This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/D4arfISDFUQ8qTLryLt-xnnaSB8.roa
File:                     D4arfISDFUQ8qTLryLt-xnnaSB8.roa (raw, json)
Hash identifier:          N1SLfjKv+G2JCbaU8WYG0XOkdtoRsmCOgfP41inBoe0=
Subject key identifier:   0F:86:AB:7C:84:83:15:44:3C:A9:32:EB:C8:BB:7E:C6:79:DA:48:1F
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11CB
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/D4arfISDFUQ8qTLryLt-xnnaSB8.roa
Signing time:             Tue 03 Feb 2026 02:35:37 +0000
ROA not before:           Tue 03 Feb 2026 02:35:37 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        163.25.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4555 (0x11cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:35:37 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0F86AB7C848315443CA932EBC8BB7EC679DA481F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:1f:2a:f7:17:e5:6c:6a:56:67:11:8c:16:
                    82:8b:e1:3d:13:95:53:db:05:f4:81:3e:25:ae:6d:
                    0a:9a:f9:ff:d8:dc:73:7c:2e:ea:04:70:a8:19:58:
                    f4:e2:63:ad:66:9e:d2:b4:dd:9e:4c:70:f0:d3:51:
                    10:68:fe:0b:66:b6:98:05:fe:f3:e1:a9:cc:1a:80:
                    59:36:94:54:45:76:93:59:2c:12:4c:40:54:a8:ea:
                    84:4a:f2:4e:19:10:2b:84:47:8f:c3:c0:31:ca:63:
                    61:ba:bd:4b:63:da:42:34:dc:cd:eb:1e:11:06:ba:
                    9a:75:da:05:2e:da:69:99:39:78:68:d3:a8:aa:55:
                    0f:f7:94:67:60:8c:67:3d:3f:94:bf:85:bd:dc:7b:
                    f5:f2:68:48:67:82:88:1d:e1:a9:5c:da:05:92:99:
                    2e:00:51:0c:4a:58:56:b2:25:ff:bf:50:c5:c7:76:
                    53:7a:8e:9e:ad:8e:93:ab:a7:6a:a7:73:dc:a2:be:
                    27:b1:9c:2d:48:da:5b:25:7e:f2:63:0d:d2:41:6d:
                    50:c6:45:2b:f5:98:48:cf:3a:30:61:25:eb:5e:a9:
                    cf:5c:1a:89:c3:5c:34:b2:96:ee:ac:f4:3e:19:76:
                    af:d7:b9:19:74:4a:ad:4a:e5:ab:24:b4:ee:a7:b8:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:AB:7C:84:83:15:44:3C:A9:32:EB:C8:BB:7E:C6:79:DA:48:1F
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/D4arfISDFUQ8qTLryLt-xnnaSB8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.25.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:64:df:36:d2:3a:12:66:5e:30:c4:60:fd:91:b7:48:a6:93:
         0a:3d:60:8c:ee:05:6a:ba:2a:aa:81:77:d2:ac:70:a9:da:29:
         1a:d5:9b:4e:2b:37:6c:47:e0:1b:1a:67:dd:fc:a7:3d:de:d9:
         a1:e3:ec:d4:34:9b:90:d5:6d:0c:5a:39:e1:59:d6:fb:11:25:
         41:0a:b3:bb:0a:88:b8:69:a8:d6:50:48:e2:34:db:5c:72:c7:
         19:fe:bc:a1:39:cb:e6:20:d5:02:84:ea:00:1a:99:67:c9:fe:
         48:4e:c0:c3:6a:5e:0f:a5:21:ed:1a:16:d4:bf:ef:6d:80:84:
         2f:0c:3f:b2:46:1a:1b:e6:13:4d:37:d6:ce:1b:b2:07:8a:ba:
         28:ec:ee:45:48:d3:20:08:18:a6:5f:da:a7:66:62:e8:c7:24:
         9d:e3:ec:51:14:d7:2d:02:ee:23:35:35:b6:e4:30:ae:a6:e9:
         fc:71:cf:d5:d9:c3:28:01:29:3f:d4:30:c7:8f:eb:2b:ed:fd:
         7d:91:a6:16:0d:5e:e9:ba:00:49:51:c2:74:5d:a2:e9:bc:b1:
         97:89:ad:d3:d8:17:9b:65:f6:2c:73:7e:77:bc:2b:76:b3:51:
         4f:2f:e2:e5:d1:5d:d6:49:03:22:9d:f8:b7:af:d9:c2:92:97:
         31:aa:17:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:25 2026 by rpki-client