This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/KizCKkJh0AjMl3kK1tYD9uA__js.roa
File:                     KizCKkJh0AjMl3kK1tYD9uA__js.roa (raw, json)
Hash identifier:          C4e5btY3v8XvS9mRgK2Kp0LDDV6Nemlgl3+UK9BUu+s=
Subject key identifier:   2A:2C:C2:2A:42:61:D0:08:CC:97:79:0A:D6:D6:03:F6:E0:3F:FE:3B
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       119D
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/KizCKkJh0AjMl3kK1tYD9uA__js.roa
Signing time:             Tue 03 Feb 2026 02:29:22 +0000
ROA not before:           Tue 03 Feb 2026 02:29:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        120.106.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4509 (0x119d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:29:22 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2A2CC22A4261D008CC97790AD6D603F6E03FFE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:18:73:80:f3:09:84:31:4c:1d:b5:9d:b2:
                    c5:d3:51:77:f6:fc:6e:62:0c:4a:11:88:83:3f:30:
                    b0:16:48:f2:32:82:23:a5:29:2f:9b:33:b2:ef:a2:
                    19:9b:c8:85:b0:3b:f2:a3:fa:51:c2:96:35:b8:af:
                    15:d5:15:cf:70:7c:ba:7f:1b:83:1a:03:5c:db:1b:
                    a2:40:45:31:48:97:58:fd:78:84:b9:ed:b6:e6:09:
                    38:86:96:df:b5:d3:c6:15:b6:0b:6a:1d:13:e4:7d:
                    8e:2d:42:24:cb:c7:e8:00:f9:ba:d3:da:0d:ca:37:
                    1c:c4:6d:c9:12:0f:68:4d:44:16:ca:af:39:0d:da:
                    96:9f:8f:b7:cb:d8:59:c4:29:ec:a4:8d:2c:6a:a5:
                    81:0d:b1:88:dc:fb:73:f2:f8:c2:ff:10:7f:21:17:
                    dd:09:48:3c:5e:08:66:2c:5a:4e:05:11:4e:ae:14:
                    2e:4f:96:d7:3a:aa:30:da:9d:79:df:8a:04:79:07:
                    9e:39:37:db:57:e3:fd:b1:44:19:1a:15:13:a4:0f:
                    fa:64:35:c7:14:46:d7:e2:3d:4b:a4:5a:f0:54:24:
                    ba:63:63:95:42:41:50:a8:c5:eb:18:94:b5:6b:64:
                    3c:a9:8b:d5:ab:77:ca:0d:75:31:48:c9:7d:9c:48:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2C:C2:2A:42:61:D0:08:CC:97:79:0A:D6:D6:03:F6:E0:3F:FE:3B
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/KizCKkJh0AjMl3kK1tYD9uA__js.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.106.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:dc:00:ab:c5:c4:9d:4b:e0:15:5f:a6:9b:ef:59:51:c9:
         e5:ca:4e:78:7a:cf:40:70:40:39:a4:de:b6:3b:b8:a2:c5:e0:
         73:00:30:a0:ee:fe:54:61:d2:84:95:c7:1c:3a:b6:d0:3c:5a:
         23:34:b3:e3:0e:f4:d1:bb:57:9a:df:0d:cc:e7:0f:63:c4:c5:
         78:ef:d1:7d:e8:0c:a2:4d:2b:9a:14:06:33:af:a8:e4:dd:d9:
         fc:f8:ad:ba:35:25:5b:0a:42:ab:d4:43:da:65:fb:8c:31:a4:
         9c:c9:11:02:5b:c3:3a:db:8e:63:3a:95:b2:b5:dc:d0:b9:18:
         1b:78:94:a1:95:3f:71:10:2c:a0:29:13:fd:7e:7e:69:97:80:
         a3:0b:3a:42:36:cb:a8:c7:0c:d3:c7:0b:d2:86:f6:20:37:db:
         86:be:9b:e4:01:d5:3c:8b:81:0b:34:26:46:c6:14:a9:4d:5c:
         c6:57:8f:61:68:d9:8c:ed:b0:d0:aa:d5:de:47:b1:3f:5d:3f:
         49:f2:e9:f8:13:77:8b:f8:30:2a:26:35:e9:a6:a9:1e:b2:c8:
         d9:86:4b:58:f2:2c:54:0f:4c:cf:a8:d0:4f:de:bb:49:e6:9a:
         ed:e8:5e:05:89:b8:1f:9d:f2:42:ba:5b:eb:8e:2c:ae:a8:7b:
         25:4e:38:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:31 2026 by rpki-client