This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/D4GvFi3O9JTZPRTOovDU-zP95V8.roa
File:                     D4GvFi3O9JTZPRTOovDU-zP95V8.roa (raw, json)
Hash identifier:          tmazF+FF7py6J2momXMsBMFjAq/OoSHZxn1/b4Ov8QA=
Subject key identifier:   0F:81:AF:16:2D:CE:F4:94:D9:3D:14:CE:A2:F0:D4:FB:33:FD:E5:5F
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11BE
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/D4GvFi3O9JTZPRTOovDU-zP95V8.roa
Signing time:             Tue 03 Feb 2026 02:34:17 +0000
ROA not before:           Tue 03 Feb 2026 02:34:17 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        163.22.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4542 (0x11be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:34:17 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0F81AF162DCEF494D93D14CEA2F0D4FB33FDE55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7b:9e:c2:e9:1a:e9:ed:13:d0:59:af:f3:60:
                    c4:46:9b:e0:68:0a:93:70:8d:9c:26:d9:63:69:6d:
                    a8:f9:9e:59:1a:be:5f:3b:cc:c4:ba:eb:4b:40:99:
                    ce:d6:71:46:d2:9b:bc:e8:14:59:ee:59:e5:9c:c3:
                    ae:6f:e2:85:fc:1f:51:63:54:7a:32:dc:24:e7:cd:
                    fe:38:1c:31:49:c5:14:18:00:4f:dd:28:86:6c:0f:
                    dc:89:5f:78:be:42:68:32:ca:52:f6:83:98:05:fa:
                    ce:3b:38:e6:f7:73:ac:84:3f:7b:b8:52:3d:c3:53:
                    91:6d:04:7b:76:05:59:97:b4:f2:14:99:9c:73:5e:
                    8f:47:7b:07:30:e3:43:ce:2a:e6:17:a2:03:61:a5:
                    a9:07:5d:a9:4f:78:d9:ea:1b:d9:84:89:9c:e8:f4:
                    26:8f:5b:ae:2e:af:8a:ff:75:9a:60:92:67:27:9a:
                    4e:a8:2c:92:27:16:ef:74:38:c8:b1:79:df:75:fa:
                    1a:dc:85:c2:b8:a7:cb:2c:36:6b:e3:73:ca:aa:42:
                    0a:21:83:30:f0:2d:51:e8:44:2a:a3:7f:30:b7:ff:
                    7a:d6:f6:3b:6f:f2:f0:b2:61:79:be:f3:c0:d5:ed:
                    0b:6a:f8:52:81:90:c9:e3:b6:6d:d4:1f:4f:45:c5:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:81:AF:16:2D:CE:F4:94:D9:3D:14:CE:A2:F0:D4:FB:33:FD:E5:5F
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/D4GvFi3O9JTZPRTOovDU-zP95V8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.22.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:67:a0:61:6c:08:4e:e2:10:65:19:c0:00:f0:5a:a1:41:7c:
         04:7f:e6:52:d4:09:9c:aa:0c:06:49:e3:fa:bc:be:6f:ce:80:
         e3:89:ff:23:90:c4:c6:d5:ef:98:53:c8:33:8b:36:74:2e:c7:
         b7:77:04:f3:46:ed:ef:c3:b2:46:60:39:d0:66:01:86:ae:75:
         11:bd:5b:c2:57:42:9e:d1:b6:02:80:cb:a8:58:9c:34:b6:1d:
         bd:60:d2:84:10:39:ed:49:18:b3:2d:50:21:a2:d0:8b:9a:76:
         1b:96:13:dc:c0:1a:ea:3c:f9:d9:a2:7f:5e:f0:9d:d1:62:c1:
         b4:10:19:01:94:9b:a9:62:5c:f8:f4:91:14:5b:41:6a:cd:45:
         2f:a6:30:34:eb:1c:b8:d2:63:04:31:18:41:c1:2c:13:73:13:
         5d:44:4e:43:61:0d:12:c7:b8:8b:64:73:8c:2f:e4:58:fb:aa:
         3e:65:bf:0c:e2:b9:27:80:b6:d9:c8:d8:ae:7a:6d:a8:d5:fa:
         32:4b:9f:07:1e:98:13:f6:71:1b:d7:99:c7:e3:b2:79:a0:ee:
         27:76:5d:ad:50:ed:d7:c6:23:50:fa:79:46:c7:81:df:26:e3:
         ff:2d:a7:ab:3e:4a:88:5c:1a:58:5c:4f:4d:cf:13:04:59:26:
         78:5e:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:30 2026 by rpki-client