This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/F8fhV7WBeQHw8ZrnCAJFeUXUAfE.roa
File:                     F8fhV7WBeQHw8ZrnCAJFeUXUAfE.roa (raw, json)
Hash identifier:          FOC3vgrQtT75YBdJoP5/ZPr7O+kN+b3v2hKhwEcXMmQ=
Subject key identifier:   17:C7:E1:57:B5:81:79:01:F0:F1:9A:E7:08:02:45:79:45:D4:01:F1
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1129
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/F8fhV7WBeQHw8ZrnCAJFeUXUAfE.roa
Signing time:             Tue 03 Feb 2026 01:57:26 +0000
ROA not before:           Tue 03 Feb 2026 01:57:26 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.64.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4393 (0x1129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 01:57:26 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=17C7E157B5817901F0F19AE70802457945D401F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:83:9c:8b:6d:69:a1:00:0b:3f:98:a9:91:
                    c0:98:45:5e:d8:b8:c8:ca:bf:3c:ed:4f:af:f8:6e:
                    c5:6c:95:3a:ab:c1:d2:95:30:86:2f:f1:05:cb:dc:
                    c9:83:89:ad:a1:87:5f:c5:a7:bb:bf:43:21:4f:84:
                    e6:36:e3:7a:85:59:d0:5b:41:f5:03:ae:62:75:c6:
                    c6:f5:e4:2c:70:8d:e9:83:d4:99:c9:52:fd:dc:e2:
                    da:c1:c3:04:5e:ef:b4:fb:ff:8c:df:bd:e4:ef:3a:
                    80:08:a7:d5:03:29:97:8b:06:21:71:c5:29:63:ff:
                    cc:08:d4:4c:57:ad:e6:44:12:b1:03:e5:e4:7a:29:
                    6e:7f:ce:e2:95:83:b7:ae:f3:4f:7d:a7:d2:f7:14:
                    0a:0b:b3:f0:bc:cc:cf:52:13:af:79:4f:da:fe:29:
                    48:27:22:38:dc:e1:b2:81:71:f0:49:4d:04:c8:ed:
                    c1:b4:c1:52:32:32:04:46:dc:08:f2:9d:22:83:2b:
                    b8:3b:5f:dd:e7:13:c0:0d:c0:2d:5a:6f:18:85:0c:
                    31:8b:f1:09:3f:07:6e:fe:61:9f:4e:50:ca:34:02:
                    b3:07:09:1d:99:97:fc:19:39:c1:43:38:0e:7b:2c:
                    49:92:85:75:94:51:e1:36:59:65:0e:c0:9c:15:a8:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C7:E1:57:B5:81:79:01:F0:F1:9A:E7:08:02:45:79:45:D4:01:F1
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/F8fhV7WBeQHw8ZrnCAJFeUXUAfE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:1f:4a:08:8c:9f:fa:64:a9:a9:4b:36:45:6f:f0:e4:31:cf:
         3a:ed:7c:51:c6:cc:c9:12:ca:98:b5:2a:aa:4e:04:fd:88:d9:
         1b:aa:d8:15:a8:4a:e5:58:3a:52:1a:ce:c0:62:91:93:a7:13:
         aa:72:d0:c1:e8:93:b0:58:95:ac:9e:e0:43:2b:16:97:8e:12:
         5c:57:f7:0a:99:82:5a:74:2f:58:13:57:ab:8a:57:75:e3:dd:
         0b:2d:d0:e9:ee:52:45:36:bb:fa:34:18:bb:24:61:59:70:32:
         88:bf:a6:de:f2:f2:2a:74:1a:bb:87:0d:95:7e:c2:53:5e:51:
         f9:8b:0c:f9:ab:3c:46:70:e2:60:7d:0c:d8:9a:77:31:53:3f:
         0f:db:0d:b4:13:85:f5:e4:c7:fb:8c:cc:9e:2d:b8:06:99:c3:
         ac:4d:09:1c:01:33:19:5e:c8:d5:b5:b3:7c:89:aa:ca:ee:16:
         28:e0:08:8b:1a:23:d3:ff:27:05:ab:cc:6a:ba:15:9d:d3:9e:
         25:33:61:8c:cb:d7:ae:c7:ef:0f:97:a9:73:4d:4a:fd:10:47:
         74:25:04:67:3d:0d:54:cc:81:f5:d7:56:55:cc:f1:ae:39:5d:
         15:db:6e:49:c6:b0:f5:15:ef:65:6f:c9:2c:be:82:95:8f:71:
         23:39:f4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:28 2026 by rpki-client