:ec:79:1d:be:23:02:8f:93:24:8c:5b:
                    dc:b3:04:e3:4b:f5:b9:98:d4:3c:1f:07:c5:c7:01:
                    14:b6:8f:d3:0d:19:7f:2c:50:40:4f:75:33:0c:26:
                    49:05:59:a4:97:aa:be:17:53:69:ea:9a:02:08:56:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:02:71:EC:83:1E:09:10:B0:45:FB:40:C5:84:36:12:AF:44:4C:89
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/BQJx7IMeCRCwRftAxYQ2Eq9ETIk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.240.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:64:0c:dd:55:1a:b2:c7:04:f3:e8:71:73:9e:5c:a9:f2:14:
         36:73:9a:58:5b:e8:93:15:bc:38:8e:94:f7:28:a8:23:f0:6a:
         9d:62:b8:6e:0e:f3:03:06:2f:dd:69:f7:39:47:eb:70:3f:96:
         74:a4:65:22:77:1a:c3:24:0c:13:fb:0a:6a:65:72:97:07:f5:
         1d:ed:bb:b3:e6:a9:8e:5c:b2:57:d5:e1:1d:2c:95:9d:35:6b:
         a1:a5:b0:44:68:77:9f:cd:e9:cc:f4:5e:99:ea:84:e3:b2:41:
         b8:51:d7:79:e6:b4:37:e7:1f:e5:47:9a:f1:87:62:54:59:44:
         12:bb:eb:1c:22:75:aa:0c:e3:74:f8:63:a2:ea:8b:6b:84:43:
         45:24:02:ee:ff:60:c1:69:44:9e:a9:3a:4a:e6:42:68:2a:43:
         6c:94:6c:e5:43:5b:ed:ad:69:cc:34:22:32:e2:1f:a7:c1:b1:
         b6:12:e0:9c:28:90:a1:43:37:8a:7e:ec:27:c8:41:aa:08:3a:
         a3:21:e3:ce:1e:ee:30:74:88:f1:70:af:5a:f6:f8:49:e4:c0:
         02:11:d0:93:38:42:5f:05:4b:a5:bc:6c:47:8d:7e:2c:48:f5:
         57:a0:c5:43:c6:3a:f1:55:b9:41:9b:c0:4c:67:69:42:d6:7a:
         73:26:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:56 2026 by rpki-client