This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/OsOPTGA7yVUP57vxynk7hwBDKuQ.roa
File:                     OsOPTGA7yVUP57vxynk7hwBDKuQ.roa (raw, json)
Hash identifier:          M2Q+AKH1Qs35+cL8vvoB5hlX3xmM09mtvxJT/UnT2XM=
Subject key identifier:   3A:C3:8F:4C:60:3B:C9:55:0F:E7:BB:F1:CA:79:3B:87:00:43:2A:E4
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11C5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/OsOPTGA7yVUP57vxynk7hwBDKuQ.roa
Signing time:             Tue 03 Feb 2026 02:35:10 +0000
ROA not before:           Tue 03 Feb 2026 02:35:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        163.25.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4549 (0x11c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:35:10 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3AC38F4C603BC9550FE7BBF1CA793B8700432AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:cf:13:7e:a2:36:ac:8e:40:38:de:e3:0e:
                    de:9b:fc:5b:39:25:e0:46:9c:d3:15:c1:69:61:48:
                    f1:00:1c:c9:98:0e:4a:fb:ad:c9:53:d2:81:39:9e:
                    9c:4f:74:bb:72:b5:e1:4f:b2:95:6f:4a:35:86:a7:
                    5e:b4:e5:b1:8d:1c:61:06:7e:aa:ed:fc:bb:76:db:
                    51:fe:31:59:9d:9d:dd:67:83:75:94:ff:d8:88:70:
                    48:07:96:7d:e4:9d:aa:6b:52:95:e9:aa:89:af:b7:
                    05:76:e8:60:7b:c5:d8:05:26:8a:7d:87:e4:cb:b5:
                    d7:52:c2:52:ca:b1:ec:66:62:70:85:7e:51:b8:89:
                    9e:10:58:21:3e:f4:ce:25:8a:d0:44:2d:04:35:d8:
                    c5:f1:2e:3e:9c:47:2e:58:bb:08:6e:d9:6e:d0:72:
                    5e:a9:e1:8e:f0:2f:01:ae:6f:2b:72:6c:0f:a0:3b:
                    73:74:67:93:3b:d6:bf:3f:75:ac:6c:f3:d2:65:03:
                    f6:c5:8f:b1:fc:7e:71:93:39:ca:4e:68:64:f4:e6:
                    4b:a0:07:2b:ef:ab:e2:5f:99:81:d6:24:06:4f:c2:
                    0a:d8:5c:d3:f7:7e:6f:eb:d5:3c:c3:29:08:76:ae:
                    11:a4:57:6b:d6:8a:95:83:d4:90:41:3b:8c:6b:bf:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C3:8F:4C:60:3B:C9:55:0F:E7:BB:F1:CA:79:3B:87:00:43:2A:E4
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/OsOPTGA7yVUP57vxynk7hwBDKuQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.25.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:e5:99:30:68:43:49:62:57:5d:74:dc:5e:0c:40:1a:aa:c0:
         47:e4:92:ca:fc:1b:07:c6:ce:88:24:21:22:cf:5a:b6:39:90:
         88:25:b5:ee:e3:b5:34:dd:af:a8:70:1e:7c:3e:19:af:66:21:
         63:fd:b9:f4:cd:54:4e:09:70:a8:e0:d5:a0:d6:81:72:5e:71:
         d0:2c:0b:f6:3c:67:45:60:e9:8c:1d:2b:2b:fe:c7:37:7a:94:
         18:c0:3d:a5:a6:bd:71:7e:6e:df:95:d6:c0:16:e0:5e:3d:92:
         37:27:0e:61:0e:5d:2d:5e:d0:9c:43:f8:35:2e:22:08:6e:b0:
         75:87:ae:a2:63:9e:c8:5e:6e:4e:e1:74:38:5e:42:3f:81:64:
         23:40:ef:94:98:45:33:cd:67:1a:c7:2f:c9:9a:56:f3:68:bc:
         8c:3a:8f:18:df:95:41:50:3e:b6:5e:65:81:6f:92:67:0a:b8:
         23:b2:cb:ee:9a:29:70:e0:70:1f:4b:51:92:b2:f4:04:06:2c:
         35:4a:a4:94:b2:74:f2:c7:14:09:00:7b:13:38:d5:6a:6d:8f:
         ed:ae:3a:4b:fc:22:03:53:79:31:eb:b0:eb:f8:13:7d:94:9e:
         75:bf:8a:88:8a:c0:f6:58:84:83:e8:42:0f:da:84:db:9d:b3:
         4d:6c:98:4f
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MjM1MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNBQzM4RjRDNjAzQkM5
NTUwRkU3QkJGMUNBNzkzQjg3MDA0MzJBRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsB88TfqI2rI5AON7jDt6b/Fs5JeBGnNMVwWlhSPEAHMmYDkr7
rclT0oE5npxPdLtyteFPspVvSjWGp1605bGNHGEGfqrt/Lt221H+MVmdnd1ng3WU
/9iIcEgHln3knaprUpXpqomvtwV26GB7xdgFJop9h+TLtddSwlLKsexmYnCFflG4
iZ4QWCE+9M4litBELQQ12MXxLj6cRy5Yuwhu2W7Qcl6p4Y7wLwGubytybA+gO3N0
Z5M71r8/daxs89JlA/bFj7H8fnGTOcpOaGT05kugByvvq+JfmYHWJAZPwgrYXNP3
fm/r1TzDKQh2rhGkV2vWipWD1JBBO4xrv36pAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUOsOPTGA7yVUP57vxynk7hwBDKuQwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9Pc09QVEdBN3lWVVA1N3Z4eW5r
N2h3QkRLdVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoxkA
MA0GCSqGSIb3DQEBCwUAA4IBAQCe5ZkwaENJYldddNxeDEAaqsBH5JLK/BsHxs6I
JCEiz1q2OZCIJbXu47U03a+ocB58PhmvZiFj/bn0zVROCXCo4NWg1oFyXnHQLAv2
PGdFYOmMHSsr/sc3epQYwD2lpr1xfm7fldbAFuBePZI3Jw5hDl0tXtCcQ/g1LiII
brB1h66iY57IXm5O4XQ4XkI/gWQjQO+UmEUzzWcaxy/JmlbzaLyMOo8Y35VBUD62
XmWBb5JnCrgjssvumilw4HAfS1GSsvQEBiw1SqSUsnTyxxQJAHsTONVqbY/trjpL
/CIDU3kx67Dr+BN9lJ51v4qIisD2WISD6EIP2oTbnbNNbJhP
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:26 2026 by rpki-client