This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/NHUBgrpYB6ZyNBdTOweOipKd6E8.roa
File:                     NHUBgrpYB6ZyNBdTOweOipKd6E8.roa (raw, json)
Hash identifier:          5eU/ofhfvob8txE5H7xQyMRp0o12hZcf97D124xs8CE=
Subject key identifier:   34:75:01:82:BA:58:07:A6:72:34:17:53:3B:07:8E:8A:92:9D:E8:4F
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1240
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/NHUBgrpYB6ZyNBdTOweOipKd6E8.roa
Signing time:             Tue 03 Feb 2026 03:02:47 +0000
ROA not before:           Tue 03 Feb 2026 03:02:47 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17712
IP address blocks:        210.70.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4672 (0x1240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:02:47 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=34750182BA5807A6723417533B078E8A929DE84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:33:20:05:1f:7f:93:4a:9d:0b:75:87:d2:
                    50:12:f3:2a:cc:35:82:05:97:bd:c8:b3:71:b5:de:
                    88:3f:0b:9a:0f:0e:5f:41:dd:b5:7d:0a:28:06:f7:
                    47:bd:f6:c2:01:48:e0:96:96:1e:12:60:4c:5f:39:
                    c5:b2:e7:17:a4:66:e8:05:76:ce:18:b2:36:02:bf:
                    ab:98:7a:90:4d:22:08:bd:d3:f4:4d:c2:69:06:85:
                    85:cc:15:c1:52:c5:09:d3:56:b0:20:c0:ea:aa:26:
                    74:3f:bf:84:d3:67:2c:d3:bd:6a:2e:fb:59:a0:af:
                    0c:21:fc:30:80:17:40:ba:5b:76:d4:a2:52:41:a5:
                    4a:80:f6:a8:09:b2:f5:61:d7:b9:64:5d:e4:86:08:
                    f6:23:2a:7e:a5:8b:04:10:02:25:68:7e:b4:c3:d3:
                    8f:ef:53:98:67:77:e6:43:51:49:f5:a7:8b:e7:d7:
                    b8:71:f7:e7:2f:71:47:fc:88:45:74:68:98:20:cf:
                    50:cc:ac:81:b3:8b:37:1e:ac:07:ac:24:03:e7:49:
                    8e:11:66:18:63:01:41:ef:e4:a1:82:0a:c7:b6:6c:
                    9d:8a:94:50:a7:a8:47:2e:e9:a4:4b:f2:f1:cb:9e:
                    44:f8:46:bf:bc:7b:b6:4b:c6:fa:56:94:c9:3d:32:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:01:82:BA:58:07:A6:72:34:17:53:3B:07:8E:8A:92:9D:E8:4F
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/NHUBgrpYB6ZyNBdTOweOipKd6E8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:1e:be:0a:6a:78:06:8a:9c:6d:a2:b8:30:35:b9:64:ea:
         8f:e9:9c:3c:b1:1d:df:84:03:5e:c5:26:ba:85:16:da:ae:78:
         bb:e9:7c:f1:5b:08:d6:7e:28:c5:0d:15:91:18:f1:a5:64:1f:
         dc:8b:3d:b8:bc:73:61:e2:05:6f:19:86:1a:fd:ff:0c:8c:ae:
         b6:7f:4e:90:3e:ce:68:ca:ca:27:39:28:7d:42:68:52:94:0f:
         3d:00:a9:9f:77:64:0a:e3:a9:81:94:b9:ef:16:3c:c0:9b:01:
         87:45:58:3a:07:15:7b:c6:df:55:72:23:65:1b:74:e4:e2:42:
         e8:2b:4c:5b:c9:b1:61:b0:c1:6c:30:4e:62:7d:56:bf:d9:bd:
         44:5c:e7:9b:19:a7:3f:80:31:f1:16:09:17:ac:6d:5e:34:d3:
         8e:e1:dc:a6:b5:82:95:bf:b7:9c:17:cb:63:35:b5:72:69:5a:
         3e:e4:b6:21:25:ab:60:1b:c2:02:27:04:7a:dd:4a:fe:d0:ef:
         40:86:f5:26:15:ea:40:1f:4d:b0:b2:0c:5b:d9:d6:8b:79:f2:
         46:71:de:0f:32:33:00:37:01:af:26:a1:51:16:ac:e9:1a:90:
         47:59:fa:01:c6:6f:72:58:e7:f1:e5:ad:cf:e9:18:2b:e3:c0:
         df:61:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:52 2026 by rpki-client