This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/IhYsqAPcfr24ZzEWTI7gSHh3Hqg.roa
File:                     IhYsqAPcfr24ZzEWTI7gSHh3Hqg.roa (raw, json)
Hash identifier:          7UlGXfpFjXEMKFpSC1BRqdS4Pyx04s6jobChrhQCHGU=
Subject key identifier:   22:16:2C:A8:03:DC:7E:BD:B8:67:31:16:4C:8E:E0:48:78:77:1E:A8
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1372
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/IhYsqAPcfr24ZzEWTI7gSHh3Hqg.roa
Signing time:             Fri 06 Feb 2026 01:09:10 +0000
ROA not before:           Fri 06 Feb 2026 01:09:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.59.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4978 (0x1372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:09:10 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=22162CA803DC7EBDB86731164C8EE04878771EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:d3:54:99:6c:58:b0:96:96:02:d2:df:ae:
                    4e:13:0c:14:a7:4e:2a:0d:80:08:2e:ea:d6:c0:c7:
                    5e:c0:59:c7:67:24:46:c8:30:7f:fa:83:57:9b:88:
                    ac:0e:42:21:3c:a6:9c:bb:3b:22:10:61:21:02:75:
                    c9:08:c3:8e:3f:21:cf:80:99:9d:66:d8:b1:2c:ae:
                    e6:95:c6:22:1c:3b:c3:ae:76:c7:14:81:7d:16:79:
                    4e:d0:2f:ad:83:b5:ca:cb:c5:f0:34:6a:db:72:38:
                    98:dc:97:6b:9d:8a:35:a3:c2:fa:58:eb:0f:9f:40:
                    06:4b:e0:00:67:ac:2e:49:98:5b:e0:f6:33:7b:ff:
                    25:3c:54:6c:92:16:2c:94:d8:66:78:eb:ae:76:9f:
                    d6:5c:94:4a:42:b4:5c:db:8c:19:ac:ee:cf:37:7d:
                    43:fd:20:b9:7f:5b:56:23:9a:dc:56:68:41:79:ac:
                    16:81:61:79:d5:2e:83:9b:de:e6:78:5e:80:c7:43:
                    22:b2:0c:9a:57:17:16:2f:f9:c5:65:54:2a:f6:26:
                    cb:0b:51:33:88:79:6d:70:11:5d:d4:04:a4:1f:fa:
                    e7:97:16:ef:18:5e:3f:74:09:c9:b9:a2:41:04:bd:
                    59:67:80:3a:82:16:bb:14:ba:24:25:b0:cb:87:32:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:2C:A8:03:DC:7E:BD:B8:67:31:16:4C:8E:E0:48:78:77:1E:A8
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/IhYsqAPcfr24ZzEWTI7gSHh3Hqg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.59.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:93:24:18:d4:65:40:51:f2:18:9f:fc:30:3c:57:8c:aa:3f:
         60:ae:3c:be:2a:3c:06:c3:92:19:fa:b2:1a:1c:1e:ec:34:18:
         05:26:0e:cc:ce:ff:e7:ab:4b:73:46:3e:4e:78:e9:35:fa:95:
         7a:61:b6:6b:c4:68:93:9f:ae:7e:14:fc:49:74:95:79:f8:de:
         4d:f6:40:d7:20:f1:53:b0:14:bf:32:68:5a:b8:76:85:b9:25:
         f8:06:6c:4a:a0:2a:46:17:57:b9:4f:7f:e4:5a:5a:c9:4e:c7:
         d9:64:4c:51:73:b6:e6:11:c8:0f:cc:bc:58:55:56:65:4a:2b:
         be:c6:e3:72:5a:42:cc:7b:94:c6:3e:2b:7b:96:eb:db:d8:f5:
         0d:fd:b2:7a:b4:5e:a6:6b:26:32:2c:07:8c:94:ff:c6:5f:6b:
         a0:1e:41:ff:24:3d:ef:fc:74:5e:f5:a5:38:41:da:30:9a:56:
         09:c8:18:a6:3b:2b:b3:48:c9:19:44:63:7b:04:3d:5a:e2:2a:
         30:0d:13:cf:fd:18:a3:ef:a5:79:c6:43:ed:03:e3:81:f2:2c:
         99:08:1e:e4:e6:d3:2c:88:97:9d:76:ac:4c:31:fe:f5:8f:7d:
         5b:43:5a:2e:78:15:d8:b5:7a:8b:47:6f:01:ad:80:a9:f4:f7:
         50:cf:18:70
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICE3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDYw
MTA5MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyMTYyQ0E4MDNEQzdF
QkRCODY3MzExNjRDOEVFMDQ4Nzg3NzFFQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzHNNUmWxYsJaWAtLfrk4TDBSnTioNgAgu6tbAx17AWcdnJEbI
MH/6g1ebiKwOQiE8ppy7OyIQYSECdckIw44/Ic+AmZ1m2LEsruaVxiIcO8OudscU
gX0WeU7QL62DtcrLxfA0attyOJjcl2udijWjwvpY6w+fQAZL4ABnrC5JmFvg9jN7
/yU8VGySFiyU2GZ46652n9ZclEpCtFzbjBms7s83fUP9ILl/W1YjmtxWaEF5rBaB
YXnVLoOb3uZ4XoDHQyKyDJpXFxYv+cVlVCr2JssLUTOIeW1wEV3UBKQf+ueXFu8Y
Xj90Ccm5okEEvVlngDqCFrsUuiQlsMuHMqU/AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUIhYsqAPcfr24ZzEWTI7gSHh3HqgwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9JaFlzcUFQY2ZyMjRaekVXVEk3
Z1NIaDNIcWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0jsr
MA0GCSqGSIb3DQEBCwUAA4IBAQA3kyQY1GVAUfIYn/wwPFeMqj9grjy+KjwGw5IZ
+rIaHB7sNBgFJg7Mzv/nq0tzRj5OeOk1+pV6YbZrxGiTn65+FPxJdJV5+N5N9kDX
IPFTsBS/MmhauHaFuSX4BmxKoCpGF1e5T3/kWlrJTsfZZExRc7bmEcgPzLxYVVZl
Siu+xuNyWkLMe5TGPit7luvb2PUN/bJ6tF6mayYyLAeMlP/GX2ugHkH/JD3v/HRe
9aU4QdowmlYJyBimOyuzSMkZRGN7BD1a4iowDRPP/Rij76V5xkPtA+OB8iyZCB7k
5tMsiJeddqxMMf71j31bQ1oueBXYtXqLR28BrYCp9PdQzxhw
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:00 2026 by rpki-client