This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/INH8KTKC8gPvLuLtYx_rNA4_MLw.roa
File:                     INH8KTKC8gPvLuLtYx_rNA4_MLw.roa (raw, json)
Hash identifier:          Tvt0M0b7aiTrXZ+t+Y4RdRXhoScXAwo/AyfWsjQM2aQ=
Subject key identifier:   20:D1:FC:29:32:82:F2:03:EF:2E:E2:ED:63:1F:EB:34:0E:3F:30:BC
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1095
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/INH8KTKC8gPvLuLtYx_rNA4_MLw.roa
Signing time:             Tue 03 Feb 2026 01:54:48 +0000
ROA not before:           Tue 03 Feb 2026 01:54:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        192.192.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4245 (0x1095)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 01:54:48 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=20D1FC293282F203EF2EE2ED631FEB340E3F30BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:60:56:7f:ff:af:16:24:81:43:b2:e6:b9:
                    15:e2:56:aa:4b:b6:e3:24:49:e1:0c:6c:15:2f:67:
                    bd:de:f1:a7:8f:1f:84:9b:29:04:81:fb:58:f3:5f:
                    41:a2:bb:6f:b0:c4:2f:91:b3:6e:70:aa:70:71:ee:
                    eb:6e:fa:a1:e1:79:1f:f0:c2:0a:ab:ce:d3:6c:2c:
                    33:27:a6:72:7f:f2:22:99:a2:30:6d:a6:87:f5:97:
                    ad:5a:e8:61:08:c6:a0:3f:b1:26:5d:7d:cb:a0:6e:
                    e5:c3:93:6a:2d:66:90:65:e1:3c:c9:b0:82:51:43:
                    85:5c:13:15:fc:64:68:ee:7c:27:c1:78:44:47:24:
                    d2:06:22:d6:27:2e:8d:cd:73:3f:97:41:c3:0e:b7:
                    e6:bf:1a:f8:ca:5d:76:f0:16:6d:e5:94:4d:e6:39:
                    ac:e9:e1:0a:3d:8a:df:29:1a:56:dc:93:20:4b:75:
                    6f:18:da:69:a0:28:c2:df:81:47:e8:24:5b:a0:fd:
                    f1:f1:e6:5b:b5:e8:73:bb:2a:f8:27:c3:35:a2:1c:
                    fd:cb:12:74:e9:ce:e6:e4:cf:d5:b6:2d:3a:09:c8:
                    e5:fc:dd:0f:47:17:2c:25:17:fe:04:c2:da:9a:d9:
                    07:cc:bc:0c:19:c4:96:e6:c1:bd:72:40:21:dd:1b:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D1:FC:29:32:82:F2:03:EF:2E:E2:ED:63:1F:EB:34:0E:3F:30:BC
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/INH8KTKC8gPvLuLtYx_rNA4_MLw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:b9:4b:68:1c:4f:cc:28:3a:ab:c0:cc:76:a5:5e:d6:8c:a2:
         e5:3c:a1:eb:60:bc:ec:be:d1:b6:2c:f9:a9:91:8d:1d:33:cc:
         6b:8e:39:09:ba:80:09:43:b6:ae:55:a8:cd:7a:d3:7d:bd:77:
         3c:72:f8:b5:28:ea:6c:b2:4a:83:fb:05:b6:ab:4a:41:cc:38:
         69:60:3b:ad:c6:ed:98:95:5c:23:d0:52:37:bd:ae:3a:08:29:
         d8:0c:06:67:a1:cd:57:b0:d3:d7:20:c3:e4:dd:84:52:2a:50:
         3a:34:d5:2c:5b:aa:52:13:1f:00:e9:1c:a6:07:06:cd:a1:00:
         db:7f:fe:20:5d:0c:7b:4d:82:45:b9:c5:6b:71:71:0f:53:a5:
         e5:2a:5d:69:e0:5c:4a:b7:17:d9:e8:26:26:22:c6:a8:1a:54:
         41:16:48:3a:27:b5:0c:34:eb:f1:58:5a:84:cc:a8:cb:e8:a0:
         3c:7f:6a:dd:72:50:9b:68:e2:6e:51:43:f5:02:b6:c3:4b:0f:
         33:15:76:41:9c:6e:f6:3a:c5:86:74:46:2f:de:09:08:fa:f9:
         1c:5d:a8:7f:e8:75:32:21:c1:16:34:f9:3b:12:b5:b3:3b:8a:
         ac:09:36:7d:6d:f3:c4:12:25:17:9b:fb:ab:f2:b1:b8:7e:26:
         b3:8f:0e:76
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNjAyMDMw
MTU0NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIwRDFGQzI5MzI4MkYy
MDNFRjJFRTJFRDYzMUZFQjM0MEUzRjMwQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1oGBWf/+vFiSBQ7LmuRXiVqpLtuMkSeEMbBUvZ73e8aePH4Sb
KQSB+1jzX0Giu2+wxC+Rs25wqnBx7utu+qHheR/wwgqrztNsLDMnpnJ/8iKZojBt
pof1l61a6GEIxqA/sSZdfcugbuXDk2otZpBl4TzJsIJRQ4VcExX8ZGjufCfBeERH
JNIGItYnLo3Ncz+XQcMOt+a/GvjKXXbwFm3llE3mOazp4Qo9it8pGlbckyBLdW8Y
2mmgKMLfgUfoJFug/fHx5lu16HO7KvgnwzWiHP3LEnTpzubkz9W2LToJyOX83Q9H
FywlF/4Ewtqa2QfMvAwZxJbmwb1yQCHdGzu1AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUINH8KTKC8gPvLuLtYx/rNA4/MLwwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9JTkg4S1RLQzhnUHZMdUx0WXhf
ck5BNF9NTHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMCA
MA0GCSqGSIb3DQEBCwUAA4IBAQChuUtoHE/MKDqrwMx2pV7WjKLlPKHrYLzsvtG2
LPmpkY0dM8xrjjkJuoAJQ7auVajNetN9vXc8cvi1KOpsskqD+wW2q0pBzDhpYDut
xu2YlVwj0FI3va46CCnYDAZnoc1XsNPXIMPk3YRSKlA6NNUsW6pSEx8A6RymBwbN
oQDbf/4gXQx7TYJFucVrcXEPU6XlKl1p4FxKtxfZ6CYmIsaoGlRBFkg6J7UMNOvx
WFqEzKjL6KA8f2rdclCbaOJuUUP1ArbDSw8zFXZBnG72OsWGdEYv3gkI+vkcXah/
6HUyIcEWNPk7ErWzO4qsCTZ9bfPEEiUXm/ur8rG4fiazjw52
-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:52 2026 by rpki-client