This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/JWz6agcK5zL6X3FsG5W0J47ZR-M.roa
File:                     JWz6agcK5zL6X3FsG5W0J47ZR-M.roa (raw, json)
Hash identifier:          jAZOwWRtj3mKcNyU7qZsZI8WGj1xsLLzlIDM5Jcb+V4=
Subject key identifier:   25:6C:FA:6A:07:0A:E7:32:FA:5F:71:6C:1B:95:B4:27:8E:D9:47:E3
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11D5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/JWz6agcK5zL6X3FsG5W0J47ZR-M.roa
Signing time:             Tue 03 Feb 2026 02:41:11 +0000
ROA not before:           Tue 03 Feb 2026 02:41:11 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        203.64.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4565 (0x11d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:41:11 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=256CFA6A070AE732FA5F716C1B95B4278ED947E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:72:bd:2f:52:01:b8:0b:52:86:4b:10:b2:
                    43:4c:8b:96:48:3e:bd:4a:e5:b3:82:cc:82:9e:fd:
                    05:73:5f:60:8e:eb:80:b1:1d:fb:68:d2:3d:4e:e8:
                    16:73:2b:ff:a6:6c:de:ca:ee:4a:3c:a3:fe:db:ae:
                    25:c6:dd:9d:e6:c4:e6:f7:03:db:7b:1b:3a:cd:98:
                    96:6e:e1:4e:5e:ff:03:28:f8:16:e5:47:01:2a:95:
                    c7:44:bd:7a:1c:0b:3f:4e:ea:a1:86:fe:a3:41:a8:
                    74:07:79:ff:18:40:ef:92:11:33:10:bd:cc:a6:20:
                    ed:4e:52:c2:07:c1:07:9d:06:80:0e:35:51:ca:4a:
                    d8:6a:a2:2b:64:f3:e8:7a:53:8e:d8:29:d1:8c:50:
                    80:95:8a:c2:ea:d2:e2:08:5d:8e:b7:aa:49:df:f6:
                    65:db:9c:3d:91:63:e9:99:cc:78:60:26:af:c6:ec:
                    16:f0:e4:43:c5:c8:53:aa:6f:98:98:88:71:e4:28:
                    ed:ff:dc:07:6c:2c:b1:4b:d0:35:d5:6f:91:c2:af:
                    e0:5a:fd:a7:29:73:b7:5d:03:b7:fe:f5:3b:ff:96:
                    dd:f7:e7:50:48:39:68:6b:f3:56:0b:9b:68:7a:6f:
                    81:6d:68:9f:89:14:84:8b:dd:cd:9a:d9:d1:4a:bf:
                    d1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:FA:6A:07:0A:E7:32:FA:5F:71:6C:1B:95:B4:27:8E:D9:47:E3
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/JWz6agcK5zL6X3FsG5W0J47ZR-M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:75:bc:b3:83:f3:b0:08:3a:44:31:26:3e:2d:28:3c:6a:
         c5:a4:88:11:f9:27:8f:bc:ae:d2:44:6e:8a:4f:3d:10:41:cc:
         50:3c:ca:13:e7:0b:6f:b8:c9:5f:b5:6c:b6:af:4a:e3:45:e4:
         9c:7c:26:40:a6:fa:4f:b5:67:94:a1:e3:d1:8d:28:e0:15:9b:
         c1:0e:95:f6:9a:d5:44:ee:37:b1:ef:a6:cc:69:7f:cb:a5:e4:
         09:32:8f:62:41:3d:04:0b:48:41:7b:8b:78:f7:13:c1:1b:1b:
         9a:20:b5:a6:38:5a:f9:9b:00:bc:1d:3c:28:fb:7c:b5:88:1a:
         02:90:79:31:27:2e:77:e6:a6:07:9f:51:80:7d:d4:d5:eb:29:
         08:cd:05:f7:72:36:d8:a3:c2:05:2f:71:97:d0:45:bf:e1:a0:
         11:32:96:68:eb:95:aa:48:ef:c9:76:23:82:21:46:55:c0:18:
         36:8f:c7:46:e2:5a:83:f2:1d:a9:fc:1e:f2:9b:7c:19:22:d2:
         7f:5a:a5:e9:06:97:e0:09:ec:79:89:3c:71:3f:eb:0c:fd:de:
         a6:aa:97:7c:51:2e:db:8b:75:6f:9a:49:8f:4b:20:d8:c4:eb:
         c3:1c:9d:00:be:53:0e:35:fb:7d:c4:46:14:8c:4a:5f:af:c2:
         5c:34:17:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:57 2026 by rpki-client