This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/J9lzMvV0RWutitFXCpFy2LLQVVM.roa
File:                     J9lzMvV0RWutitFXCpFy2LLQVVM.roa (raw, json)
Hash identifier:          ciBwRUpm1WbijJuftSzJnyj4sCw/noxpFU2af0EGKyQ=
Subject key identifier:   27:D9:73:32:F5:74:45:6B:AD:8A:D1:57:0A:91:72:D8:B2:D0:55:53
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1296
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/J9lzMvV0RWutitFXCpFy2LLQVVM.roa
Signing time:             Tue 03 Feb 2026 08:46:34 +0000
ROA not before:           Tue 03 Feb 2026 08:46:34 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.64.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4758 (0x1296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:46:34 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=27D97332F574456BAD8AD1570A9172D8B2D05553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:de:a1:8f:e2:52:5c:5f:5a:5c:01:13:08:
                    7d:82:f8:1a:28:61:3f:61:01:27:d6:2c:ca:41:d8:
                    42:6d:92:cb:d0:1c:a9:de:2c:a0:0b:1a:33:11:ac:
                    a5:01:76:08:c3:3a:97:32:46:8b:28:09:be:58:e4:
                    a1:7b:e9:5b:8c:ef:d7:69:e6:a5:a6:16:ba:4a:21:
                    30:ad:b7:bf:1e:1f:48:36:f7:06:38:37:7a:88:9f:
                    0f:51:bb:30:de:cb:4d:2d:ff:05:52:89:7c:12:5b:
                    7f:73:3e:19:c8:56:6e:f0:1a:b6:2d:dc:1b:37:75:
                    c4:76:bc:2b:60:3b:ff:5e:35:30:df:f6:0d:bf:73:
                    c3:1d:8c:3a:8e:66:77:0c:54:5b:62:fc:56:ac:19:
                    42:df:b6:2b:65:c4:9c:60:cf:53:f1:ee:d7:48:7b:
                    f2:82:03:ab:1e:dc:04:ba:a9:81:e0:0f:05:2a:ca:
                    fb:a0:07:9d:bb:2f:3f:f7:c0:33:71:2e:7f:e4:91:
                    06:1d:e7:2f:53:29:f2:f1:ae:70:49:94:58:96:62:
                    fe:92:9c:0d:72:fb:56:e0:5c:4e:6b:a0:ef:12:61:
                    fa:c6:e9:c0:23:7a:74:c2:e4:48:3e:8b:a8:5c:8b:
                    9e:fd:bf:1b:80:bb:5f:ad:19:85:8d:4f:d2:02:5e:
                    71:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D9:73:32:F5:74:45:6B:AD:8A:D1:57:0A:91:72:D8:B2:D0:55:53
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/J9lzMvV0RWutitFXCpFy2LLQVVM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ec:88:ce:ca:4f:f3:70:e8:9f:af:e4:c8:7e:05:36:7f:4f:
         cf:a1:66:20:5a:96:bb:02:b4:66:bb:f9:43:a6:bf:99:78:3e:
         a0:ae:c3:f5:51:25:9e:ed:58:87:06:6f:c4:67:9c:6a:af:44:
         dd:41:dd:93:43:83:61:2f:42:e2:a9:06:b1:94:d0:c0:8c:7f:
         47:0c:ee:b0:aa:7f:0f:cd:9a:8d:d7:6f:9c:de:40:3a:91:e4:
         23:c7:aa:b6:91:23:67:24:d1:41:ae:e4:12:2f:3b:f2:89:33:
         a3:c6:1f:2a:c6:8f:03:1b:2f:75:b3:f5:2c:d0:86:76:63:8f:
         af:37:74:40:9b:fa:a7:6c:2c:c1:ce:7d:25:d1:96:1a:d9:55:
         cc:9b:56:78:7d:13:d8:e0:27:1f:c0:bd:17:e1:b6:b6:0d:8b:
         6e:bf:8d:ff:84:ef:5e:10:61:2d:70:5c:f9:4d:29:0d:89:34:
         03:51:b8:89:db:81:1f:a0:68:6d:e3:5d:91:3a:2f:ff:04:3b:
         79:4d:71:72:2c:8a:0f:49:b2:4d:59:0c:7c:e1:9e:96:c4:12:
         b8:8f:85:73:61:a2:26:a3:27:56:f0:7e:dc:a5:af:58:cc:0f:
         ae:ad:6a:71:9f:ca:a3:73:75:da:12:81:3e:f0:7d:46:6e:4c:
         40:25:d1:ec
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
ODQ2MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI3RDk3MzMyRjU3NDQ1
NkJBRDhBRDE1NzBBOTE3MkQ4QjJEMDU1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNB96hj+JSXF9aXAETCH2C+BooYT9hASfWLMpB2EJtksvQHKne
LKALGjMRrKUBdgjDOpcyRosoCb5Y5KF76VuM79dp5qWmFrpKITCtt78eH0g29wY4
N3qInw9RuzDey00t/wVSiXwSW39zPhnIVm7wGrYt3Bs3dcR2vCtgO/9eNTDf9g2/
c8MdjDqOZncMVFti/FasGULftitlxJxgz1Px7tdIe/KCA6se3AS6qYHgDwUqyvug
B527Lz/3wDNxLn/kkQYd5y9TKfLxrnBJlFiWYv6SnA1y+1bgXE5roO8SYfrG6cAj
enTC5Eg+i6hci579vxuAu1+tGYWNT9ICXnFvAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUJ9lzMvV0RWutitFXCpFy2LLQVVMwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9KOWx6TXZWMFJXdXRpdEZYQ3BG
eTJMTFFWVk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0A1
MA0GCSqGSIb3DQEBCwUAA4IBAQA47IjOyk/zcOifr+TIfgU2f0/PoWYgWpa7ArRm
u/lDpr+ZeD6grsP1USWe7ViHBm/EZ5xqr0TdQd2TQ4NhL0LiqQaxlNDAjH9HDO6w
qn8PzZqN12+c3kA6keQjx6q2kSNnJNFBruQSLzvyiTOjxh8qxo8DGy91s/Us0IZ2
Y4+vN3RAm/qnbCzBzn0l0ZYa2VXMm1Z4fRPY4CcfwL0X4ba2DYtuv43/hO9eEGEt
cFz5TSkNiTQDUbiJ24EfoGht412ROi//BDt5TXFyLIoPSbJNWQx84Z6WxBK4j4Vz
YaImoydW8H7cpa9YzA+urWpxn8qjc3XaEoE+8H1GbkxAJdHs
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:55 2026 by rpki-client