This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/DGPLAwmNUgowBJemZz5ucwaOYYY.roa
File:                     DGPLAwmNUgowBJemZz5ucwaOYYY.roa (raw, json)
Hash identifier:          C5+PVw7tzOxZ1HCiG00U2zOYxRG3OwCeFXy1ymYsCrI=
Subject key identifier:   0C:63:CB:03:09:8D:52:0A:30:04:97:A6:67:3E:6E:73:06:8E:61:86
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12AA
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/DGPLAwmNUgowBJemZz5ucwaOYYY.roa
Signing time:             Tue 03 Feb 2026 08:51:09 +0000
ROA not before:           Tue 03 Feb 2026 08:51:09 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.68.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4778 (0x12aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:51:09 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0C63CB03098D520A300497A6673E6E73068E6186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:0e:e8:6e:51:01:31:da:7e:93:5c:b4:5a:
                    19:d5:48:37:d8:64:85:ba:7a:97:1a:08:94:51:e5:
                    1e:85:d6:1d:85:a1:0b:05:5d:83:ce:fb:d2:62:0b:
                    a9:1a:15:10:78:02:10:c8:56:41:6b:e5:e0:98:b8:
                    d5:0b:39:8f:9b:4a:32:28:b0:b7:a3:05:1e:4f:ab:
                    b5:d3:38:d9:c6:3f:c2:36:2b:7e:aa:6b:22:ed:e9:
                    d5:b7:50:b7:54:05:34:bf:ba:19:05:e7:dc:83:71:
                    f6:0b:9e:bf:15:c0:a8:27:2d:a7:7a:59:f5:73:64:
                    7c:39:f0:14:00:04:8f:43:7f:c1:f5:e8:7a:84:25:
                    57:a2:d7:4b:28:95:c5:3d:23:c9:4c:f4:06:18:17:
                    e5:50:a8:3a:0b:4c:06:80:6a:23:fd:25:3e:3b:3a:
                    49:22:68:3a:2e:1d:86:cb:9c:fd:7d:9b:c4:34:d6:
                    c1:03:1d:7d:5c:bd:e2:7a:c4:05:c3:ff:d0:e5:4a:
                    7e:9d:88:a6:da:4a:3d:51:05:b5:59:b0:31:d0:07:
                    b5:2d:09:c0:df:5a:5c:04:bb:b6:5f:5d:c3:1b:b3:
                    7b:24:db:1e:00:ce:ec:00:3d:44:0d:92:59:20:ff:
                    9a:16:30:15:2a:17:ca:70:ba:7b:ff:9a:79:14:f8:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:63:CB:03:09:8D:52:0A:30:04:97:A6:67:3E:6E:73:06:8E:61:86
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/DGPLAwmNUgowBJemZz5ucwaOYYY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c8:67:a1:6b:ae:c9:a0:83:ab:a7:e2:9d:10:52:34:9c:7c:
         8a:66:03:30:1d:30:a5:37:33:9e:d4:8c:f6:b7:f6:c0:cd:bc:
         f3:52:a7:66:aa:aa:6b:74:1a:aa:0d:b5:49:9a:ba:e3:3a:74:
         7a:b6:12:fc:56:ad:8d:fa:12:ed:41:6e:f8:ce:5b:f6:69:23:
         84:e7:51:11:3f:7b:89:fe:fb:04:3f:6e:57:b0:1a:18:ca:89:
         d7:f1:23:5a:14:22:be:2e:48:f6:6c:24:f7:f3:05:16:80:5b:
         13:54:bc:ba:2f:5b:0e:8a:3e:22:68:0c:6f:df:fc:62:7b:ed:
         ba:b9:ee:26:d1:9d:87:e2:bc:d9:e6:1e:19:80:5b:de:2a:0f:
         e7:f0:50:7e:08:09:58:6c:9d:ec:e1:46:66:a2:f2:48:ca:10:
         61:31:c4:18:0f:fc:54:14:76:57:8b:82:30:dd:53:4b:74:15:
         c7:ff:fc:68:bb:40:2e:59:18:27:05:99:98:88:23:75:bb:57:
         37:33:6c:c3:a2:87:76:29:ca:87:9c:63:bd:bd:5c:23:7d:1c:
         86:33:ef:1c:b9:94:dc:49:22:bf:f0:14:ee:9d:28:2f:13:68:
         b3:7c:d4:25:20:a0:e3:90:53:82:f7:60:f0:e0:5d:51:d2:6f:
         a7:95:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:53 2026 by rpki-client