This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/LqYrtWPjK9EAueG-LBsEg40Ldl4.roa
File:                     LqYrtWPjK9EAueG-LBsEg40Ldl4.roa (raw, json)
Hash identifier:          J4VnD8rXuLpdiqpuOL/FhMj5zBtQFO1dwDQU4KT3ckM=
Subject key identifier:   2E:A6:2B:B5:63:E3:2B:D1:00:B9:E1:BE:2C:1B:04:83:8D:0B:76:5E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1169
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LqYrtWPjK9EAueG-LBsEg40Ldl4.roa
Signing time:             Tue 03 Feb 2026 02:23:10 +0000
ROA not before:           Tue 03 Feb 2026 02:23:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        210.70.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4457 (0x1169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:23:10 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2EA62BB563E32BD100B9E1BE2C1B04838D0B765E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:b6:81:9c:37:69:dd:3e:5f:4b:8e:84:55:
                    09:b6:a0:57:9b:ac:ed:20:9f:28:d8:4a:bf:86:96:
                    a0:4b:68:29:3e:e8:94:68:9a:13:cd:24:42:04:f8:
                    93:b9:2c:42:ab:e1:97:dd:bf:d2:55:32:af:91:2d:
                    bd:e6:18:1c:4a:f4:2a:15:c7:18:82:01:e6:39:0d:
                    c0:ea:2a:1c:9c:36:10:c4:8e:f3:d9:52:9f:54:2b:
                    cd:0c:1b:04:49:5b:ce:9e:83:4e:6e:81:ba:cb:d4:
                    4a:19:70:ec:3c:0c:71:c7:ca:58:ea:e1:6e:52:34:
                    79:d7:bf:de:db:b2:2c:12:b2:78:04:99:fe:c4:91:
                    93:b1:0d:18:32:55:f3:d3:8b:f6:07:f0:c8:11:da:
                    f9:9a:73:91:e8:20:2d:ff:c5:79:75:1f:d5:53:8f:
                    8e:22:09:37:24:46:c5:af:ab:bb:6f:16:0b:7e:72:
                    d3:c4:0e:ef:1a:39:bb:38:db:75:3b:8b:4f:0d:0b:
                    10:b5:e5:fd:43:58:97:b2:24:89:ca:8f:b3:65:b9:
                    7a:6f:c8:5c:0f:57:c7:1f:4a:15:a7:c4:0d:aa:89:
                    a1:fc:0b:f2:f8:8c:01:ec:f0:0f:38:49:f9:81:db:
                    a7:d9:ef:8d:c5:13:73:c8:ac:61:58:ba:d5:15:1f:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A6:2B:B5:63:E3:2B:D1:00:B9:E1:BE:2C:1B:04:83:8D:0B:76:5E
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LqYrtWPjK9EAueG-LBsEg40Ldl4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:05:fd:16:b2:22:e8:89:b9:63:65:a9:94:fd:06:54:cb:06:
         47:9f:f1:9c:fe:6c:58:50:f7:bb:a3:84:4b:a9:72:c8:96:56:
         52:ab:e9:04:3d:60:a5:2f:9b:12:c3:23:d3:be:d1:8d:f6:67:
         4c:10:2f:5d:48:98:7a:7f:01:cb:5a:2c:35:f2:79:c3:50:82:
         81:3a:53:98:7f:93:63:d7:d5:18:3f:22:6d:3c:51:13:49:1f:
         24:d7:0b:82:db:23:36:65:12:4b:87:7c:6d:6f:ca:c4:e3:d7:
         10:f5:18:11:09:9b:61:a8:f8:91:43:93:3f:f6:0c:d3:61:28:
         d9:d2:08:9c:31:65:f1:12:cb:0a:05:ae:0c:8b:5c:9f:94:53:
         a9:05:c4:16:30:5e:9c:c2:c5:69:59:b2:81:d2:39:fa:ba:84:
         35:3f:e8:7e:09:e2:8e:ed:ce:04:34:3b:15:a0:6b:0d:d1:76:
         13:de:6e:7f:bc:32:39:07:06:8c:b6:2c:9b:72:ce:51:be:0f:
         a9:24:da:ea:6e:0c:72:51:04:fc:57:cc:ac:c4:3c:c1:9e:93:
         e1:bf:e3:dd:5b:b2:6a:3d:09:af:21:af:04:94:38:36:52:93:
         b2:2f:63:81:44:8d:d6:6a:0b:8f:a6:8b:3f:c1:86:07:87:6a:
         85:44:0d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:57 2026 by rpki-client