This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/MATO2vI-OLkMV9QrOv3qodMY0Dc.roa
File:                     MATO2vI-OLkMV9QrOv3qodMY0Dc.roa (raw, json)
Hash identifier:          OtjC4HxVuwuYhHlXoqT3MRzzddQRPA+YOPMtIaMmJhs=
Subject key identifier:   30:04:CE:DA:F2:3E:38:B9:0C:57:D4:2B:3A:FD:EA:A1:D3:18:D0:37
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12C0
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/MATO2vI-OLkMV9QrOv3qodMY0Dc.roa
Signing time:             Tue 03 Feb 2026 08:53:54 +0000
ROA not before:           Tue 03 Feb 2026 08:53:54 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.71.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4800 (0x12c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:53:54 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3004CEDAF23E38B90C57D42B3AFDEAA1D318D037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:f3:5f:f8:22:ef:81:4e:c3:91:0b:f3:b8:
                    e2:c7:85:ec:bb:a0:d7:fe:83:3f:ee:e5:a6:e2:fa:
                    99:c6:c5:7b:2b:9a:e9:76:8b:58:6d:94:6c:2e:73:
                    b3:bd:ca:03:d8:61:85:f7:e9:ac:b4:47:b6:67:22:
                    af:f6:6f:4c:f7:ad:9c:e2:36:6d:25:7c:7e:55:59:
                    fc:a1:82:94:83:4c:81:aa:dc:d8:f0:d2:6d:51:62:
                    77:5a:f5:23:fd:ca:d4:4a:cc:08:fc:34:db:d4:25:
                    7b:a8:53:00:63:69:62:c0:47:a9:49:ba:88:f9:14:
                    73:eb:24:ce:b8:1e:06:49:38:18:5e:66:0a:fb:02:
                    d5:2b:9d:9e:68:42:54:da:c5:01:77:18:7b:a3:3d:
                    fa:cc:e2:5b:22:be:c1:a6:15:24:99:8b:c2:b9:53:
                    23:13:46:f2:5e:47:1d:d2:e2:6c:76:32:58:76:ee:
                    9b:72:6e:da:49:08:c5:a1:6c:ad:ef:4a:2d:bc:02:
                    1b:85:04:a9:9a:58:a9:fc:b2:84:99:3b:2e:1e:1d:
                    65:61:eb:ea:05:16:35:f4:8a:f1:19:34:cd:35:c5:
                    30:6b:d6:3e:47:52:da:85:72:cf:97:ff:9c:e6:ae:
                    34:2a:3c:7c:44:b4:98:70:20:d9:0e:d4:a0:7d:ac:
                    ec:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:04:CE:DA:F2:3E:38:B9:0C:57:D4:2B:3A:FD:EA:A1:D3:18:D0:37
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/MATO2vI-OLkMV9QrOv3qodMY0Dc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:64:2b:5e:a4:db:fa:dc:e4:09:a8:f7:bc:2f:16:21:b8:6b:
         b8:8d:76:94:8d:87:95:ce:44:1e:45:06:a2:55:1d:e0:33:01:
         44:c0:af:05:64:fa:49:1a:57:59:fc:f9:56:6b:f4:56:b5:34:
         c2:bb:c8:33:5d:88:87:cb:7b:a3:1d:51:a1:bf:7c:d4:ea:d0:
         5a:4f:7a:7f:3b:36:5a:11:f1:14:10:27:d0:28:08:dc:4a:35:
         95:ba:3c:a3:96:da:82:20:29:3e:67:25:ce:96:f6:32:a2:f7:
         d8:2a:c2:22:b9:ac:8e:7a:6b:9a:d9:4e:b5:3b:ca:42:ff:88:
         1c:64:74:8a:94:7d:16:cb:2a:e2:e1:09:55:69:5c:1e:48:73:
         2d:01:df:35:48:af:3f:90:7e:8a:49:10:42:33:ce:03:63:45:
         b9:75:d5:8e:06:4d:e1:b3:67:37:3b:a4:bd:fd:a5:b4:5d:02:
         16:08:e7:41:39:fb:16:c5:95:6d:c3:ba:94:73:90:98:cd:6b:
         fb:b5:2e:8e:53:24:31:f6:52:a0:97:31:d2:ae:43:3d:ce:cf:
         37:3f:84:19:d5:05:7f:a3:d8:f5:c3:b2:77:eb:dd:a6:1d:4d:
         1c:8b:06:a1:fd:e2:e6:04:50:e6:19:d4:c2:6d:f1:4e:04:fc:
         d8:ba:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:57 2026 by rpki-client