This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/LBUCFdHGZ-aQSJ15GJrcw3482fo.roa
File:                     LBUCFdHGZ-aQSJ15GJrcw3482fo.roa (raw, json)
Hash identifier:          kcnJ0Qqb0Z83oIRMy8L0UkzgwoPwSRNwr43g/ZTYEbo=
Subject key identifier:   2C:15:02:15:D1:C6:67:E6:90:48:9D:79:18:9A:DC:C3:7E:3C:D9:FA
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       135C
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LBUCFdHGZ-aQSJ15GJrcw3482fo.roa
Signing time:             Fri 06 Feb 2026 01:07:05 +0000
ROA not before:           Fri 06 Feb 2026 01:07:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.72.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4956 (0x135c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:07:05 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2C150215D1C667E690489D79189ADCC37E3CD9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:99:91:d9:f1:f2:cd:77:65:7a:78:91:12:62:
                    ea:37:cd:f7:64:95:56:32:7a:1e:ac:37:6c:6b:d7:
                    cb:2f:4c:c7:ae:07:6f:81:9c:e0:46:5d:0b:7c:06:
                    d4:eb:c4:cc:e2:a4:0e:d6:d3:19:2e:f8:48:d9:14:
                    63:cd:c1:b3:e4:2f:ee:f6:3a:f6:1b:b5:a8:69:ed:
                    da:17:9a:71:58:ff:62:be:34:52:e5:7b:32:ee:c2:
                    87:d7:2e:24:6e:3c:07:4b:ef:b6:17:4b:3b:11:7c:
                    5c:56:de:13:dd:9d:56:c7:b1:f7:4e:fb:b2:d0:cf:
                    5f:94:52:b1:b5:cf:0d:a4:43:37:5c:cd:0a:d0:4b:
                    fb:3c:90:09:75:19:be:49:5a:48:4b:5c:96:9a:e6:
                    2f:c4:ac:8b:e2:14:2b:c7:98:cc:ba:cc:8e:d8:8a:
                    5c:db:48:9c:7c:83:4e:5b:d0:43:52:87:8e:05:56:
                    69:c4:bb:de:9b:f9:a9:ab:9e:08:9a:71:4c:d6:c8:
                    51:c3:1f:8d:31:e6:9f:bb:6a:da:dc:75:68:5d:c3:
                    81:86:a0:ff:19:c4:ec:fc:4d:35:19:74:fa:7b:14:
                    49:cf:4e:a4:9a:44:65:69:e8:80:b8:be:3c:b6:4c:
                    b1:32:42:4c:1a:c3:f0:f3:b8:89:1a:1a:43:6c:3f:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:02:15:D1:C6:67:E6:90:48:9D:79:18:9A:DC:C3:7E:3C:D9:FA
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LBUCFdHGZ-aQSJ15GJrcw3482fo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:6b:e9:98:19:1c:49:20:6a:96:40:e5:45:23:ae:5c:53:c5:
         01:f0:ae:70:c9:3f:0d:de:f0:97:b1:11:0b:aa:fa:cd:f4:b8:
         60:f0:80:58:24:77:5a:9a:f8:57:00:16:b6:6f:f7:8b:ab:a9:
         8c:7e:ba:5c:b1:bb:ba:3d:03:e8:8c:27:b4:99:5e:e7:b4:95:
         0c:a2:42:d2:b0:1c:8b:c7:0f:15:00:33:15:1c:42:b0:f9:22:
         14:2f:c3:71:39:82:27:be:b4:8f:5d:7d:d4:88:90:94:6d:8b:
         2a:ff:5b:1b:0f:cc:bb:90:07:78:1f:5b:10:f0:23:07:c2:3d:
         ba:2e:54:ca:75:ea:f6:81:e0:a6:9d:d3:96:83:05:67:39:1d:
         d0:8e:c6:a5:c6:83:51:50:35:81:24:94:95:ea:13:a3:11:f8:
         8d:a2:fa:6b:ec:68:7a:7e:42:c4:69:4b:89:4e:dc:5c:bc:cb:
         d2:7f:b2:13:bd:37:3f:e6:c1:1d:c1:0e:4d:75:8e:d2:1a:34:
         da:be:f8:e6:b3:46:db:0a:0e:a6:7e:6f:6a:86:0f:d0:85:7a:
         3f:81:9f:e4:90:e8:60:6b:b7:9c:79:4b:f1:0d:c0:cc:3c:8a:
         09:bc:e4:12:86:ee:b4:62:82:04:b4:e4:04:2e:71:08:ef:61:
         b5:b1:25:d6
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDYw
MTA3MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJDMTUwMjE1RDFDNjY3
RTY5MDQ4OUQ3OTE4OUFEQ0MzN0UzQ0Q5RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRmZHZ8fLNd2V6eJESYuo3zfdklVYyeh6sN2xr18svTMeuB2+B
nOBGXQt8BtTrxMzipA7W0xku+EjZFGPNwbPkL+72OvYbtahp7doXmnFY/2K+NFLl
ezLuwofXLiRuPAdL77YXSzsRfFxW3hPdnVbHsfdO+7LQz1+UUrG1zw2kQzdczQrQ
S/s8kAl1Gb5JWkhLXJaa5i/ErIviFCvHmMy6zI7YilzbSJx8g05b0ENSh44FVmnE
u96b+amrngiacUzWyFHDH40x5p+7atrcdWhdw4GGoP8ZxOz8TTUZdPp7FEnPTqSa
RGVp6IC4vjy2TLEyQkwaw/DzuIkaGkNsP99RAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQULBUCFdHGZ+aQSJ15GJrcw3482fowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9MQlVDRmRIR1otYVFTSjE1R0py
Y3czNDgyZm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0hA
MA0GCSqGSIb3DQEBCwUAA4IBAQCua+mYGRxJIGqWQOVFI65cU8UB8K5wyT8N3vCX
sRELqvrN9Lhg8IBYJHdamvhXABa2b/eLq6mMfrpcsbu6PQPojCe0mV7ntJUMokLS
sByLxw8VADMVHEKw+SIUL8NxOYInvrSPXX3UiJCUbYsq/1sbD8y7kAd4H1sQ8CMH
wj26LlTKder2geCmndOWgwVnOR3QjsalxoNRUDWBJJSV6hOjEfiNovpr7Gh6fkLE
aUuJTtxcvMvSf7ITvTc/5sEdwQ5NdY7SGjTavvjms0bbCg6mfm9qhg/QhXo/gZ/k
kOhga7eceUvxDcDMPIoJvOQShu60YoIEtOQELnEI72G1sSXW
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:26 2026 by rpki-client