This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/NKJEbiuYAqG-3Z0Q4EdNzmY3MB8.roa
File:                     NKJEbiuYAqG-3Z0Q4EdNzmY3MB8.roa (raw, json)
Hash identifier:          49EHz9B4nGd+JXdGqFcHhEppaFM8xwNGVG0MfdAmws4=
Subject key identifier:   34:A2:44:6E:2B:98:02:A1:BE:DD:9D:10:E0:47:4D:CE:66:37:30:1F
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       114A
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/NKJEbiuYAqG-3Z0Q4EdNzmY3MB8.roa
Signing time:             Tue 03 Feb 2026 03:19:39 +0000
ROA not before:           Tue 03 Feb 2026 03:19:39 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        192.192.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4426 (0x114a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 03:19:39 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=34A2446E2B9802A1BEDD9D10E0474DCE6637301F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:69:fb:ca:75:1e:e6:a9:0d:ef:ec:55:ad:
                    57:64:c5:f4:fa:27:5e:13:3c:1d:21:67:75:5f:63:
                    f2:dd:e9:0a:52:dc:5b:34:1b:dd:be:60:fa:f2:15:
                    f6:68:87:71:d8:d6:05:ac:3c:23:6e:76:31:c7:9b:
                    cb:7c:4a:5f:d0:b8:d4:34:53:8c:9c:41:05:27:52:
                    9a:bd:ec:d8:58:b2:db:26:a7:62:8e:9e:9e:66:a9:
                    44:c1:60:16:27:62:ff:2b:cb:d2:b7:5e:ab:3d:70:
                    d9:bd:3a:f8:f0:5a:91:ad:ab:38:22:a4:50:99:9d:
                    8b:3c:43:0a:22:e7:a9:43:52:21:cc:aa:15:4d:23:
                    e1:5c:6f:98:38:4e:9d:66:3d:36:d0:56:56:e3:3b:
                    a1:5e:b5:6f:8e:91:9f:b3:d9:4e:a1:8c:fe:7d:6f:
                    e3:c5:34:dd:23:95:b3:0b:1f:3f:d8:fb:bf:2c:44:
                    96:ed:1b:29:00:92:23:19:d8:e9:69:e6:41:e2:b6:
                    13:aa:e0:28:0d:98:fc:1e:8d:9c:0e:44:ee:49:05:
                    c5:36:f0:34:ba:fb:6b:98:e0:d3:52:1b:24:2b:d8:
                    73:dd:5e:3f:9a:0c:ec:c6:98:e5:05:34:0b:af:d9:
                    b8:a2:48:b1:86:07:d2:bf:7d:99:09:8c:12:80:33:
                    e6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A2:44:6E:2B:98:02:A1:BE:DD:9D:10:E0:47:4D:CE:66:37:30:1F
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/NKJEbiuYAqG-3Z0Q4EdNzmY3MB8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:29:a9:0f:5e:56:36:31:7b:01:55:e2:9b:ec:44:b6:41:1e:
         dc:2b:70:9d:f3:41:7d:15:aa:55:e5:8a:8e:7b:cf:9b:e9:db:
         a3:c5:6e:9c:0e:fc:2f:69:57:6e:92:8c:46:40:ba:2e:de:44:
         9c:37:cd:ae:71:f3:f1:ab:37:38:ce:cb:76:35:9b:d5:9e:53:
         4f:d0:d4:0b:52:51:c1:e8:50:50:4d:3f:04:fa:17:eb:44:fe:
         e4:b0:29:ce:5d:8c:44:e0:a6:af:54:fc:ba:43:22:70:c2:4d:
         74:5c:76:70:42:4a:4c:4f:0a:85:cc:8e:17:e3:5b:41:70:76:
         bc:00:5a:6a:bd:42:d4:71:5a:36:85:d2:a6:4f:44:25:12:f1:
         ae:4e:8d:59:40:f1:de:51:5b:93:d9:91:22:34:77:cc:60:25:
         8e:6e:83:6e:bd:9a:f2:f7:44:b6:61:ac:23:cf:d0:75:c5:4a:
         7a:74:56:20:ed:76:2a:d2:05:28:45:5f:19:ca:68:ec:94:8b:
         c3:b8:4f:bc:f3:c2:6c:21:98:0f:ba:15:ee:a1:44:d0:98:1d:
         f3:14:e0:c9:1e:6e:55:ba:d1:e9:3d:25:22:10:a9:fd:eb:ad:
         9c:89:b6:e0:4b:33:88:07:cc:ee:e4:75:90:e0:2f:85:52:0e:
         17:4a:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:39:28 2026 by rpki-client