This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/OSOCw0fjittt38XauUCpB2JWGUw.roa
File:                     OSOCw0fjittt38XauUCpB2JWGUw.roa (raw, json)
Hash identifier:          KW2oS5gPw/WeGcHSO0dCmq7cnETkxvNQL30RcJZ8CUk=
Subject key identifier:   39:23:82:C3:47:E3:8A:DB:6D:DF:C5:DA:B9:40:A9:07:62:56:19:4C
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       10E8
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/OSOCw0fjittt38XauUCpB2JWGUw.roa
Signing time:             Tue 03 Feb 2026 02:32:18 +0000
ROA not before:           Tue 03 Feb 2026 02:32:18 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        140.133.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4328 (0x10e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 02:32:18 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=392382C347E38ADB6DDFC5DAB940A9076256194C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:aa:5c:8b:dd:c3:55:6a:e3:fa:99:6b:26:
                    bd:7c:9b:6e:c1:ad:8b:10:4f:a6:a1:99:2a:54:2a:
                    17:6f:1f:3d:de:45:d7:76:47:6b:1a:f4:3b:6c:0d:
                    28:75:4d:c5:b6:12:eb:53:6b:54:8a:40:a5:36:d8:
                    f8:90:04:7c:b5:77:33:25:20:2d:8d:18:d4:46:85:
                    09:3e:e8:3a:8c:7f:3c:5c:bc:56:6c:2c:bd:78:c5:
                    5f:95:e0:9a:09:ae:75:65:0c:85:4f:73:95:0b:66:
                    22:cf:bd:a4:da:dc:7e:76:1f:b1:69:d6:fc:2b:11:
                    af:9d:3a:9c:ca:91:ff:8f:7e:d5:61:c0:21:4f:71:
                    a6:d0:45:68:7f:ce:6c:dd:4a:6a:9c:03:4f:08:b4:
                    6b:f6:bc:c5:07:54:7d:a9:f9:b3:fc:71:38:70:a4:
                    a4:b6:32:1d:ae:1a:d5:00:d9:48:88:62:39:89:5a:
                    cb:26:07:93:3a:47:7c:fa:4f:43:8a:bb:39:6c:fd:
                    46:81:e4:fd:f4:4d:a1:9d:77:e4:6f:ca:dc:04:08:
                    0f:bd:55:f1:04:51:9e:81:c7:43:11:08:e1:32:30:
                    bb:8d:02:3c:d3:fb:2e:16:a0:fb:3a:c8:d5:7a:81:
                    c6:b9:e1:bc:24:69:e7:93:1b:63:a4:41:41:47:af:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:82:C3:47:E3:8A:DB:6D:DF:C5:DA:B9:40:A9:07:62:56:19:4C
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/OSOCw0fjittt38XauUCpB2JWGUw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.133.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:c9:85:b8:86:60:67:7a:4a:ab:7e:6a:b8:c7:28:e2:06:ac:
         66:5c:98:f3:63:e8:c2:90:87:78:48:4e:9f:6f:2c:70:b8:d6:
         4a:78:d9:87:22:3d:ee:42:0d:57:80:7b:48:34:08:a9:6b:e7:
         f9:19:c1:a8:6a:4b:18:d7:62:d8:3a:52:92:bc:55:10:d0:d6:
         b4:0f:9a:f3:97:37:1d:33:e0:b4:70:06:fa:f2:69:ce:27:83:
         e4:44:bc:bc:7b:4f:e4:76:9e:91:16:05:ec:ca:7b:5b:ca:03:
         62:0f:6c:bd:b9:40:63:40:de:a3:df:4f:5e:dd:f5:ba:72:6b:
         a9:75:7d:ed:90:8a:87:ae:00:6f:eb:52:ff:2f:69:08:85:58:
         d2:dc:8b:bd:bc:d2:87:d1:e8:1f:e4:a9:6f:b3:a0:b7:03:36:
         f0:cd:f6:c1:91:09:c7:a7:c2:7d:04:83:80:3e:3c:01:2b:9b:
         d7:89:b2:69:d9:e8:0f:70:36:d9:70:80:42:ed:01:f2:fb:d1:
         f0:2d:17:8d:7b:a4:c4:30:0c:5a:37:17:ba:38:6a:02:68:e3:
         19:80:6c:9d:6f:78:ae:6e:08:ba:54:44:06:55:1e:2c:cc:0e:
         db:06:43:20:b4:cd:51:ea:13:5b:ff:6e:d3:3a:a0:0e:3b:62:
         59:a3:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:51 2026 by rpki-client