This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/P4x4Y7kpJhOv20q2fWma6IT54D0.roa
File:                     P4x4Y7kpJhOv20q2fWma6IT54D0.roa (raw, json)
Hash identifier:          oWbZ4P73NDRzia8GKS0gcTg+wghrFy0qj69nI2DfjQU=
Subject key identifier:   3F:8C:78:63:B9:29:26:13:AF:DB:4A:B6:7D:69:9A:E8:84:F9:E0:3D
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1135
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/P4x4Y7kpJhOv20q2fWma6IT54D0.roa
Signing time:             Tue 03 Feb 2026 01:59:36 +0000
ROA not before:           Tue 03 Feb 2026 01:59:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.68.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4405 (0x1135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 01:59:36 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3F8C7863B9292613AFDB4AB67D699AE884F9E03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:18:59:57:f5:66:82:b3:a1:7a:23:ba:5b:
                    4e:c1:0a:36:e7:d8:f6:6e:80:92:d2:76:3b:5c:0d:
                    49:a4:77:ae:1d:ae:6e:88:31:c2:82:88:8e:da:bf:
                    be:cb:de:13:ae:5e:5c:f4:bb:d7:57:66:d3:7d:6e:
                    74:67:d5:53:22:1b:2a:d6:d7:01:3e:a4:52:11:c8:
                    ec:52:f3:d3:38:96:c8:0f:80:31:06:84:9a:50:9b:
                    00:34:72:92:02:53:93:86:c1:52:10:f0:62:3d:20:
                    50:7c:9a:c8:32:20:6c:93:88:9d:01:c1:0c:7c:49:
                    d1:f8:7a:d1:a4:f9:55:72:d3:95:9a:41:06:78:0f:
                    52:2a:0b:65:13:5f:5e:b8:a8:70:a5:c1:95:40:d8:
                    ea:5c:42:17:0b:e4:a7:93:23:fb:cc:29:04:8b:f1:
                    b7:6b:70:67:77:76:3e:1b:40:6a:fa:f2:a4:53:02:
                    2a:8e:e6:54:42:7c:ff:df:bc:0f:76:07:f8:45:f1:
                    0b:54:31:0d:1a:42:84:81:c9:56:2a:1c:c9:5f:35:
                    da:fc:28:2e:f2:24:5e:49:a4:52:29:5d:d8:25:ba:
                    c4:49:b1:bb:06:09:de:02:c4:5e:b2:73:f0:cb:64:
                    ac:cf:98:75:d1:b6:1c:5b:f9:07:f6:ae:16:ba:c4:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8C:78:63:B9:29:26:13:AF:DB:4A:B6:7D:69:9A:E8:84:F9:E0:3D
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/P4x4Y7kpJhOv20q2fWma6IT54D0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:2d:62:2e:18:04:83:a5:f9:f2:9b:db:82:f3:5c:f3:3f:
         95:f5:dd:55:69:00:de:0b:fe:f2:d8:03:fd:7f:d3:3a:96:b2:
         63:4b:74:ce:92:3c:f7:34:2f:e9:8c:a8:c6:d4:13:2f:60:02:
         15:25:ab:61:dc:ba:9d:17:41:b8:da:3d:6d:36:5f:20:0e:c6:
         06:23:83:3d:ef:a9:af:9d:a3:d6:ef:00:93:cd:f9:1d:0d:54:
         e1:06:2e:e6:59:0d:a5:8b:5b:ab:45:d9:07:6a:5c:c6:55:68:
         15:bc:73:3b:b6:3a:51:01:59:ff:38:7b:73:31:83:3c:e8:64:
         b9:00:f8:8b:da:de:30:d7:97:bc:8e:2c:94:41:f3:d5:b0:b3:
         3d:9f:fd:53:e3:71:db:de:13:4a:9c:83:19:65:25:df:e7:0e:
         c7:fa:43:e2:53:fd:74:3f:88:1f:a2:04:41:2e:56:c3:3b:f7:
         79:f2:6c:be:41:14:50:72:7d:6a:40:7e:04:34:58:de:63:f6:
         b3:49:b3:63:9f:67:cc:a0:e9:54:13:d7:e5:ec:a5:60:b1:7d:
         c4:80:f5:14:e0:90:bd:f6:23:4c:05:ac:74:9d:a8:0f:e0:1e:
         dd:60:60:4c:7a:60:96:3b:d6:72:3b:1b:e1:b2:97:10:c8:c4:
         3d:0f:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:57 2026 by rpki-client