This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/GwDcy0myjE0SYEvHtn247l-uxs8.roa
File:                     GwDcy0myjE0SYEvHtn247l-uxs8.roa (raw, json)
Hash identifier:          5+3DWzi4lGns8EnEnmCR4GLXmxBYJfZMjk7oaktVM58=
Subject key identifier:   1B:00:DC:CB:49:B2:8C:4D:12:60:4B:C7:B6:7D:B8:EE:5F:AE:C6:CF
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12B2
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GwDcy0myjE0SYEvHtn247l-uxs8.roa
Signing time:             Tue 03 Feb 2026 08:52:07 +0000
ROA not before:           Tue 03 Feb 2026 08:52:07 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.68.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4786 (0x12b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:52:07 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1B00DCCB49B28C4D12604BC7B67DB8EE5FAEC6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:7c:84:5a:dc:9d:b2:c3:ec:e2:67:5c:4f:
                    38:3c:51:c2:34:bf:d5:4c:9c:c0:1c:89:93:ea:b9:
                    ea:98:91:44:22:5b:f7:4f:e1:d3:9a:1b:65:55:95:
                    8c:aa:df:07:5c:b7:b3:da:83:90:b3:2e:d7:c7:1f:
                    53:35:56:cc:94:59:db:c4:d7:af:ec:a3:b2:65:9e:
                    ae:df:9c:ec:48:21:1f:7c:b1:3b:0d:e2:40:82:c2:
                    19:03:9a:69:c0:47:a5:ee:53:60:43:4d:4b:c6:18:
                    b0:c1:e1:2d:f8:10:75:1b:75:66:d5:ca:c8:cf:31:
                    6e:50:ba:a0:e6:77:f9:52:16:f3:48:50:af:eb:24:
                    3b:6a:1c:3d:83:0c:1d:de:a5:87:16:22:22:23:b3:
                    bd:ad:3b:0b:d2:02:ed:d0:d4:c5:4b:ca:6f:1b:be:
                    19:8b:e5:7b:05:ce:d0:c7:64:41:78:ee:da:2f:69:
                    26:ff:c2:dd:a2:d9:54:ab:e9:c2:57:8f:e4:16:31:
                    3a:2e:5e:fa:bc:57:22:70:17:f2:2a:2b:8f:06:c2:
                    51:c7:cb:12:ed:0f:91:02:48:a6:a5:c9:61:6c:ba:
                    1e:7f:21:79:70:1b:2c:fe:f0:22:d2:94:d5:09:f7:
                    d6:be:e7:a6:d4:6a:09:7c:81:46:a3:b3:e7:eb:2f:
                    52:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:00:DC:CB:49:B2:8C:4D:12:60:4B:C7:B6:7D:B8:EE:5F:AE:C6:CF
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GwDcy0myjE0SYEvHtn247l-uxs8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:70:d5:b8:b4:1c:b7:d9:79:30:0d:3f:28:8b:38:6a:25:00:
         78:68:48:1a:1c:24:12:61:14:42:af:b6:fb:81:09:2f:79:8a:
         1a:a4:f7:c6:17:7d:ed:41:8f:10:73:cf:e1:1a:5e:c5:35:f5:
         83:b5:67:33:e3:bf:29:94:8a:66:fe:da:99:f5:d6:86:92:fa:
         5b:81:1b:3f:8d:66:46:eb:16:16:96:bd:98:a9:ad:67:0e:a0:
         2f:d9:f3:3b:de:79:72:7d:1a:91:6f:d1:90:9b:8d:97:e8:d3:
         a5:3f:51:50:7b:ed:8b:c1:6f:70:20:43:a7:f8:3e:d3:f1:b0:
         1a:04:13:44:80:ab:1a:44:f1:f5:16:c0:b4:ec:50:2e:ba:67:
         81:90:b0:be:07:9b:af:2f:b2:31:29:4c:6e:90:cb:f0:16:0f:
         24:68:ef:ff:5d:9e:19:ec:53:68:d5:b7:d9:bb:a9:fd:d1:99:
         0b:ae:31:ed:2a:24:63:60:1a:6d:94:c3:8a:dd:49:7b:dc:86:
         a3:68:1e:b3:26:1d:14:03:96:3c:6e:69:c7:3e:b9:a3:40:5b:
         5b:5e:8d:b1:2b:66:8f:0b:32:92:03:05:8c:f0:b3:cf:b2:56:
         87:54:2d:e6:d7:94:c1:0a:7f:23:97:f3:85:08:17:b0:d6:a9:
         0e:86:08:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:28 2026 by rpki-client