This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/E7UuQHVL7TSbMXtjkC-Xw0oKhPA.roa
File:                     E7UuQHVL7TSbMXtjkC-Xw0oKhPA.roa (raw, json)
Hash identifier:          7bndMs7ho+i5h8bzXwW3+E7An9eF/XYhgOvkDTOQIx8=
Subject key identifier:   13:B5:2E:40:75:4B:ED:34:9B:31:7B:63:90:2F:97:C3:4A:0A:84:F0
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1141
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/E7UuQHVL7TSbMXtjkC-Xw0oKhPA.roa
Signing time:             Tue 03 Feb 2026 02:01:09 +0000
ROA not before:           Tue 03 Feb 2026 02:01:09 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.68.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4417 (0x1141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:01:09 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=13B52E40754BED349B317B63902F97C34A0A84F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:68:dc:38:90:b8:ee:e0:94:1a:d3:bd:e5:
                    12:55:d1:eb:3f:a9:14:98:a4:9a:58:e0:02:dd:d3:
                    16:59:d9:93:2a:15:2f:5d:ba:f9:00:17:79:b4:bc:
                    b4:7b:be:13:33:4b:c9:c0:dd:43:09:ae:e0:51:ad:
                    fe:80:0b:fd:6c:5f:29:f6:63:4c:c8:e8:40:de:d1:
                    19:e3:bd:e1:71:3e:b4:3b:2a:30:5b:de:f9:59:37:
                    d1:2b:91:2c:b7:9b:56:98:f8:2c:54:95:0f:76:61:
                    38:68:58:ed:57:36:7b:14:53:45:79:f3:f0:25:c0:
                    0a:92:4a:b3:1a:63:d1:51:26:e3:0f:f8:41:c2:64:
                    8d:43:81:32:99:9e:2c:df:f1:a2:16:a3:d4:10:fc:
                    bb:86:1e:ef:74:21:17:fe:96:ac:5d:7f:d5:38:00:
                    83:c0:35:66:7e:fc:04:cf:42:9f:2d:86:66:29:dc:
                    58:04:b8:aa:04:e3:77:9e:72:5d:6b:e7:ed:40:0e:
                    c7:44:8c:61:f7:29:87:da:d8:91:b2:16:d5:89:8e:
                    e6:f3:74:f2:98:92:cc:65:99:af:c7:87:b1:f8:1c:
                    0f:1a:34:24:31:26:ee:c6:4e:e0:02:1f:02:86:ab:
                    bf:db:4c:ef:da:7c:df:03:c4:44:d7:c1:aa:4d:ef:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B5:2E:40:75:4B:ED:34:9B:31:7B:63:90:2F:97:C3:4A:0A:84:F0
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/E7UuQHVL7TSbMXtjkC-Xw0oKhPA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:a0:7b:37:f6:0a:ec:03:67:0b:f3:37:49:36:ef:4a:f2:c0:
         f1:1d:03:42:c2:2b:12:0c:84:3e:37:11:a4:0f:8f:db:2d:4d:
         47:cf:5e:7d:d6:cd:85:59:fb:8a:52:77:cd:21:21:ca:a3:f4:
         8a:7b:40:bc:c4:20:a6:06:d8:41:44:19:0a:01:76:61:b6:f0:
         67:40:94:3b:9f:de:15:b5:d1:58:ae:95:30:4f:98:31:54:97:
         cb:a5:0f:46:ef:0f:98:6e:dc:75:1f:76:44:5b:39:2c:ec:78:
         6f:b6:ca:54:0c:d2:50:49:9e:ad:ba:d1:00:e9:24:4b:2d:f9:
         ce:c2:7a:53:12:7d:a1:0f:f1:0f:34:88:8b:f6:c5:f1:9f:f2:
         91:41:bd:50:2f:57:77:c2:ee:31:48:75:28:f4:0b:14:5a:06:
         83:1e:45:ad:7e:50:9b:73:6d:06:c5:ba:92:46:de:52:20:49:
         fc:76:08:b4:ab:98:4b:46:5b:ec:ad:60:d1:d6:2e:77:d8:f5:
         da:94:2a:40:31:e6:00:29:89:26:0f:36:08:db:00:e2:94:97:
         1e:66:9a:21:6c:df:f7:0e:a3:da:a3:18:63:e1:88:eb:1c:0a:
         36:5d:eb:c1:f4:6e:14:8f:3a:44:6e:70:8c:19:eb:2f:25:fe:
         f0:b5:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:28 2026 by rpki-client