This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/KmwfxtdOZiGJEZiTWlSs_NLhdhA.roa
File:                     KmwfxtdOZiGJEZiTWlSs_NLhdhA.roa (raw, json)
Hash identifier:          Yod9xwx16fw2+WxAB/s4DH7cTmEFnbYZG69/Yp1nppM=
Subject key identifier:   2A:6C:1F:C6:D7:4E:66:21:89:11:98:93:5A:54:AC:FC:D2:E1:76:10
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12C6
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/KmwfxtdOZiGJEZiTWlSs_NLhdhA.roa
Signing time:             Tue 03 Feb 2026 08:54:36 +0000
ROA not before:           Tue 03 Feb 2026 08:54:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.72.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4806 (0x12c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:54:36 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2A6C1FC6D74E6621891198935A54ACFCD2E17610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:48:a0:aa:2a:a0:2e:d2:75:e1:86:bf:12:
                    75:ec:23:40:4c:99:97:8d:2a:86:31:c9:d1:17:35:
                    6b:cd:7e:a9:7e:a7:26:65:24:bb:cc:d6:c9:e6:a8:
                    09:da:fe:c8:b8:a0:9f:6b:b9:40:ff:68:5e:b3:8c:
                    8f:02:f7:a7:01:f6:c1:0a:cb:61:7e:61:90:d1:c3:
                    37:36:51:2b:4a:44:dc:50:79:ac:3c:4f:c8:4b:fe:
                    6b:ae:35:c9:b0:5d:5f:0d:7f:84:7a:9b:48:49:58:
                    a1:61:f9:1c:45:13:5d:4c:05:f5:3a:39:7a:1d:a9:
                    aa:56:d2:bf:1c:ea:69:10:e1:6d:a5:33:22:a5:6f:
                    62:ee:09:07:d7:8e:61:ec:71:56:a2:57:2e:7c:e2:
                    b9:6d:cd:32:03:84:35:0d:19:4f:c9:58:da:28:c9:
                    9e:ab:5c:61:a5:b2:38:fe:8d:f9:b4:c7:19:fd:a9:
                    8c:c8:75:82:0f:47:6c:07:5c:e2:f2:53:d9:d4:2e:
                    02:cb:c5:85:c6:d1:45:a5:a5:39:47:7f:cb:64:82:
                    c7:b0:59:fa:c5:ef:55:8d:57:03:b9:c1:6f:fc:13:
                    be:08:cf:38:75:b7:54:cd:1a:a9:18:3a:f7:49:10:
                    ad:f6:44:db:13:03:e0:78:56:75:47:3b:a9:ce:f6:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6C:1F:C6:D7:4E:66:21:89:11:98:93:5A:54:AC:FC:D2:E1:76:10
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/KmwfxtdOZiGJEZiTWlSs_NLhdhA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f4:40:d9:96:51:a9:e6:18:0d:71:49:55:f9:a6:9d:fb:2e:
         54:ee:75:34:c1:45:73:ee:6c:e2:17:1d:fb:33:51:76:36:22:
         b6:91:4b:5e:e5:75:59:bc:87:b3:91:b9:53:a2:80:b3:0b:f5:
         9d:d5:56:da:8e:e3:d9:db:1d:c2:19:0c:a5:b4:f3:6f:e4:05:
         ab:2b:e8:f5:4a:8d:0b:95:7c:46:2d:96:9f:1a:94:63:be:f7:
         c6:6a:95:c2:be:0d:b5:3d:0a:1f:43:68:4d:71:49:b6:4d:90:
         ba:f9:01:e9:be:88:7e:79:e4:ef:88:9d:e2:a3:ac:c2:e3:80:
         f1:ad:e0:bc:45:56:28:9a:ee:31:30:69:e8:f3:09:c5:42:e4:
         ae:fc:28:e6:14:0e:89:b3:92:ca:c7:10:cd:f7:5b:0e:91:90:
         1f:b9:8c:64:6f:24:c8:b7:47:53:e3:01:fd:a9:fc:65:e9:44:
         2b:e1:e1:48:43:5c:df:94:cd:7d:b3:dc:ef:b6:41:24:cd:c2:
         11:af:20:2d:4f:14:8e:94:98:af:1e:4d:f0:41:35:77:92:5c:
         0b:b9:4b:0c:38:ae:07:23:78:44:00:64:59:6c:cd:95:c5:92:
         5a:02:b3:d7:c3:63:da:45:cd:c4:97:2d:e5:8a:6b:cb:41:f7:
         26:a4:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:53 2026 by rpki-client