This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/JXDik5HmJiZREXAaHu-7-IPC-Uw.roa
File:                     JXDik5HmJiZREXAaHu-7-IPC-Uw.roa (raw, json)
Hash identifier:          AV7cu87rnXIBNCyU2clk8gOq5iYtgTDh0CznPJoeaxY=
Subject key identifier:   25:70:E2:93:91:E6:26:26:51:11:70:1A:1E:EF:BB:F8:83:C2:F9:4C
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1338
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/JXDik5HmJiZREXAaHu-7-IPC-Uw.roa
Signing time:             Fri 06 Feb 2026 01:03:56 +0000
ROA not before:           Fri 06 Feb 2026 01:03:56 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.64.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4920 (0x1338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:03:56 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2570E29391E626265111701A1EEFBBF883C2F94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:7b:e9:a9:85:75:6b:52:de:1c:7b:fa:61:
                    a2:a1:b0:f1:a8:bf:14:73:5c:c2:ec:46:a3:a2:eb:
                    9e:11:72:da:7b:4b:a2:ef:69:0a:64:a2:e9:5c:11:
                    fc:1a:4b:65:55:56:5d:42:2d:d8:4f:b2:4a:29:7d:
                    91:30:00:6b:22:de:41:8f:6c:24:27:c4:21:bb:4d:
                    a9:bc:33:ea:10:ca:9f:55:46:d4:c1:be:49:c1:9e:
                    77:ed:9d:ad:49:7f:fa:5f:17:43:74:11:78:f3:69:
                    ca:db:6a:b7:30:86:a8:61:0e:7b:84:9e:fb:76:1f:
                    40:2e:e7:6b:f4:77:d4:79:6d:8b:7c:fe:7d:72:59:
                    c3:3b:dd:9e:36:2a:d3:08:0f:eb:a7:89:a7:97:10:
                    f2:1f:07:07:06:52:de:2e:99:0b:e1:38:62:d8:e6:
                    37:04:9f:66:92:33:4f:87:74:10:cf:6e:ea:d4:47:
                    7e:4b:43:dc:76:40:71:2e:f2:c7:be:4a:50:18:a0:
                    f9:29:97:04:47:82:30:e4:ec:ce:56:5a:65:12:65:
                    83:a5:64:c7:f4:33:de:cc:a5:d7:57:61:7d:49:84:
                    0d:e6:d6:df:74:41:1e:93:48:2f:fb:1a:64:49:a2:
                    a9:a7:ca:ca:8f:08:8d:e6:a3:71:7b:f3:ad:84:f7:
                    8b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:70:E2:93:91:E6:26:26:51:11:70:1A:1E:EF:BB:F8:83:C2:F9:4C
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/JXDik5HmJiZREXAaHu-7-IPC-Uw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c5:c2:5d:0c:5d:5a:9a:58:8e:6f:45:99:53:ad:3e:2d:36:
         38:28:da:3c:96:57:ed:10:be:81:99:b7:c7:9a:b0:e5:15:cb:
         0b:7c:11:9f:e2:48:88:cc:ef:34:9a:60:e0:df:e3:e2:96:31:
         14:0a:f5:e6:21:6a:9e:7e:cd:e5:df:c5:3e:94:5e:50:ff:ca:
         07:11:58:28:9a:8e:a1:2d:7a:73:e4:4b:20:22:85:0b:1c:e1:
         8c:21:7f:9f:45:e3:d5:a1:56:af:14:c2:e6:97:81:e6:bb:0c:
         e3:a2:56:3b:7d:9b:4e:a3:f2:eb:c0:ea:91:b1:b3:93:1f:33:
         21:7c:56:ba:93:73:8c:e0:af:f3:ad:b0:6a:b1:ab:e9:36:02:
         33:dd:67:29:df:3d:25:31:cf:e8:03:1b:a6:9f:bc:13:19:b8:
         00:28:6e:6a:b6:7d:c2:bd:dd:59:6f:34:28:47:1a:05:0a:6a:
         c1:c4:79:45:2e:fd:0c:a7:3a:51:42:2b:ed:7a:a7:32:f3:fc:
         7d:7a:9e:2a:51:29:51:d7:41:c0:18:97:be:0e:e3:eb:34:92:
         58:bc:aa:25:fa:55:c4:cc:78:ae:bf:5b:79:4f:ce:62:bd:10:
         db:02:81:8a:93:0c:84:e2:ec:db:c2:14:fc:44:eb:1c:58:71:
         e6:1e:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:31 2026 by rpki-client