This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/FxDc4IzlNqmIQIWgs2kiyU9vg9g.roa
File:                     FxDc4IzlNqmIQIWgs2kiyU9vg9g.roa (raw, json)
Hash identifier:          tTa3yEb2G6vaPiUgrk8/EdwbxtuNbwP2tazmrBpbgUQ=
Subject key identifier:   17:10:DC:E0:8C:E5:36:A9:88:40:85:A0:B3:69:22:C9:4F:6F:83:D8
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       136A
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/FxDc4IzlNqmIQIWgs2kiyU9vg9g.roa
Signing time:             Fri 06 Feb 2026 01:08:29 +0000
ROA not before:           Fri 06 Feb 2026 01:08:29 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.72.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4970 (0x136a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:08:29 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1710DCE08CE536A9884085A0B36922C94F6F83D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:18:04:b6:30:c8:0d:8b:0f:2f:79:3a:21:5c:
                    b3:c6:d0:b2:a3:82:6e:c2:93:30:30:62:d7:c8:07:
                    fe:a1:2b:5a:3d:41:b9:b9:13:df:97:75:15:eb:31:
                    52:94:6f:c3:ec:6f:aa:87:bb:cf:37:53:9d:53:e2:
                    62:8f:1c:62:6c:a3:87:ea:31:13:d6:9e:93:01:ce:
                    1a:43:f8:3a:a2:14:f4:fe:28:8e:bd:3d:ad:3b:6d:
                    31:5d:16:97:7c:f6:f0:91:cc:1f:fa:18:13:84:8d:
                    91:8f:67:8b:bb:27:cc:20:3b:4b:9b:de:37:80:62:
                    d3:7c:44:da:e7:68:33:47:95:89:40:15:7a:d1:e3:
                    5a:fc:c0:61:9f:58:b3:ef:3e:96:1b:97:c5:92:4e:
                    cd:34:40:a4:a6:d0:58:38:bd:f0:49:79:8c:f7:4d:
                    dd:41:cd:5c:bb:98:13:a6:c4:63:d6:12:aa:96:f1:
                    23:18:6b:29:16:f4:bf:1e:26:7d:58:0a:78:d2:22:
                    39:b6:aa:64:c4:9b:48:8f:e6:28:c6:88:a5:23:60:
                    e9:7d:01:5b:f6:37:90:1c:3e:b8:f3:45:02:ba:5f:
                    96:7e:06:57:df:9a:12:a1:d8:fa:6b:dd:1c:31:aa:
                    e8:43:63:65:34:89:f7:23:14:38:1d:a9:fd:a6:6d:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:10:DC:E0:8C:E5:36:A9:88:40:85:A0:B3:69:22:C9:4F:6F:83:D8
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/FxDc4IzlNqmIQIWgs2kiyU9vg9g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ca:8c:f3:b1:67:88:17:2e:7a:7c:32:ba:b0:e6:0d:d7:a5:
         0b:1b:65:1a:56:e8:1f:25:ad:07:7b:0f:42:bb:21:13:b7:d3:
         9b:be:5c:bc:1f:b3:a4:82:c9:8f:c0:74:1a:2f:a7:7d:7e:61:
         bf:bb:3e:0f:97:52:0e:3f:99:45:0b:1e:d2:be:f2:57:a8:74:
         c6:c3:2d:a2:32:50:82:1e:c5:1a:90:44:3c:8f:ab:d4:25:8a:
         de:16:6c:8e:09:73:b9:18:3b:14:2c:c0:11:a6:62:d8:a3:fc:
         61:05:7c:2f:a8:02:35:16:be:1e:c2:85:65:5f:60:d0:12:5c:
         95:f5:6e:d1:bb:11:18:cc:e8:43:4a:43:79:13:f8:c9:b9:0d:
         eb:c8:23:f5:32:66:cd:bd:00:c5:3c:cf:4e:3e:f6:b0:7c:83:
         f9:a6:ba:57:14:04:10:ff:24:66:26:d9:ff:8b:9a:47:e1:c5:
         31:67:b4:dc:90:32:17:d4:ae:82:e0:d8:c5:50:76:91:d0:ef:
         90:6c:79:e7:63:44:4d:b6:f9:ad:53:e2:d5:39:9e:0e:e7:53:
         7e:6c:87:ed:07:a9:4f:2c:62:c2:50:71:3e:3b:57:db:ea:a1:
         ef:c1:75:ab:3b:3c:e8:0b:2d:b9:09:0f:8f:72:1e:46:b8:bd:
         f4:77:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:28 2026 by rpki-client