This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/E7gLd6Tv3c5DKxKoJzSFTM_xVNk.roa
File:                     E7gLd6Tv3c5DKxKoJzSFTM_xVNk.roa (raw, json)
Hash identifier:          J9p+2HSa99mm8+LuIAjvcP5IAjm4jTfSoKvudNfMi9U=
Subject key identifier:   13:B8:0B:77:A4:EF:DD:CE:43:2B:12:A8:27:34:85:4C:CF:F1:54:D9
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11E9
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/E7gLd6Tv3c5DKxKoJzSFTM_xVNk.roa
Signing time:             Tue 03 Feb 2026 02:47:48 +0000
ROA not before:           Tue 03 Feb 2026 02:47:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        163.28.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4585 (0x11e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:47:48 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=13B80B77A4EFDDCE432B12A82734854CCFF154D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:0f:c0:13:41:8d:52:0d:b5:fe:f8:b4:0e:
                    76:7e:56:c4:52:79:34:57:b0:7d:4e:1a:fb:83:0c:
                    76:8d:15:d7:08:3e:63:3f:da:05:7d:70:f3:08:08:
                    ee:e8:07:b1:87:a1:29:c9:18:fd:27:2c:f1:a8:12:
                    06:b1:e5:22:3d:b1:bd:2d:88:63:dc:fa:d0:9b:cc:
                    cf:82:12:73:7f:05:db:49:fa:a0:a2:4d:d2:22:c2:
                    2b:cc:e6:15:04:0f:3b:f2:7d:65:15:64:a3:ea:6b:
                    77:54:7e:84:1d:2e:b3:04:21:02:7c:52:74:43:87:
                    22:a0:c4:f0:a4:93:a3:99:38:31:da:aa:c6:eb:98:
                    ca:c5:df:00:96:75:02:f9:91:cc:d7:fb:9d:dd:25:
                    03:75:c9:62:3a:0d:fc:a6:04:55:27:2d:d6:c9:5c:
                    7e:b2:52:71:bd:b8:ea:35:6c:5f:af:9c:f1:4f:3d:
                    5b:ef:2a:39:86:75:b6:09:79:3e:f4:47:09:9c:29:
                    b1:7a:ca:f0:82:da:ac:ab:f9:cd:5b:8e:66:25:19:
                    0a:70:90:b1:01:df:c0:21:17:17:a9:aa:fc:cb:98:
                    2e:8f:94:4c:ba:f9:b4:f1:95:9d:17:f9:cc:b0:f7:
                    6b:5f:c4:95:8c:f1:bc:75:35:98:98:58:bb:2f:b7:
                    60:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B8:0B:77:A4:EF:DD:CE:43:2B:12:A8:27:34:85:4C:CF:F1:54:D9
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/E7gLd6Tv3c5DKxKoJzSFTM_xVNk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.28.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:41:99:70:0e:31:5f:96:5a:02:26:13:32:62:4a:f9:4e:73:
         41:46:e6:9f:89:0f:fb:1c:4f:63:12:82:1d:b3:ec:79:94:06:
         c0:e9:60:94:b8:bd:67:8a:6f:32:89:f6:86:13:e4:b5:14:b2:
         79:f7:53:00:0b:e5:00:37:69:1c:9c:51:79:24:99:31:00:19:
         a5:e5:ab:5c:22:d0:25:dc:89:68:51:fe:00:98:51:ec:cc:bd:
         7d:aa:7c:92:77:23:fc:de:d7:40:53:d3:79:95:9a:c7:4d:c1:
         72:81:1b:79:94:c9:9d:31:f1:cb:33:e6:2f:13:19:3c:cf:3b:
         ec:51:f4:72:da:54:6f:2a:dd:58:5e:67:24:1e:e5:85:e4:11:
         21:02:f0:0b:1d:ff:ec:d2:22:85:f8:45:05:d8:41:24:72:8f:
         1f:e9:71:6a:fe:1a:09:ce:15:35:a0:8e:8a:38:d4:66:00:d6:
         40:05:e8:81:b4:c8:bb:d0:04:86:7b:6d:5d:53:22:4c:e9:32:
         d7:c4:50:2e:7e:29:5e:6f:cd:e6:e0:68:b9:33:52:3a:e2:a6:
         11:48:e5:2e:9f:38:5c:70:1f:b0:52:0e:65:cc:a5:6b:35:db:
         51:fb:3b:01:fa:ba:bc:fb:ac:1e:1a:12:80:c4:ec:48:ba:b0:
         53:72:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:58 2026 by rpki-client