This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Jdfjgq0BYuzdytOxwJEUHiA4uSQ.roa
File:                     Jdfjgq0BYuzdytOxwJEUHiA4uSQ.roa (raw, json)
Hash identifier:          WOHW6JbVvL4LR9xj9tB8mRgdr7MsUC9uEBm2tYRaZ1k=
Subject key identifier:   25:D7:E3:82:AD:01:62:EC:DD:CA:D3:B1:C0:91:14:1E:20:38:B9:24
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11B8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Jdfjgq0BYuzdytOxwJEUHiA4uSQ.roa
Signing time:             Tue 03 Feb 2026 02:33:54 +0000
ROA not before:           Tue 03 Feb 2026 02:33:54 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        163.22.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4536 (0x11b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:33:54 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=25D7E382AD0162ECDDCAD3B1C091141E2038B924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:ee:40:cd:94:f9:c9:c9:43:d7:a0:26:69:
                    d3:be:9c:b3:8c:57:f6:45:90:89:78:72:2a:18:ba:
                    55:0e:80:7a:0f:e8:a8:f1:f2:18:6e:a5:f4:3f:22:
                    45:d2:2f:07:c8:8e:a4:04:bc:81:bf:f1:e5:e4:99:
                    5f:91:b8:96:e4:4b:65:8c:fe:13:7d:7f:b7:e9:0c:
                    d4:c8:14:65:c7:91:b8:68:bd:d2:1c:42:c1:61:7f:
                    48:31:df:d4:80:cc:a8:df:3c:68:f8:a3:ab:82:ec:
                    bc:ab:af:09:26:31:46:0f:78:0d:f8:27:91:d4:1a:
                    9f:b4:15:63:e3:f1:69:d6:3c:7c:33:ad:77:d4:f0:
                    a1:b7:ec:a2:93:36:0b:e2:d0:b7:b1:0b:15:f2:aa:
                    43:47:36:be:81:e6:ab:f4:76:dd:09:20:61:4a:f6:
                    fa:2f:21:1a:8c:2c:56:3c:7f:8c:d9:31:42:fd:25:
                    86:70:b0:78:37:2a:a5:21:16:c6:1e:e1:51:7a:91:
                    c1:ac:ea:8c:fb:16:cc:55:f2:61:51:5a:4e:bf:3b:
                    00:79:64:cb:7d:9f:ca:c6:26:ff:49:ae:5b:a8:e7:
                    3d:d6:1a:b9:04:6d:76:f3:4c:8b:57:8d:e3:12:fc:
                    52:21:3c:9c:7a:e0:46:b4:13:59:bc:34:44:e4:db:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D7:E3:82:AD:01:62:EC:DD:CA:D3:B1:C0:91:14:1E:20:38:B9:24
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Jdfjgq0BYuzdytOxwJEUHiA4uSQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.22.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:81:52:7a:12:50:e5:80:d1:73:f6:8d:c4:13:fd:c1:e9:
         b6:97:cc:60:31:ba:29:81:07:ba:0a:4a:e1:3e:18:6b:36:e0:
         46:65:e0:b4:8b:59:aa:da:16:07:48:d9:2f:41:a2:c2:59:55:
         ae:aa:b2:12:18:bb:e9:2c:12:b3:14:11:ad:30:2c:b2:c7:fc:
         46:9b:ad:e3:f1:16:20:5c:9f:7f:1c:b1:f7:bf:95:75:56:0c:
         65:95:fb:32:10:d1:f2:f0:61:b7:15:b6:be:ba:c9:e4:bd:c1:
         17:fd:2d:ad:4e:e4:50:f1:a0:3a:75:e5:a6:b2:cf:60:dd:6c:
         c3:32:52:b3:f5:10:e5:45:8a:23:91:7a:23:1d:82:d7:f1:2e:
         3b:06:49:c7:d9:10:40:a3:1f:dd:f8:f2:fe:f9:94:1a:12:db:
         5b:3c:0b:d6:2d:a5:87:bc:81:19:bc:64:1c:12:5d:0e:ce:a3:
         da:ac:d5:05:58:a9:5b:d7:11:46:50:a6:8f:a0:7e:23:df:22:
         71:37:46:95:33:e4:28:12:9e:a6:ce:60:7d:be:56:0e:e9:d1:
         cc:67:31:47:c5:ec:dd:af:c6:b2:be:93:a4:e4:5f:73:e7:9b:
         e2:e7:1d:46:8e:9a:ff:68:0f:fa:c1:07:de:12:7c:cc:3a:55:
         12:9e:83:cb
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MjMzNTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI1RDdFMzgyQUQwMTYy
RUNERENBRDNCMUMwOTExNDFFMjAzOEI5MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2tO5AzZT5yclD16AmadO+nLOMV/ZFkIl4cioYulUOgHoP6Kjx
8hhupfQ/IkXSLwfIjqQEvIG/8eXkmV+RuJbkS2WM/hN9f7fpDNTIFGXHkbhovdIc
QsFhf0gx39SAzKjfPGj4o6uC7LyrrwkmMUYPeA34J5HUGp+0FWPj8WnWPHwzrXfU
8KG37KKTNgvi0LexCxXyqkNHNr6B5qv0dt0JIGFK9vovIRqMLFY8f4zZMUL9JYZw
sHg3KqUhFsYe4VF6kcGs6oz7FsxV8mFRWk6/OwB5ZMt9n8rGJv9Jrluo5z3WGrkE
bXbzTItXjeMS/FIhPJx64Ea0E1m8NETk2zo5AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUJdfjgq0BYuzdytOxwJEUHiA4uSQwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9KZGZqZ3EwQll1emR5dE94d0pF
VUhpQTR1U1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoxYw
MA0GCSqGSIb3DQEBCwUAA4IBAQA+a4FSehJQ5YDRc/aNxBP9wem2l8xgMbopgQe6
CkrhPhhrNuBGZeC0i1mq2hYHSNkvQaLCWVWuqrISGLvpLBKzFBGtMCyyx/xGm63j
8RYgXJ9/HLH3v5V1VgxllfsyENHy8GG3Fba+usnkvcEX/S2tTuRQ8aA6deWmss9g
3WzDMlKz9RDlRYojkXojHYLX8S47BknH2RBAox/d+PL++ZQaEttbPAvWLaWHvIEZ
vGQcEl0OzqParNUFWKlb1xFGUKaPoH4j3yJxN0aVM+QoEp6mzmB9vlYO6dHMZzFH
xezdr8ayvpOk5F9z55vi5x1Gjpr/aA/6wQfeEnzMOlUSnoPL
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:31 2026 by rpki-client