This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/PMx5pFpDPmu1UoFym5zAfhB3xsg.roa
File:                     PMx5pFpDPmu1UoFym5zAfhB3xsg.roa (raw, json)
Hash identifier:          sm1yOJSayl9wrAa9AowuoLKgKxdhUb9SFmj/mskn5o4=
Subject key identifier:   3C:CC:79:A4:5A:43:3E:6B:B5:52:81:72:9B:9C:C0:7E:10:77:C6:C8
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1146
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/PMx5pFpDPmu1UoFym5zAfhB3xsg.roa
Signing time:             Tue 03 Feb 2026 03:19:19 +0000
ROA not before:           Tue 03 Feb 2026 03:19:19 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        192.192.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4422 (0x1146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 03:19:19 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3CCC79A45A433E6BB55281729B9CC07E1077C6C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:13:01:0b:b6:c0:51:92:82:c3:75:b8:e5:d1:
                    d5:04:c5:37:5f:65:07:cb:b6:44:fc:16:11:eb:3f:
                    43:97:1f:d8:47:5b:a9:a7:e3:7d:20:71:ee:72:9a:
                    78:fd:cd:f2:a8:24:90:60:9b:9c:b7:24:d6:4f:94:
                    8d:17:f8:b5:52:3e:9a:79:84:60:10:d8:4d:dd:fc:
                    3b:b9:bc:47:27:28:93:92:21:d4:67:80:e8:91:22:
                    6a:c8:d8:6b:ab:6d:4e:e4:38:b0:8e:37:27:44:45:
                    71:7a:08:6f:d1:95:75:15:ec:41:91:f1:08:8f:ed:
                    12:81:07:5a:e0:2a:4b:41:f9:0a:17:36:4a:a8:41:
                    3f:4f:b0:ad:8a:8f:54:8d:15:81:09:af:32:26:2b:
                    98:df:3d:0f:48:0d:3f:a0:f6:b2:ed:bf:22:95:14:
                    4a:ea:50:cb:61:9f:81:0c:4d:57:45:88:1b:1e:14:
                    cb:d2:71:f3:67:95:e2:7f:f9:1a:0f:d0:8d:52:4a:
                    41:a3:1a:26:0d:3a:43:c6:e1:41:03:d9:32:f0:28:
                    f0:ff:14:32:10:8e:fb:97:96:20:12:31:96:ad:f5:
                    08:e2:c3:26:8f:20:c7:4c:7d:66:34:57:ff:fe:e7:
                    5f:e0:64:76:66:3a:94:95:63:ed:26:9b:96:84:79:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CC:79:A4:5A:43:3E:6B:B5:52:81:72:9B:9C:C0:7E:10:77:C6:C8
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/PMx5pFpDPmu1UoFym5zAfhB3xsg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:83:9f:f4:15:1d:a0:03:41:66:d2:fa:44:62:e3:11:41:7d:
         ad:70:cf:db:6a:78:c1:84:b1:33:74:9e:29:2f:ea:c9:3c:0a:
         e6:79:b7:f3:ee:66:0e:39:5e:e0:66:3a:1a:03:7d:b4:8a:37:
         ef:b2:7a:9a:64:2c:ce:86:aa:d8:20:cd:75:76:74:f0:31:7c:
         03:0a:1a:92:14:09:63:c2:6b:2e:84:2d:89:36:27:31:0b:5e:
         90:42:32:39:94:c7:0e:f5:4f:5b:3e:69:ae:06:72:79:cf:68:
         6c:bd:32:60:85:7d:96:ff:5b:81:af:63:6a:2f:a5:b0:58:8d:
         f8:61:4f:60:3d:16:f3:a3:80:40:83:57:ca:1f:b5:10:13:e4:
         05:6a:8b:8d:d7:d2:4c:1a:bc:50:59:de:bb:86:94:35:4a:96:
         28:fe:8e:77:ca:91:b4:f6:a7:11:f1:f8:45:9c:4a:79:85:15:
         c7:f2:59:9a:8d:79:df:a7:f0:4d:53:94:d3:1a:dd:43:ca:e7:
         61:42:9c:75:6e:d5:8c:32:34:37:33:10:59:e6:21:58:87:a9:
         18:89:7b:2c:4f:cd:40:02:cf:41:5b:4f:df:5b:0c:00:09:76:
         0f:bb:ce:d8:98:b3:c1:68:bd:34:e2:d4:39:0f:30:ae:f6:41:
         9e:06:6e:db
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNjAyMDMw
MzE5MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNDQ0M3OUE0NUE0MzNF
NkJCNTUyODE3MjlCOUNDMDdFMTA3N0M2QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsEwELtsBRkoLDdbjl0dUExTdfZQfLtkT8FhHrP0OXH9hHW6mn
430gce5ymnj9zfKoJJBgm5y3JNZPlI0X+LVSPpp5hGAQ2E3d/Du5vEcnKJOSIdRn
gOiRImrI2GurbU7kOLCONydERXF6CG/RlXUV7EGR8QiP7RKBB1rgKktB+QoXNkqo
QT9PsK2Kj1SNFYEJrzImK5jfPQ9IDT+g9rLtvyKVFErqUMthn4EMTVdFiBseFMvS
cfNnleJ/+RoP0I1SSkGjGiYNOkPG4UED2TLwKPD/FDIQjvuXliASMZat9QjiwyaP
IMdMfWY0V//+51/gZHZmOpSVY+0mm5aEea4PAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUPMx5pFpDPmu1UoFym5zAfhB3xsgwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9QTXg1cEZwRFBtdTFVb0Z5bTV6
QWZoQjN4c2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMC+
MA0GCSqGSIb3DQEBCwUAA4IBAQA9g5/0FR2gA0Fm0vpEYuMRQX2tcM/banjBhLEz
dJ4pL+rJPArmebfz7mYOOV7gZjoaA320ijfvsnqaZCzOhqrYIM11dnTwMXwDChqS
FAljwmsuhC2JNicxC16QQjI5lMcO9U9bPmmuBnJ5z2hsvTJghX2W/1uBr2NqL6Ww
WI34YU9gPRbzo4BAg1fKH7UQE+QFaouN19JMGrxQWd67hpQ1SpYo/o53ypG09qcR
8fhFnEp5hRXH8lmajXnfp/BNU5TTGt1DyudhQpx1btWMMjQ3MxBZ5iFYh6kYiXss
T81AAs9BW0/fWwwACXYPu87YmLPBaL004tQ5DzCu9kGeBm7b
-----END CERTIFICATE-----
Generated at Thu Feb 12 18:38:28 2026 by rpki-client