This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/GzE6Z2qJ4pKxWfdTcAxQKmDceAI.roa
File:                     GzE6Z2qJ4pKxWfdTcAxQKmDceAI.roa (raw, json)
Hash identifier:          Z4BC0ydxhQQJljTOJwz27E/W5rRg2nOirEek/zUZLtU=
Subject key identifier:   1B:31:3A:67:6A:89:E2:92:B1:59:F7:53:70:0C:50:2A:60:DC:78:02
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1219
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GzE6Z2qJ4pKxWfdTcAxQKmDceAI.roa
Signing time:             Tue 03 Feb 2026 02:57:06 +0000
ROA not before:           Tue 03 Feb 2026 02:57:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        210.70.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4633 (0x1219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:57:06 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1B313A676A89E292B159F753700C502A60DC7802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5d:2e:07:56:36:c0:c1:f5:e9:e5:f3:0e:0f:
                    7e:bb:6a:f9:39:52:73:fd:6a:89:0e:52:2c:40:95:
                    fa:67:ca:ee:85:09:58:f3:a1:71:62:61:2a:19:ed:
                    cf:87:d9:a0:97:6e:99:a6:4b:86:f5:8e:e8:3e:8c:
                    c0:da:0d:18:dc:ce:3a:cb:ad:ba:00:dd:f3:ec:c0:
                    3c:60:22:b2:01:88:35:ba:5b:22:b4:99:de:d7:db:
                    65:77:90:2e:d9:4e:f0:79:78:c0:d8:d3:08:0c:88:
                    a4:d5:8f:a0:bd:49:49:b0:62:0f:58:78:91:b4:3f:
                    0f:f9:6d:c2:fa:b2:3b:4a:20:81:5d:3a:d1:09:a1:
                    d5:95:c9:11:cd:87:d5:3e:4c:a6:f2:f9:f5:ca:2e:
                    0b:4b:93:79:76:a4:95:3e:04:f4:d6:44:ca:3a:ae:
                    90:6e:cc:d4:3a:9c:1a:14:27:c5:e0:b0:a2:62:c6:
                    67:62:db:55:c8:60:c6:9e:6b:08:ef:53:3d:54:d0:
                    f4:07:cd:f5:83:dc:48:4e:ce:f1:e4:5f:68:60:1b:
                    03:54:d0:ba:9e:52:ec:1f:9b:fd:a3:cc:3c:d1:80:
                    91:c7:9c:7d:04:5e:9f:cc:bf:13:27:a5:b5:60:d4:
                    48:d6:fa:ac:dd:71:aa:47:1c:d3:70:bc:d2:b1:fe:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:31:3A:67:6A:89:E2:92:B1:59:F7:53:70:0C:50:2A:60:DC:78:02
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GzE6Z2qJ4pKxWfdTcAxQKmDceAI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:2d:10:a8:a7:af:46:82:93:c9:5c:68:81:ce:0f:73:9e:
         2b:55:fb:3f:b6:15:75:a4:e8:b0:6b:f1:9e:08:b2:97:ee:b1:
         16:2a:f7:68:aa:55:2d:05:ff:2f:56:c6:ca:30:7e:7d:0d:64:
         7a:0c:d6:6e:38:68:b9:42:04:b9:7f:5f:94:b5:08:5d:af:a2:
         96:9d:b9:83:fb:15:35:ee:e0:c8:dd:33:07:f6:84:ac:8b:de:
         f4:27:df:7b:b1:c9:e2:49:e8:71:fe:97:bc:1c:96:08:98:ff:
         99:61:b6:96:8d:f6:53:a7:a2:ff:bd:91:0b:d1:b6:14:78:d6:
         51:d0:ea:b8:a9:67:01:6e:85:7a:45:4b:ef:2a:ae:9e:44:80:
         d0:c0:80:71:78:f8:92:1d:cf:61:ec:88:fb:ba:8a:01:f3:21:
         8a:66:08:cd:d8:a4:ff:68:f9:b1:02:de:8c:29:b7:17:5d:a4:
         e3:b6:6b:35:e1:6b:52:14:51:f9:79:53:18:4e:03:e9:a7:93:
         4c:26:28:3c:8b:34:b9:d7:7a:54:84:55:e5:0f:b6:43:ac:ff:
         ef:d1:01:ca:5d:04:27:cc:17:cd:c9:6c:f1:01:ef:ee:f1:9e:
         19:32:3d:cf:78:dc:01:78:1f:5c:ed:2b:0d:e7:88:80:bf:fc:
         55:8c:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:56 2026 by rpki-client