This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/LUJ36tqm2uLHG14QhsDC-zcq7_o.roa
File:                     LUJ36tqm2uLHG14QhsDC-zcq7_o.roa (raw, json)
Hash identifier:          gE2tMX5EdkfQdgOP1VsYgG3T8DdVpPPVcLv8cQOlNqo=
Subject key identifier:   2D:42:77:EA:DA:A6:DA:E2:C7:1B:5E:10:86:C0:C2:FB:37:2A:EF:FA
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1161
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LUJ36tqm2uLHG14QhsDC-zcq7_o.roa
Signing time:             Tue 03 Feb 2026 02:22:11 +0000
ROA not before:           Tue 03 Feb 2026 02:22:11 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.71.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4449 (0x1161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:22:11 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2D4277EADAA6DAE2C71B5E1086C0C2FB372AEFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:9a:b2:11:28:b9:66:c2:5d:6d:8d:85:76:
                    cf:cc:a2:4e:74:bf:3d:fd:9a:cd:8a:2d:e3:aa:7b:
                    6a:de:91:7c:f1:77:0f:ff:6d:34:2e:1f:da:ac:e1:
                    50:f1:a0:a0:cc:39:73:68:00:ad:f1:da:7a:2a:bb:
                    82:57:37:a6:47:f0:03:82:92:87:18:a8:c9:34:ec:
                    78:f5:fd:88:d1:ea:a1:60:f9:34:63:8c:a1:01:61:
                    08:13:1b:f5:5e:4e:dc:49:71:6e:04:f0:0d:98:fd:
                    22:6f:e7:c3:f0:a6:62:3d:f8:32:7d:31:ef:7e:2d:
                    89:33:42:d7:7e:c9:c0:4f:38:4c:97:a8:b8:ad:40:
                    22:e4:8d:b5:03:36:1f:0d:e2:53:53:53:a2:e3:30:
                    e9:ed:b6:04:c5:30:31:cb:60:42:4e:99:53:11:35:
                    ad:fa:bd:06:aa:65:f1:f1:d0:e7:83:aa:f2:99:9e:
                    ec:8e:05:94:13:ee:ca:08:e0:ba:4d:03:d9:ad:09:
                    c2:33:99:dd:29:0f:a9:b0:75:49:5b:1f:f9:22:fb:
                    c4:30:f5:55:e9:58:df:24:f1:c8:98:47:67:45:da:
                    b2:a2:89:36:5d:18:5e:b2:d7:d1:e0:cc:a5:a8:f0:
                    42:07:56:53:1d:3b:38:1a:44:51:cd:f3:2a:dc:56:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:77:EA:DA:A6:DA:E2:C7:1B:5E:10:86:C0:C2:FB:37:2A:EF:FA
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LUJ36tqm2uLHG14QhsDC-zcq7_o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:22:28:f9:2f:9d:b2:9b:64:fb:cd:2f:6a:10:c2:e3:24:92:
         92:8f:94:41:11:a8:b5:7c:68:e9:01:7e:8b:ce:5f:d0:7b:c9:
         db:ad:86:95:52:bc:ce:5f:0d:69:85:c3:5c:bd:ed:8a:9a:33:
         20:60:31:fc:1c:e8:c6:27:74:86:0f:8f:87:07:72:97:ef:17:
         a9:87:c8:b4:2e:6a:93:d0:40:5e:47:b4:ab:c1:56:d7:26:47:
         33:dc:3f:99:53:db:28:cd:d8:6e:8e:7a:9a:ed:7e:13:77:db:
         3d:78:9c:a8:7f:68:1b:88:5b:5a:13:9d:9c:65:9e:44:e2:71:
         cb:d5:e2:91:0e:b2:4a:56:21:d8:9e:c7:e9:e2:0d:de:dc:b5:
         f2:a7:3e:a4:48:a7:53:bc:02:d2:cb:51:c3:8b:30:e6:b4:73:
         e3:a8:d4:ff:2d:65:66:28:02:d9:af:23:31:79:36:92:1a:1d:
         f7:44:77:19:ff:84:9c:97:7c:21:f7:2b:50:83:e2:4e:69:03:
         ab:7b:9e:78:4e:35:68:7d:c4:f3:34:9b:ad:67:1e:83:c6:86:
         ea:2a:e4:57:7a:df:33:44:b1:bc:e5:d5:09:1b:21:2e:d6:96:
         d6:7b:aa:0f:42:e4:47:8a:73:ac:d1:b9:b3:b8:bb:7b:07:32:
         97:f6:c0:e2
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MjIyMTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJENDI3N0VBREFBNkRB
RTJDNzFCNUUxMDg2QzBDMkZCMzcyQUVGRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7aJqyESi5ZsJdbY2Fds/Mok50vz39ms2KLeOqe2rekXzxdw//
bTQuH9qs4VDxoKDMOXNoAK3x2noqu4JXN6ZH8AOCkocYqMk07Hj1/YjR6qFg+TRj
jKEBYQgTG/VeTtxJcW4E8A2Y/SJv58PwpmI9+DJ9Me9+LYkzQtd+ycBPOEyXqLit
QCLkjbUDNh8N4lNTU6LjMOnttgTFMDHLYEJOmVMRNa36vQaqZfHx0OeDqvKZnuyO
BZQT7soI4LpNA9mtCcIzmd0pD6mwdUlbH/ki+8Qw9VXpWN8k8ciYR2dF2rKiiTZd
GF6y19HgzKWo8EIHVlMdOzgaRFHN8yrcVqFFAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQULUJ36tqm2uLHG14QhsDC+zcq7/owHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9MVUozNnRxbTJ1TEhHMTRRaHNE
Qy16Y3E3X28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0f1
MA0GCSqGSIb3DQEBCwUAA4IBAQA0Iij5L52ym2T7zS9qEMLjJJKSj5RBEai1fGjp
AX6Lzl/Qe8nbrYaVUrzOXw1phcNcve2KmjMgYDH8HOjGJ3SGD4+HB3KX7xeph8i0
LmqT0EBeR7SrwVbXJkcz3D+ZU9sozdhujnqa7X4Td9s9eJyof2gbiFtaE52cZZ5E
4nHL1eKRDrJKViHYnsfp4g3e3LXypz6kSKdTvALSy1HDizDmtHPjqNT/LWVmKALZ
ryMxeTaSGh33RHcZ/4Scl3wh9ytQg+JOaQOre554TjVofcTzNJutZx6DxobqKuRX
et8zRLG85dUJGyEu1pbWe6oPQuRHinOs0bmzuLt7BzKX9sDi
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:56 2026 by rpki-client