This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/GUUC33hMXSDc4m1fnPGU5cu_VkU.roa
File:                     GUUC33hMXSDc4m1fnPGU5cu_VkU.roa (raw, json)
Hash identifier:          82ze/SUtjEhss0hJjdtU+LbFJ8umBabQvYtwEZggHDM=
Subject key identifier:   19:45:02:DF:78:4C:5D:20:DC:E2:6D:5F:9C:F1:94:E5:CB:BF:56:45
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1263
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GUUC33hMXSDc4m1fnPGU5cu_VkU.roa
Signing time:             Tue 03 Feb 2026 03:21:33 +0000
ROA not before:           Tue 03 Feb 2026 03:21:33 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        203.68.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4707 (0x1263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:21:33 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=194502DF784C5D20DCE26D5F9CF194E5CBBF5645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:10:0e:ee:65:ac:26:72:56:ba:2f:90:5a:
                    a4:48:e3:02:50:77:b7:69:28:1d:a0:66:a9:93:ec:
                    ef:6a:0c:2b:5e:ed:5a:b7:66:db:fb:9a:48:ed:79:
                    3d:ee:20:f6:7a:03:3f:36:cb:94:ce:dc:29:93:ee:
                    73:d9:05:b7:b0:e0:20:aa:60:76:c2:aa:f1:20:87:
                    53:f1:1d:8d:ce:a5:6d:cb:4e:80:aa:b7:a5:18:94:
                    76:ad:ae:48:dd:0a:ed:8a:7b:42:cc:25:8c:0f:3d:
                    36:79:8d:0c:89:30:5d:80:0a:9f:88:56:8b:64:ae:
                    f0:ab:0e:33:13:a8:be:db:47:8f:e4:22:98:4a:7a:
                    fc:8e:3b:74:1b:ad:c6:ad:7a:09:59:52:fb:d5:8a:
                    da:1b:ae:8b:38:0c:aa:f4:07:0e:91:c5:3a:fe:13:
                    e5:07:d1:db:f9:98:50:8d:be:98:66:81:f9:8c:5d:
                    06:db:dc:a1:47:9f:bb:f6:c4:7e:7f:9e:d1:c2:4e:
                    41:56:50:ad:a9:e9:f7:38:c4:d0:bd:0b:be:39:80:
                    c3:04:c1:e4:96:09:d1:d0:21:98:15:95:1d:5a:0f:
                    7d:84:63:60:14:48:c3:b4:71:c7:c1:ff:96:d5:8f:
                    b4:cb:e4:ac:89:4f:c3:d9:b0:f4:31:3f:fd:68:4c:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:45:02:DF:78:4C:5D:20:DC:E2:6D:5F:9C:F1:94:E5:CB:BF:56:45
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GUUC33hMXSDc4m1fnPGU5cu_VkU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:78:41:4b:d8:d1:0c:33:95:3d:82:b2:ee:f4:eb:38:26:ab:
         43:77:6a:ea:c1:e7:d4:67:d9:49:0d:fe:9c:f5:1d:7a:5c:f3:
         18:0b:cb:77:5f:4c:25:c6:c1:9a:89:fd:00:4a:0b:a8:6d:05:
         21:56:7d:cf:3e:3e:6f:ee:9a:1e:95:af:23:e4:24:61:54:df:
         5f:70:a1:ab:f9:d1:4e:63:72:53:51:b5:43:53:84:c8:b4:80:
         10:4d:24:91:92:2f:d8:82:3f:19:da:45:36:bd:e6:0b:f9:47:
         45:1e:33:3c:c0:65:0a:78:bf:ba:14:2f:7f:5e:5e:c6:0b:21:
         11:af:1f:62:95:76:87:6b:f9:0d:df:ca:20:19:dc:d1:03:49:
         de:8c:14:ed:a1:69:9f:09:5c:5c:a8:2b:9a:c2:59:09:04:38:
         66:8f:65:e0:2d:7c:63:8e:86:48:93:a7:f7:27:ad:f1:23:4b:
         cb:6b:45:7f:32:52:73:83:e4:db:9d:b2:60:42:16:ba:c3:50:
         1f:a6:b0:0f:76:f1:59:95:f0:59:9f:f2:ec:ea:e9:f7:b1:3f:
         1b:0a:97:93:b8:9a:86:f1:82:02:88:27:92:66:e4:e5:73:d6:
         d8:ff:70:1b:71:e0:71:0f:d1:76:67:bc:aa:6a:2d:ef:4a:d6:
         ee:73:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:57 2026 by rpki-client