This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/BSjLc4t8HJDwPQLgxxOWXewuPvM.roa
File:                     BSjLc4t8HJDwPQLgxxOWXewuPvM.roa (raw, json)
Hash identifier:          Myy2LuZQPEDKeZQ1zc5WfbMDO4G3ZP9bDkKcWHQAhGI=
Subject key identifier:   05:28:CB:73:8B:7C:1C:90:F0:3D:02:E0:C7:13:96:5D:EC:2E:3E:F3
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1167
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/BSjLc4t8HJDwPQLgxxOWXewuPvM.roa
Signing time:             Tue 03 Feb 2026 02:22:59 +0000
ROA not before:           Tue 03 Feb 2026 02:22:59 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        210.70.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4455 (0x1167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:22:59 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0528CB738B7C1C90F03D02E0C713965DEC2E3EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:93:45:2e:9e:c9:f8:74:a6:c8:1c:7d:7c:
                    0e:07:de:7c:8c:84:15:3a:a9:4a:60:fc:39:30:04:
                    4e:90:eb:61:3d:91:a8:ce:0c:a7:43:f3:c9:27:ce:
                    45:f3:df:31:f4:3f:74:e1:39:0a:a2:22:ad:dd:c6:
                    86:cb:19:1b:c2:3d:28:38:7d:5b:7d:03:18:3e:e0:
                    e8:91:30:3c:4e:f1:e0:73:11:04:20:00:af:af:e8:
                    80:53:4b:37:ba:ab:e3:09:9d:17:5b:0d:a6:ee:bf:
                    e3:53:82:67:8f:51:a1:20:22:e3:83:e5:d0:48:f4:
                    85:e1:b4:19:a9:b3:61:09:1c:f9:5a:4f:ea:e2:cc:
                    92:43:02:96:a5:2d:46:1d:31:5b:81:96:2d:5a:85:
                    ac:2e:f2:99:f7:8a:b5:dc:2d:10:1d:a2:f7:75:6a:
                    da:ee:29:88:a4:c2:83:f2:05:01:d6:0b:0b:77:bd:
                    81:55:88:05:b6:61:b0:6c:6c:79:b4:22:c6:bf:fc:
                    12:09:ca:7e:a5:56:60:e5:f7:c1:27:af:11:65:2c:
                    d7:f9:d1:fc:0d:61:8d:21:0c:a2:5f:c6:49:64:9e:
                    bd:70:ca:6d:5d:59:c9:f3:e0:5e:62:41:81:2c:3b:
                    f1:e6:82:36:f3:b8:2f:35:a2:35:a0:4e:68:37:79:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:28:CB:73:8B:7C:1C:90:F0:3D:02:E0:C7:13:96:5D:EC:2E:3E:F3
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/BSjLc4t8HJDwPQLgxxOWXewuPvM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:d6:5b:c2:ec:b5:3e:56:db:43:e6:1b:ea:12:da:75:e5:7d:
         41:59:5b:0c:50:43:77:69:51:eb:b2:f0:50:bb:55:0a:25:b1:
         d2:7e:ef:21:da:f6:d0:8e:7f:c2:80:c7:cd:7f:f4:bc:95:b6:
         89:23:e4:a7:09:dc:49:f2:a6:db:5d:23:76:dc:d8:79:42:95:
         da:c0:42:84:4b:60:cd:15:b3:81:06:2c:a6:18:ca:0e:38:ad:
         4e:0a:1d:e8:6a:6a:1e:42:c1:49:2c:3a:85:d4:2b:0f:64:a6:
         d5:92:6d:2f:16:54:df:67:01:8b:00:68:5d:c7:73:b1:c3:d4:
         14:0a:07:c9:e1:03:b8:24:ff:bb:09:98:d5:18:18:a8:73:94:
         67:be:4b:86:9b:94:d9:e3:72:b0:c3:ff:01:e6:81:c7:40:0d:
         b4:80:b9:e7:03:21:be:78:39:42:cb:cc:61:69:3d:be:55:d9:
         71:96:0a:e4:ac:15:7e:c1:94:52:7a:1b:92:ff:96:8f:91:3c:
         fb:88:30:26:d3:b4:27:f7:69:15:be:2c:96:28:17:9f:52:56:
         81:90:b2:d7:85:61:f4:2c:bb:dd:6e:b3:1e:bd:37:e3:33:21:
         48:5c:9b:de:a0:fc:44:f0:f9:a9:6d:e0:94:8d:ea:16:89:6b:
         67:a6:72:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:31 2026 by rpki-client