This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/SPphzStB0oJlgIV-CrnME_FMAgo.roa
File:                     SPphzStB0oJlgIV-CrnME_FMAgo.roa (raw, json)
Hash identifier:          hc/hSdtiFeyxtwZULJoTj6p2RJQlJ8Caph5iIXaVSms=
Subject key identifier:   48:FA:61:CD:2B:41:D2:82:65:80:85:7E:0A:B9:CC:13:F1:4C:02:0A
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       10ED
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/SPphzStB0oJlgIV-CrnME_FMAgo.roa
Signing time:             Tue 03 Feb 2026 02:33:02 +0000
ROA not before:           Tue 03 Feb 2026 02:33:02 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        140.133.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4333 (0x10ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 02:33:02 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=48FA61CD2B41D2826580857E0AB9CC13F14C020A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:ea:38:86:10:51:f1:d0:0a:a7:36:35:61:
                    27:8d:b2:41:24:68:cc:cf:81:d5:fe:51:ba:83:47:
                    2c:1f:57:6d:1b:01:af:fe:00:6a:9a:13:57:29:ed:
                    77:05:04:45:35:8d:8e:d6:4e:4f:7f:6d:19:8f:07:
                    cb:48:ba:be:d4:48:f5:39:84:89:4b:f4:f8:a9:a4:
                    4b:24:8e:f9:5d:79:08:c7:40:7e:d4:7a:cd:e0:81:
                    82:97:f7:55:e7:67:fe:25:8c:28:f4:24:3a:23:b5:
                    ca:47:68:0b:2e:54:99:4e:60:13:ef:bf:81:d6:62:
                    8a:9a:cd:f3:e4:26:40:a3:0a:31:69:fb:2d:ea:0f:
                    c2:45:b6:27:bd:ec:cf:93:d3:5a:2b:90:0e:a2:73:
                    98:0a:89:0d:d0:66:6b:ac:fa:83:a1:bb:da:f6:8e:
                    9b:24:c6:37:61:02:33:dd:2b:e2:96:7b:67:45:b0:
                    39:8f:06:ab:ed:bb:48:d1:73:5a:79:e7:ac:aa:0e:
                    f4:7b:ec:60:e8:8b:4f:00:42:6b:99:d5:ed:25:b4:
                    00:63:61:ba:7e:e3:c7:8c:cc:d0:a1:8d:7c:0a:45:
                    71:be:e9:f2:91:bb:8e:b4:ba:38:4f:53:69:06:a3:
                    11:1d:2e:5e:36:1b:ad:82:c2:7d:e3:96:f3:80:11:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FA:61:CD:2B:41:D2:82:65:80:85:7E:0A:B9:CC:13:F1:4C:02:0A
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/SPphzStB0oJlgIV-CrnME_FMAgo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.133.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:02:18:73:96:1a:96:0a:ae:a3:d4:b0:6b:66:6f:f7:bf:a3:
         42:24:73:30:2a:cc:89:5d:d9:84:86:12:96:26:3f:c8:0c:bc:
         89:94:7a:71:47:ff:8c:c2:79:4a:f5:86:9b:f8:8f:5d:b3:46:
         c4:a0:8b:63:a1:6a:35:bb:ad:c3:94:4f:ff:98:d7:87:44:f6:
         33:e5:ba:be:c4:11:1f:72:cb:7e:29:a4:e4:d9:92:05:4a:a0:
         1c:e2:17:f4:07:df:99:12:ee:03:3d:1e:76:d9:d0:fd:8c:cd:
         e0:3d:ea:71:01:d1:37:03:04:a4:2c:c5:79:1f:2a:a1:9a:b8:
         73:96:39:40:e6:01:2f:75:3b:43:95:9a:f6:be:0f:9e:0d:6e:
         6a:f2:ee:d4:7c:0a:fd:da:e6:c9:c6:56:f6:eb:b3:df:8c:20:
         66:95:d9:7b:a4:13:60:c5:e1:c8:1c:c2:55:ae:84:d3:60:a4:
         26:7d:d8:fb:f5:6f:1b:c4:02:09:2f:8e:7f:45:4b:01:59:41:
         2a:d3:b6:0a:49:f3:ec:a8:cc:56:0e:26:68:5b:e2:bf:c1:eb:
         53:87:ef:84:1f:01:12:ad:9b:93:4a:27:32:7c:a4:9c:67:76:
         2a:a1:23:64:5c:46:f7:88:d4:08:af:12:5f:bf:b6:ca:d0:4d:
         d7:c5:aa:2c
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNjAyMDMw
MjMzMDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ4RkE2MUNEMkI0MUQy
ODI2NTgwODU3RTBBQjlDQzEzRjE0QzAyMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7oOo4hhBR8dAKpzY1YSeNskEkaMzPgdX+UbqDRywfV20bAa/+
AGqaE1cp7XcFBEU1jY7WTk9/bRmPB8tIur7USPU5hIlL9PippEskjvldeQjHQH7U
es3ggYKX91XnZ/4ljCj0JDojtcpHaAsuVJlOYBPvv4HWYoqazfPkJkCjCjFp+y3q
D8JFtie97M+T01orkA6ic5gKiQ3QZmus+oOhu9r2jpskxjdhAjPdK+KWe2dFsDmP
Bqvtu0jRc1p556yqDvR77GDoi08AQmuZ1e0ltABjYbp+48eMzNChjXwKRXG+6fKR
u460ujhPU2kGoxEdLl42G62Cwn3jlvOAEUWfAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUSPphzStB0oJlgIV+CrnME/FMAgowHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9TUHBoelN0QjBvSmxnSVYtQ3Ju
TUVfRk1BZ28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjIVY
MA0GCSqGSIb3DQEBCwUAA4IBAQAlAhhzlhqWCq6j1LBrZm/3v6NCJHMwKsyJXdmE
hhKWJj/IDLyJlHpxR/+MwnlK9Yab+I9ds0bEoItjoWo1u63DlE//mNeHRPYz5bq+
xBEfcst+KaTk2ZIFSqAc4hf0B9+ZEu4DPR522dD9jM3gPepxAdE3AwSkLMV5Hyqh
mrhzljlA5gEvdTtDlZr2vg+eDW5q8u7UfAr92ubJxlb267PfjCBmldl7pBNgxeHI
HMJVroTTYKQmfdj79W8bxAIJL45/RUsBWUEq07YKSfPsqMxWDiZoW+K/wetTh++E
HwESrZuTSicyfKScZ3YqoSNkXEb3iNQIrxJfv7bK0E3Xxaos
-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:53 2026 by rpki-client