This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/LDEtkDfBxE4I_vpfaImuGlV8OKs.roa
File:                     LDEtkDfBxE4I_vpfaImuGlV8OKs.roa (raw, json)
Hash identifier:          roHOFDOCm66N/HvvpQTvTtZNtakH/7I6xNhm04t7E/g=
Subject key identifier:   2C:31:2D:90:37:C1:C4:4E:08:FE:FA:5F:68:89:AE:1A:55:7C:38:AB
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1374
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LDEtkDfBxE4I_vpfaImuGlV8OKs.roa
Signing time:             Fri 06 Feb 2026 01:09:23 +0000
ROA not before:           Fri 06 Feb 2026 01:09:23 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.60.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4980 (0x1374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:09:23 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2C312D9037C1C44E08FEFA5F6889AE1A557C38AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:86:2e:2d:31:7b:8b:f8:5f:ff:af:74:ea:
                    cb:07:2d:16:b6:89:f7:fb:4b:45:9c:c0:93:bf:22:
                    54:01:24:d5:3c:78:87:9d:25:7d:55:32:3a:7d:a4:
                    83:3f:d6:06:8f:01:2e:7a:96:0e:43:89:c1:a4:f7:
                    0f:24:5e:b9:7f:33:e9:43:05:a2:41:3f:85:dd:cb:
                    5e:22:a3:8e:0f:12:3d:ba:39:52:94:33:a6:c2:a0:
                    76:6c:07:bc:5a:25:51:45:47:b0:05:05:50:96:db:
                    fd:d4:45:34:a5:0a:50:b6:07:9f:ec:e5:6d:cc:6c:
                    0f:9c:97:a6:67:56:85:bc:b1:2f:f3:f3:c2:09:78:
                    85:f9:f7:53:16:60:9e:d5:61:8f:bd:21:37:22:9f:
                    7c:11:61:58:6e:66:64:99:c9:9c:b7:dd:f2:26:9b:
                    61:87:24:a5:2e:ad:d0:80:ea:a6:0d:cf:8d:74:ad:
                    5e:5b:45:9f:11:15:76:b9:16:bc:99:e6:26:8f:ff:
                    8a:c4:fa:66:f8:45:16:bf:c1:d7:30:23:c5:52:ae:
                    80:b8:89:83:3a:fc:0d:a1:88:df:f4:48:d9:45:45:
                    3f:c1:da:c6:c7:0b:15:7f:f5:ed:a2:56:de:df:cd:
                    5b:78:27:8e:8e:2c:89:d8:ab:4e:10:9b:cb:8f:00:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:31:2D:90:37:C1:C4:4E:08:FE:FA:5F:68:89:AE:1A:55:7C:38:AB
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LDEtkDfBxE4I_vpfaImuGlV8OKs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:66:2b:f0:21:b3:64:05:62:91:65:e6:2e:42:40:e5:57:b5:
         7f:3a:bf:af:c0:6e:0b:0c:1a:61:bf:70:ba:2f:40:cf:88:d3:
         83:72:fc:15:0a:c2:62:fc:fb:53:c6:e1:93:65:d4:8e:b3:ef:
         3e:7e:ea:e8:fb:70:54:3f:48:3b:72:0b:c4:71:d6:e9:1a:5c:
         fd:06:b9:c0:4a:f1:2a:81:37:00:2c:98:86:aa:f9:1a:7a:dc:
         5e:6f:b2:4e:ce:8a:e2:d2:d1:7d:d0:e8:c6:e5:4d:87:e8:b7:
         37:b6:c1:c3:af:3f:8c:d1:53:15:75:a6:f4:75:df:89:6b:e5:
         2b:f4:c4:b7:51:30:1f:96:e7:f7:a8:db:0f:39:a2:1a:42:2d:
         f8:f1:83:09:f5:90:d9:76:6f:19:5d:83:c2:7a:80:6b:ca:53:
         35:c1:4e:7c:95:ed:f0:62:92:9d:40:28:e2:11:7b:b4:a9:34:
         df:63:00:0f:28:7b:6c:0e:e1:3a:bf:7c:51:24:9a:0d:8d:69:
         0d:95:6d:6b:ee:f5:e5:7e:cd:b2:54:f1:3d:6c:e1:35:1d:36:
         2b:87:3b:dd:01:22:c3:f9:3e:e5:74:c8:2e:cd:66:a4:a7:af:
         ce:24:33:57:23:7a:5d:9f:b6:92:f7:d5:0d:85:1c:be:e2:82:
         a9:46:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:51 2026 by rpki-client