This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/JSe_YxgwYSZx2YCwaWgr7HBqvjY.roa
File:                     JSe_YxgwYSZx2YCwaWgr7HBqvjY.roa (raw, json)
Hash identifier:          4rR8+AOY+ixISLoB/OXTXnZSDCfKANQIo/uT8vSw9QA=
Subject key identifier:   25:27:BF:63:18:30:61:26:71:D9:80:B0:69:68:2B:EC:70:6A:BE:36
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1348
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/JSe_YxgwYSZx2YCwaWgr7HBqvjY.roa
Signing time:             Fri 06 Feb 2026 01:05:22 +0000
ROA not before:           Fri 06 Feb 2026 01:05:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.71.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4936 (0x1348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:05:22 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2527BF631830612671D980B069682BEC706ABE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:0b:1c:71:05:91:3d:37:b3:9a:de:f8:7f:
                    e6:72:12:f7:08:c2:b7:85:22:2c:4c:3f:e6:aa:dd:
                    72:75:a9:8e:24:10:a2:d0:df:2d:86:0d:a7:01:1e:
                    19:db:55:1c:b8:c7:da:ec:c0:cf:43:d8:b7:48:e8:
                    dc:51:93:4b:b1:ac:d4:f5:1c:6f:0c:a9:9e:5d:c3:
                    ef:7b:d5:a3:05:cd:df:49:5d:13:c1:68:fa:ea:fd:
                    8c:c0:77:bc:25:c2:73:79:64:15:5a:b2:7e:98:47:
                    cd:d8:a0:fe:53:20:52:a1:4f:ca:86:04:e5:68:b4:
                    71:59:6e:b7:8b:ea:8c:8a:a5:6b:47:97:1a:70:43:
                    76:bc:e1:0a:e6:2c:69:d6:b1:3d:d1:3a:28:86:51:
                    a4:b1:a1:08:8d:a7:c2:20:4f:85:ef:03:a7:4f:c5:
                    bc:73:f4:5a:9d:a9:d5:5b:50:a8:fe:fd:05:34:84:
                    37:b3:45:89:79:4f:c9:01:ab:ad:ba:52:48:18:5d:
                    d4:d1:bf:1e:d5:98:40:eb:05:8e:75:39:a3:f7:79:
                    34:ba:b7:d3:2f:10:95:36:4d:c5:31:c7:51:fd:e2:
                    49:ff:0f:49:db:1f:59:06:c5:2a:6c:ea:41:0d:65:
                    7c:5c:86:1a:8b:15:06:00:18:18:e4:84:8d:96:9a:
                    5b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:27:BF:63:18:30:61:26:71:D9:80:B0:69:68:2B:EC:70:6A:BE:36
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/JSe_YxgwYSZx2YCwaWgr7HBqvjY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:71:ae:92:14:10:9c:63:64:73:f8:d5:38:7b:77:be:1b:26:
         9f:71:66:e0:d9:8a:3d:5d:46:72:3f:11:2f:f9:de:44:43:28:
         ba:c4:13:d1:43:ac:fc:6d:68:27:ab:30:cf:ba:32:a8:5e:d6:
         73:d1:17:7d:07:9a:ba:72:97:25:8e:6d:67:e0:5f:be:7c:0c:
         2c:bd:7b:51:a2:f8:0f:37:02:41:fb:57:55:fd:45:36:c8:97:
         96:25:16:35:57:1d:f7:5f:98:98:32:a8:a4:46:91:f9:4e:72:
         42:15:00:79:d0:6f:94:12:6f:90:37:c6:aa:7b:8b:5b:27:08:
         a7:39:61:05:5d:5b:01:cf:38:fd:ca:a7:bb:3f:8f:d3:17:b7:
         3d:69:31:f8:d4:17:f6:2f:b9:e5:d0:ca:a3:30:ab:14:c1:6e:
         9b:37:ea:1d:8b:7c:56:6e:15:f0:0c:07:c8:c9:4d:2a:08:ac:
         ff:b1:f5:ef:36:66:98:ef:4e:9b:c4:7a:03:85:42:b3:f8:24:
         58:e3:e3:6c:86:11:85:9d:e8:55:66:b7:e1:df:41:9d:4e:37:
         58:90:d3:4e:5b:af:9e:a7:2c:a1:2b:92:e8:a8:53:cf:0f:c1:
         95:23:63:bc:47:c0:6e:66:e4:93:f4:69:e3:79:c2:be:bd:48:
         6a:2d:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:30 2026 by rpki-client