This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/EgHUN3qCh8c5jbA7nXgQMQ0B6CA.roa
File:                     EgHUN3qCh8c5jbA7nXgQMQ0B6CA.roa (raw, json)
Hash identifier:          Tjwlsl8OuazKMc76GaD7QXCQckglqeRlYIwV1icpAPE=
Subject key identifier:   12:01:D4:37:7A:82:87:C7:39:8D:B0:3B:9D:78:10:31:0D:01:E8:20
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1344
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/EgHUN3qCh8c5jbA7nXgQMQ0B6CA.roa
Signing time:             Fri 06 Feb 2026 01:05:00 +0000
ROA not before:           Fri 06 Feb 2026 01:05:00 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.71.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4932 (0x1344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:05:00 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1201D4377A8287C7398DB03B9D7810310D01E820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:7f:17:c4:9f:40:c5:e1:58:f4:0e:d0:29:
                    64:63:86:e3:e2:0c:6d:97:c0:32:9f:76:18:2c:58:
                    81:ff:a7:b6:5c:e3:8d:0d:bd:3d:35:ad:f8:f9:23:
                    c5:9a:47:78:fe:e6:7b:ff:e3:3b:a1:53:95:0e:57:
                    26:e3:68:9f:de:9e:32:5f:f1:f3:f7:42:ab:35:08:
                    c8:1e:27:3f:34:b0:40:44:61:fa:d6:1f:79:a3:03:
                    a8:70:94:3e:25:a7:3a:3f:9f:4e:77:7b:5a:58:b2:
                    67:b3:7a:86:5c:ef:61:b3:d8:ee:70:b0:6e:f0:7a:
                    49:5a:31:3c:c5:cd:6f:40:22:41:e4:64:6a:59:5b:
                    f5:9c:8b:3b:f1:7e:2c:ac:fe:4a:bc:b4:e8:1e:96:
                    e7:f5:be:6d:ad:e3:7a:23:1d:1a:cd:b0:d0:0d:21:
                    f6:40:45:65:47:40:20:41:26:49:3d:cd:77:f5:d7:
                    6b:0c:f1:51:65:2c:80:c0:c5:5c:2a:52:e5:f8:62:
                    18:55:ac:10:81:de:78:3b:be:8f:eb:80:e7:a8:de:
                    cf:ff:0d:28:be:ee:4e:ac:bd:4c:37:bc:16:e5:48:
                    c2:8a:5c:66:fc:aa:a3:b0:6a:a7:0f:58:36:bc:6b:
                    1a:33:06:43:81:93:00:9b:4b:10:6a:75:af:ed:78:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:01:D4:37:7A:82:87:C7:39:8D:B0:3B:9D:78:10:31:0D:01:E8:20
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/EgHUN3qCh8c5jbA7nXgQMQ0B6CA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:c1:09:6d:cc:08:28:7c:73:00:2a:9b:a2:35:b1:9b:9c:cc:
         32:ff:8a:29:b5:35:7f:d2:43:04:b6:7b:6f:fa:95:73:5f:50:
         79:d7:48:a0:8c:1b:06:92:bb:6f:e5:aa:8f:30:fa:aa:b2:95:
         57:e5:d2:1c:d3:27:cc:9c:d0:ac:14:a4:79:55:21:f0:3a:75:
         0f:de:a1:84:2e:79:20:cb:13:db:20:31:64:97:1c:d4:73:0f:
         f0:12:13:b8:3c:ef:fe:0f:7f:69:a9:e4:50:1a:4e:2b:97:c9:
         0c:eb:81:b3:fc:47:6f:86:ff:4a:fa:24:91:e4:8b:68:69:39:
         ec:0d:b4:d4:df:bd:da:9a:53:d7:6b:5e:03:08:92:53:86:b0:
         aa:a0:31:e6:9b:bb:04:68:d7:3d:0e:89:16:c2:51:89:c9:20:
         0f:0a:06:f9:3c:a8:16:13:fd:51:d7:a9:fd:fb:9d:fa:e7:16:
         54:78:1e:30:f2:c3:68:23:1b:bc:c1:e2:3a:15:92:91:ae:7e:
         39:ed:53:db:4b:e2:40:79:4a:7f:6d:02:ed:d6:a4:25:ee:b2:
         22:ae:76:e4:0f:ce:c3:66:7f:df:f2:ca:c7:e6:bd:5f:ef:f9:
         68:f7:4e:d9:e2:8b:b4:98:6f:d0:ed:07:31:5d:5d:18:3d:1f:
         66:bd:0f:73
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICE0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDYw
MTA1MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEyMDFENDM3N0E4Mjg3
QzczOThEQjAzQjlENzgxMDMxMEQwMUU4MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFX38XxJ9AxeFY9A7QKWRjhuPiDG2XwDKfdhgsWIH/p7Zc440N
vT01rfj5I8WaR3j+5nv/4zuhU5UOVybjaJ/enjJf8fP3Qqs1CMgeJz80sEBEYfrW
H3mjA6hwlD4lpzo/n053e1pYsmezeoZc72Gz2O5wsG7weklaMTzFzW9AIkHkZGpZ
W/Wcizvxfiys/kq8tOgeluf1vm2t43ojHRrNsNANIfZARWVHQCBBJkk9zXf112sM
8VFlLIDAxVwqUuX4YhhVrBCB3ng7vo/rgOeo3s//DSi+7k6svUw3vBblSMKKXGb8
qqOwaqcPWDa8axozBkOBkwCbSxBqda/teM0HAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUEgHUN3qCh8c5jbA7nXgQMQ0B6CAwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9FZ0hVTjNxQ2g4YzVqYkE3blhn
UU1RMEI2Q0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy0cK
MA0GCSqGSIb3DQEBCwUAA4IBAQARwQltzAgofHMAKpuiNbGbnMwy/4optTV/0kME
tntv+pVzX1B510igjBsGkrtv5aqPMPqqspVX5dIc0yfMnNCsFKR5VSHwOnUP3qGE
LnkgyxPbIDFklxzUcw/wEhO4PO/+D39pqeRQGk4rl8kM64Gz/Edvhv9K+iSR5Ito
aTnsDbTU373amlPXa14DCJJThrCqoDHmm7sEaNc9DokWwlGJySAPCgb5PKgWE/1R
16n9+5365xZUeB4w8sNoIxu8weI6FZKRrn457VPbS+JAeUp/bQLt1qQl7rIirnbk
D87DZn/f8srH5r1f7/lo907Z4ou0mG/Q7QcxXV0YPR9mvQ9z
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:53 2026 by rpki-client