This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Bd56n9AMzlA-SpSqO6oEJJwc7Kk.roa
File:                     Bd56n9AMzlA-SpSqO6oEJJwc7Kk.roa (raw, json)
Hash identifier:          9Hj+tkt/aI12UjwbDqA9E0XWKtKpdUp/EWeIKjMAeO8=
Subject key identifier:   05:DE:7A:9F:D0:0C:CE:50:3E:4A:94:AA:3B:AA:04:24:9C:1C:EC:A9
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       11C7
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Bd56n9AMzlA-SpSqO6oEJJwc7Kk.roa
Signing time:             Fri 06 Feb 2026 01:00:55 +0000
ROA not before:           Fri 06 Feb 2026 01:00:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        192.192.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4551 (0x11c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  6 01:00:55 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=05DE7A9FD00CCE503E4A94AA3BAA04249C1CECA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:6c:79:5a:66:c6:80:da:6a:82:f5:64:83:
                    09:8e:cb:3f:a6:d8:03:1e:12:c2:a6:e4:4f:16:d5:
                    dc:e5:65:51:61:2b:41:b3:72:af:37:28:32:63:92:
                    43:42:e9:a1:81:37:fa:ff:d0:5a:cf:91:9c:87:89:
                    c6:49:28:34:cf:1a:1b:17:06:d0:1f:1e:ca:61:25:
                    06:76:a6:50:3c:7d:11:24:d3:90:48:6e:c5:ab:78:
                    bc:dc:8f:21:cb:57:c0:ac:35:98:a0:44:75:20:4f:
                    24:60:41:8a:e6:59:4e:de:9f:d7:df:f7:36:1d:f3:
                    2a:b9:11:75:81:8f:f4:11:72:e7:37:d6:79:57:f0:
                    fa:78:a6:0e:86:14:df:1f:21:24:63:fd:65:8c:65:
                    3a:85:d2:b8:a3:97:a0:1c:d3:99:06:dc:db:c3:81:
                    c9:23:56:00:d1:5b:d5:f6:06:62:ad:0b:49:e6:65:
                    ca:2b:85:92:87:59:61:7b:c2:48:0f:f0:23:e6:2c:
                    61:aa:d0:3b:7a:1b:66:fb:13:ba:a3:4e:31:6f:ac:
                    90:4e:bc:6a:d2:aa:32:a9:9b:b7:dc:2f:65:e5:f8:
                    0a:0c:e2:7d:ce:ad:f0:20:59:da:0b:f6:d8:a6:f6:
                    ca:26:da:47:3c:f9:20:29:e0:17:66:9c:f1:b9:b4:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DE:7A:9F:D0:0C:CE:50:3E:4A:94:AA:3B:AA:04:24:9C:1C:EC:A9
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Bd56n9AMzlA-SpSqO6oEJJwc7Kk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:0b:c9:0a:0a:71:c3:b7:e6:fd:e1:23:41:d2:71:ba:3a:47:
         29:6c:ab:65:08:b3:c9:23:a5:73:57:2f:63:5d:78:07:67:38:
         03:49:39:58:ec:10:f0:57:be:da:f5:e4:c4:b2:c5:36:05:83:
         98:d9:21:c3:2d:85:f8:3a:95:d5:ec:76:e3:3c:8c:f0:fb:bb:
         e0:9f:b6:d0:c7:2d:02:e2:6a:c7:69:47:3c:12:4b:7c:96:0a:
         f8:c5:ac:94:22:59:96:a8:92:79:d2:b7:d4:27:c5:31:d3:5e:
         55:be:6b:ff:0c:8f:2d:61:11:b1:7e:99:73:92:13:aa:6a:cf:
         60:43:0a:2b:82:d9:08:28:f5:1d:60:e3:88:6d:0e:b1:4c:01:
         dc:c8:8a:1e:7e:4d:8f:03:9d:ed:97:80:7d:1e:bd:3c:3c:12:
         98:bb:0b:24:99:5f:bb:46:91:04:bf:ba:bd:83:01:8d:9a:13:
         82:ce:10:a5:b5:6d:b6:c7:dc:4a:7c:0f:59:3b:73:20:89:81:
         f3:45:29:08:a8:47:65:dd:b4:ff:6d:4f:df:70:3f:23:3f:6b:
         75:5b:13:45:0d:7a:7d:2b:bd:8b:97:7e:7d:a6:36:33:b1:2d:
         4b:49:48:ab:d7:74:71:16:4f:61:13:b9:ec:43:e9:cd:b9:18:
         39:c9:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:42:57 2026 by rpki-client