This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/F-vip_FzGAuztfCgZatVLy4C4YM.roa
File:                     F-vip_FzGAuztfCgZatVLy4C4YM.roa (raw, json)
Hash identifier:          lglw2/fArz5IdTkoRqvhg4HVWMGU7izzCJzCinvwhn8=
Subject key identifier:   17:EB:E2:A7:F1:73:18:0B:B3:B5:F0:A0:65:AB:55:2F:2E:02:E1:83
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1143
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/F-vip_FzGAuztfCgZatVLy4C4YM.roa
Signing time:             Tue 03 Feb 2026 02:01:22 +0000
ROA not before:           Tue 03 Feb 2026 02:01:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.68.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4419 (0x1143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:01:22 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=17EBE2A7F173180BB3B5F0A065AB552F2E02E183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:27:c4:b1:63:9d:7c:b2:24:2e:9a:d5:26:a9:
                    97:1d:9d:b3:b4:9a:85:d5:12:5f:7a:60:f4:3e:35:
                    c4:d7:3c:17:da:8a:8b:e2:58:db:8c:a6:fe:4b:64:
                    4a:8f:0d:56:ee:4a:5b:5b:81:9e:81:ec:cd:ac:6b:
                    da:f2:11:fc:f5:a2:38:e2:1b:8e:0d:c6:ff:e4:ed:
                    1f:d4:a8:82:43:06:d0:7c:ad:a2:4c:77:a6:ff:32:
                    44:4d:13:fa:d5:a7:45:9c:09:db:1a:5a:9b:fb:d1:
                    39:59:ed:a6:4e:0e:aa:15:be:7e:03:9e:65:d8:f9:
                    bd:e9:3d:00:28:4b:2e:f9:de:39:6a:b4:99:2a:fc:
                    da:97:28:4d:72:5a:ab:fc:9b:ee:2a:9f:fd:8b:d4:
                    53:34:f2:cd:68:9c:8b:27:4b:5a:6b:2e:38:a8:eb:
                    33:a3:1b:85:77:16:d8:fa:d6:9d:26:08:34:b5:00:
                    08:05:18:b1:1c:45:f9:7d:10:fe:fc:b9:f7:11:00:
                    2f:57:5a:95:9c:06:77:85:6c:4c:4d:50:e8:7c:9f:
                    96:d1:fc:0d:07:4d:2a:97:b6:ac:bb:52:7c:c1:5c:
                    58:57:46:0b:9e:19:48:63:86:2e:41:56:97:d4:9b:
                    a0:98:8e:0b:8b:de:52:0c:74:1f:3b:f1:25:0a:5d:
                    19:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EB:E2:A7:F1:73:18:0B:B3:B5:F0:A0:65:AB:55:2F:2E:02:E1:83
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/F-vip_FzGAuztfCgZatVLy4C4YM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:da:7f:fc:69:09:24:fb:cb:82:c4:24:81:70:5d:49:2e:7f:
         e1:0a:68:cb:f1:38:37:7f:88:ba:f9:1e:2f:bb:39:30:0a:98:
         30:d1:64:90:e0:c3:c4:34:20:fb:37:41:2d:a0:73:85:fb:62:
         43:4f:bc:1b:5b:80:e1:77:d4:e7:7d:77:ea:d3:0d:7c:30:bc:
         ae:d1:01:a9:e4:64:de:ae:36:b5:ea:a9:69:e5:c0:a8:2f:2f:
         f6:9f:5a:ef:32:e5:7f:b7:57:91:a8:ef:58:11:19:55:0e:32:
         29:55:50:5f:33:4e:95:b6:64:b3:72:6a:6c:0a:da:2e:ad:09:
         40:cd:20:62:b6:63:8d:87:db:d6:13:af:46:6f:40:40:83:99:
         95:9f:aa:a6:97:16:5b:94:a9:75:70:99:72:fc:e8:7a:b9:40:
         33:89:27:f2:67:e4:c7:f5:92:e1:67:af:07:9d:d1:29:df:8b:
         d9:8f:24:79:e0:92:3f:77:07:7a:f8:ed:81:76:e6:d9:9e:23:
         ae:e0:99:cf:f5:37:db:af:66:b1:b5:15:8c:8f:9f:ff:56:f6:
         e5:90:65:c5:64:2a:9c:a5:f3:91:01:9d:3d:b7:f6:6d:35:4d:
         cb:c7:38:c8:c7:f8:0f:cd:af:0e:d0:49:af:77:25:d7:1c:51:
         6b:66:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:28 2026 by rpki-client