This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/IM_XZin-rCXaABLLmfM-SVgLvGo.roa
File:                     IM_XZin-rCXaABLLmfM-SVgLvGo.roa (raw, json)
Hash identifier:          dQmo88k4b1MGYD8Ojae/YV5MToUQprsz9y8JfgosblA=
Subject key identifier:   20:CF:D7:66:29:FE:AC:25:DA:00:12:CB:99:F3:3E:49:58:0B:BC:6A
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1207
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/IM_XZin-rCXaABLLmfM-SVgLvGo.roa
Signing time:             Tue 03 Feb 2026 02:55:49 +0000
ROA not before:           Tue 03 Feb 2026 02:55:49 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        203.71.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4615 (0x1207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:55:49 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=20CFD76629FEAC25DA0012CB99F33E49580BBC6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:1d:07:ee:c2:d1:ec:6b:f1:58:fd:79:b8:
                    b7:7a:c5:8f:a0:b1:a5:2d:dd:ab:8f:0a:c6:89:00:
                    da:11:73:68:53:c1:4b:72:81:d6:11:dd:3a:86:97:
                    7c:60:56:28:af:06:f5:03:54:40:59:4c:1d:b0:55:
                    2c:b5:c7:6c:ad:ed:b0:90:23:44:96:75:78:2b:b5:
                    95:2d:c8:ef:0c:2a:0b:d0:17:36:6a:46:0d:38:f4:
                    d8:16:c6:13:dc:ec:b6:ba:06:cc:cd:eb:96:9b:08:
                    f8:c3:0c:5e:2a:7a:81:03:7b:ae:2d:f7:29:5a:cb:
                    3a:56:bb:d3:bc:56:5d:95:87:1b:20:20:c4:45:43:
                    e9:b2:68:cb:8f:b6:23:d9:3e:c3:b2:d1:71:41:91:
                    46:85:e7:4a:06:a2:1e:67:e5:29:85:25:9b:1a:91:
                    16:24:9d:40:f5:b7:86:db:de:42:db:de:22:b3:f3:
                    e6:77:4e:f8:48:fa:5d:67:79:66:99:e7:f7:3f:ea:
                    02:f6:c9:52:d6:0b:c1:97:a3:05:02:6f:64:2b:96:
                    eb:5d:d8:89:2a:b7:40:c3:4f:af:5e:30:54:f2:09:
                    ae:d5:d8:49:a0:c8:de:b6:3a:bb:7e:ec:5e:bf:76:
                    0f:94:08:0b:d7:d0:38:16:b1:bc:da:02:af:fe:99:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CF:D7:66:29:FE:AC:25:DA:00:12:CB:99:F3:3E:49:58:0B:BC:6A
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/IM_XZin-rCXaABLLmfM-SVgLvGo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:0a:fc:45:b5:27:d6:91:1e:ed:6e:a5:ea:57:7b:da:48:bf:
         1b:8d:63:35:0c:74:2f:ac:ee:5f:34:18:16:1c:a1:ad:bc:48:
         04:65:c6:ce:ea:c9:62:49:0c:1a:af:9b:1d:9f:ad:b9:c2:10:
         6e:a2:7c:0e:92:d5:ac:a4:8a:36:36:c9:0d:e7:c4:7b:44:82:
         2b:0a:c3:b3:a5:35:1f:bd:fc:16:3c:00:eb:1a:05:8e:4c:0d:
         e9:94:c5:9b:c4:36:92:39:04:cd:e0:e8:9d:4b:02:41:5b:22:
         18:a0:1b:0b:3b:9e:77:d5:9f:a5:12:dc:db:52:54:e2:bc:c5:
         a2:00:1f:52:d1:41:ed:68:57:e0:77:a1:36:d5:9e:0d:4e:59:
         19:c8:19:fd:da:b4:9d:a3:fb:f8:ad:42:6b:c5:54:dc:ce:07:
         27:a7:cc:5a:a6:bf:43:bf:3a:8f:a6:7a:8b:29:43:8b:f0:d0:
         48:34:d8:40:ed:71:e6:e0:c2:9d:37:34:8b:18:83:19:91:37:
         b4:72:8e:09:f5:32:37:65:53:35:4e:1d:6f:54:73:e8:28:ec:
         eb:d0:14:88:7e:a6:8a:9e:ea:c5:58:ed:af:f7:89:99:e1:4b:
         79:d2:a4:f3:75:80:50:8b:e0:e4:54:62:53:ec:50:c9:ac:f7:
         17:d0:37:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:54 2026 by rpki-client