This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Ip2c_iUNOBxHlNC2T8k2p94JssE.roa
File:                     Ip2c_iUNOBxHlNC2T8k2p94JssE.roa (raw, json)
Hash identifier:          T1Pyl8VuEqqZU4pbYed2dSn+ZDp4lybWZsqIboCUqpM=
Subject key identifier:   22:9D:9C:FE:25:0D:38:1C:47:94:D0:B6:4F:C9:36:A7:DE:09:B2:C1
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       107C
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Ip2c_iUNOBxHlNC2T8k2p94JssE.roa
Signing time:             Tue 03 Feb 2026 01:49:50 +0000
ROA not before:           Tue 03 Feb 2026 01:49:50 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        192.83.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4220 (0x107c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 01:49:50 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=229D9CFE250D381C4794D0B64FC936A7DE09B2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:0d:55:62:1d:bb:1a:dc:04:03:60:93:f4:
                    d7:c3:38:f9:92:42:04:57:1c:2c:ee:d3:8d:2a:51:
                    00:96:c5:84:86:97:c2:10:9c:81:2a:48:28:92:3a:
                    a2:46:4f:fb:16:2e:7f:d1:d2:9f:79:23:df:ba:44:
                    f1:6a:64:d0:33:2a:20:98:cd:95:bc:88:9a:98:fe:
                    a4:70:df:ae:c8:a8:48:05:19:72:89:65:f5:dd:86:
                    2f:e0:f3:2b:2a:67:33:3d:0c:55:f8:17:b0:51:55:
                    63:f7:8b:fa:2b:39:2b:1e:60:f5:a0:90:3f:f2:29:
                    99:8c:cc:71:f0:ac:d5:08:bc:8b:75:bd:39:08:f5:
                    58:2c:ae:6a:5d:a1:51:08:93:3d:15:c7:4b:9e:31:
                    d1:6b:20:97:31:96:7a:87:62:ce:a9:20:98:c2:46:
                    aa:8e:f3:36:93:ca:fc:13:8b:ea:e7:da:e7:c4:2d:
                    28:ac:25:0a:9e:76:30:83:09:08:50:db:bc:b5:f0:
                    11:8e:14:15:31:f7:c1:cd:c4:d0:80:07:d1:c4:ce:
                    aa:69:ff:94:4c:cf:e0:1c:b8:d3:0d:e5:ec:af:16:
                    3a:e8:81:61:ef:e8:74:d6:d4:bc:ef:c1:df:92:3f:
                    26:4f:bb:3e:fe:c3:cd:3e:67:fc:54:48:d4:86:6d:
                    10:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9D:9C:FE:25:0D:38:1C:47:94:D0:B6:4F:C9:36:A7:DE:09:B2:C1
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Ip2c_iUNOBxHlNC2T8k2p94JssE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:5d:9a:ec:e5:d2:c6:af:2b:67:24:6b:6c:6e:91:a5:df:76:
         2f:0e:63:1c:55:6c:25:53:bb:7a:fd:0d:8b:d6:b3:3a:aa:86:
         b1:da:6d:90:61:02:60:16:be:d5:99:7b:7b:54:eb:fa:58:5c:
         96:0e:67:17:dd:7c:9d:53:57:84:be:ee:4f:81:e1:85:5f:45:
         8b:a2:6e:21:a2:65:ac:38:9d:0b:bc:6b:a8:18:38:85:0c:7d:
         0f:ca:99:f2:cc:e4:9b:32:20:95:41:80:24:48:0f:dc:78:42:
         07:55:5d:a2:4a:7c:07:41:9e:76:c5:ba:75:ee:f5:4e:68:51:
         26:27:e5:12:67:9d:7d:1b:01:d6:61:0f:6a:1d:ae:af:24:9e:
         27:f6:aa:49:c8:21:57:8f:0b:c8:b9:25:2b:9c:a7:3a:05:8b:
         e8:37:ca:ae:7f:3e:df:23:8b:1a:3a:82:da:41:0f:4a:ff:8b:
         01:fb:02:25:6d:27:61:09:35:f7:6b:72:ff:1e:07:76:9a:a0:
         0a:22:9e:ea:a9:61:a3:d9:78:0d:da:5c:0e:2f:21:7e:86:75:
         5e:69:16:22:b3:64:b0:95:3c:f6:12:69:e9:9f:4e:5c:09:6b:
         30:b9:99:4f:8b:d9:34:78:a7:9d:60:bd:be:5b:28:53:fc:0f:
         ea:f0:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:38:27 2026 by rpki-client