This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/I36xBx4xs3FogX-u_W2lZeyD7Fc.roa
File:                     I36xBx4xs3FogX-u_W2lZeyD7Fc.roa (raw, json)
Hash identifier:          eqYq//xEg622q0IN7cIUon+KreJ+XOC4+Qj5Gx5MKXk=
Subject key identifier:   23:7E:B1:07:1E:31:B3:71:68:81:7F:AE:FD:6D:A5:65:EC:83:EC:57
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       113B
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/I36xBx4xs3FogX-u_W2lZeyD7Fc.roa
Signing time:             Tue 03 Feb 2026 02:00:25 +0000
ROA not before:           Tue 03 Feb 2026 02:00:25 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.68.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4411 (0x113b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:00:25 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=237EB1071E31B37168817FAEFD6DA565EC83EC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:cd:5f:00:31:f0:8a:e8:da:69:74:a0:2d:
                    87:9b:0f:9a:10:f4:b8:43:d6:ba:83:cf:29:0b:01:
                    ef:0e:8c:53:8c:67:df:1c:5e:16:c5:19:12:73:f5:
                    ba:28:40:de:d4:2c:37:fa:f5:69:e2:c2:f8:ab:bf:
                    c2:df:0b:b6:15:e0:b1:56:33:7f:00:3e:85:d0:c8:
                    2f:a0:b3:93:8f:1e:a8:cf:8a:11:66:7b:a5:e5:dd:
                    fc:11:6b:d8:a4:22:b9:77:08:4b:10:d8:75:dc:23:
                    5c:bc:ec:fb:eb:d9:b6:44:d5:df:2d:7c:4a:5d:b8:
                    06:14:38:ec:76:af:33:b9:fa:c8:24:a3:1d:34:d0:
                    84:7c:fe:be:d4:78:86:06:01:c3:cc:3c:9b:d1:4b:
                    57:d9:ee:ab:96:e6:3e:58:99:3e:d2:92:aa:65:e1:
                    09:d4:21:36:76:21:d6:64:87:ff:d1:6c:e8:2a:b2:
                    7e:55:b9:d7:53:ef:72:88:eb:c1:8a:ad:23:81:7b:
                    81:98:f2:97:5d:89:9f:07:d9:30:86:27:8b:7f:68:
                    62:5f:42:a6:58:15:92:90:6f:4d:04:6d:00:f0:84:
                    13:75:dc:cb:0e:71:c2:be:37:ea:b5:d5:64:fe:87:
                    65:fa:a3:ab:a2:6b:07:f7:d3:5a:1c:b4:85:f1:63:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7E:B1:07:1E:31:B3:71:68:81:7F:AE:FD:6D:A5:65:EC:83:EC:57
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/I36xBx4xs3FogX-u_W2lZeyD7Fc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:81:4d:ad:4a:25:6f:c2:fc:8f:50:7a:37:fe:07:5d:c2:
         25:25:30:44:dd:d3:a3:ed:5b:47:91:73:fb:91:18:74:ca:66:
         a7:6e:95:e2:4a:c3:3f:96:f5:89:8c:75:fe:26:db:14:93:e6:
         c0:90:82:77:f5:2f:3c:58:a0:34:b0:8d:8b:55:8e:0e:85:07:
         18:25:eb:89:f6:cc:8c:96:3a:3b:e1:fd:3c:97:1b:ff:52:4e:
         9b:5d:3d:17:f0:e2:dd:11:14:75:52:52:a7:c1:69:b6:be:37:
         79:ee:c8:ef:98:35:b8:1e:44:57:d6:41:9e:92:58:0e:dc:7d:
         b7:74:68:09:d1:22:7b:4b:53:57:6e:f0:29:70:fb:4c:13:f4:
         cb:4f:58:ae:a3:03:0f:f6:b5:32:7a:fe:9c:8c:8c:85:02:a0:
         b0:14:a6:b2:63:9e:66:87:23:d3:3c:d0:a9:db:79:20:5a:72:
         f4:3f:05:02:32:14:d6:5b:26:f1:48:68:12:b4:5a:92:9e:2e:
         66:9b:89:03:d8:f4:ea:84:3d:eb:1e:fb:78:f7:f0:75:65:91:
         c5:c3:98:25:e2:9a:20:91:f5:2c:fc:00:ca:4d:41:c4:df:aa:
         33:d5:a7:df:0e:cd:56:5b:7e:71:d5:7c:20:f2:98:03:c6:8f:
         d2:26:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:59 2026 by rpki-client