This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/CVfS9RF8kU2I6gNivTlrCalR2Ac.roa
File:                     CVfS9RF8kU2I6gNivTlrCalR2Ac.roa (raw, json)
Hash identifier:          1KdD8DnuuLohy8y/YB+UqnPK6cWg+gaZvvtHyCHLBnY=
Subject key identifier:   09:57:D2:F5:11:7C:91:4D:88:EA:03:62:BD:39:6B:09:A9:51:D8:07
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1159
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/CVfS9RF8kU2I6gNivTlrCalR2Ac.roa
Signing time:             Tue 03 Feb 2026 02:20:21 +0000
ROA not before:           Tue 03 Feb 2026 02:20:21 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.71.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4441 (0x1159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:20:21 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0957D2F5117C914D88EA0362BD396B09A951D807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:eb:5f:b0:06:8b:e9:6e:d0:de:ad:a3:16:
                    71:d9:90:65:23:f6:9d:87:b5:67:1b:1f:76:db:75:
                    35:83:7c:35:ac:ac:68:14:13:25:72:7d:ba:a8:ba:
                    54:94:06:f4:63:fb:9d:b6:4b:6c:18:c4:b9:99:e4:
                    05:62:5c:e0:5e:b7:52:16:7d:48:98:1e:74:0c:5f:
                    44:61:fc:e2:0c:97:12:55:dc:26:08:fa:6b:cb:af:
                    ab:2c:4b:a2:47:1f:98:c8:b8:5d:6a:61:c5:24:c5:
                    d0:45:2e:d3:53:52:d5:04:b5:61:1e:d5:42:e9:9c:
                    dd:b5:e6:2c:c3:1c:64:46:f2:8c:1c:28:f7:91:b6:
                    12:35:b6:ee:3a:ab:3c:7b:75:28:ca:4e:68:9b:5a:
                    89:02:fd:b0:a4:a2:82:7e:96:a8:ac:5b:23:5e:a5:
                    93:43:d6:cb:31:50:ec:1a:f2:6e:e2:a0:c4:17:4c:
                    96:4d:1b:ea:2d:71:4b:f7:ee:37:11:c9:0f:a6:4a:
                    7e:80:d4:43:b1:bd:e4:45:de:d9:53:44:9c:0f:e3:
                    75:a3:c9:64:81:14:cd:fc:3e:82:2b:54:ac:b5:b3:
                    7d:c3:94:4c:7e:75:6b:d7:f9:e9:61:dc:92:11:dd:
                    85:62:28:60:17:c8:87:c8:23:0d:42:1f:5f:4e:c0:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:57:D2:F5:11:7C:91:4D:88:EA:03:62:BD:39:6B:09:A9:51:D8:07
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/CVfS9RF8kU2I6gNivTlrCalR2Ac.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:8a:2a:e9:62:c2:af:65:0c:b5:64:e3:7d:4f:c0:ab:6d:fa:
         48:59:27:f0:7b:bd:b9:de:d5:54:a9:1d:33:80:a3:3a:61:80:
         45:50:f8:ec:3c:72:a5:09:64:a7:d6:2b:5e:fc:9d:33:2d:34:
         01:0c:2d:46:c4:07:29:1e:48:c6:42:3d:85:e3:c8:2e:0c:ef:
         ed:e2:83:d8:12:01:d9:33:71:89:78:75:35:25:20:9c:8d:17:
         1c:52:6a:68:82:3c:9c:35:61:19:33:90:d3:0b:41:5a:07:bc:
         99:5e:0a:68:44:ae:5f:b9:c9:55:b8:8f:20:61:43:e2:9a:17:
         10:1e:74:84:2b:52:62:92:32:31:ab:3a:ea:89:2b:f4:a0:95:
         a7:9e:c6:3b:2f:27:d0:43:23:6b:ff:8b:d8:67:fe:8c:77:0f:
         a2:6d:dd:6c:c0:d0:c6:f4:1e:8b:d4:7e:c8:5c:70:4a:23:7b:
         61:7a:52:76:d0:a9:bf:30:ab:4c:6b:cc:95:ad:65:38:33:ae:
         f8:49:00:fb:79:26:40:fb:4b:e3:0d:d2:75:86:24:cb:ac:ef:
         17:70:4d:4e:8d:0f:cd:42:65:32:95:eb:57:84:25:df:0e:3f:
         65:d1:d3:84:f1:c2:16:51:ea:f6:f1:44:a2:bc:ef:0f:54:b0:
         5a:7a:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:56 2026 by rpki-client