This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Se8JR_SEImoNHn7JS_ekp2mPfNc.roa
File:                     Se8JR_SEImoNHn7JS_ekp2mPfNc.roa (raw, json)
Hash identifier:          /Kuy9XsmfVSeF+Mcs0NBovmQbSsgQ4WC6spq2WdokmU=
Subject key identifier:   49:EF:09:47:F4:84:22:6A:0D:1E:7E:C9:4B:F7:A4:A7:69:8F:7C:D7
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1087
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Se8JR_SEImoNHn7JS_ekp2mPfNc.roa
Signing time:             Tue 03 Feb 2026 01:51:58 +0000
ROA not before:           Tue 03 Feb 2026 01:51:58 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        192.192.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4231 (0x1087)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 01:51:58 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=49EF0947F484226A0D1E7EC94BF7A4A7698F7CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:7a:8c:e2:6f:be:46:0a:d6:5f:36:2a:13:
                    26:95:e8:db:3e:3d:ca:bb:30:55:31:f8:eb:bc:3b:
                    b5:99:c3:0c:7f:ab:fe:48:23:c1:28:05:87:26:b7:
                    31:23:3e:89:02:8d:37:67:c6:40:0b:99:87:0c:29:
                    12:84:3e:9e:45:23:db:8d:6c:cf:85:cb:26:ba:b9:
                    3d:1d:cf:d3:f1:22:52:cd:76:f8:a7:36:a6:3e:bf:
                    5e:49:04:c4:1e:97:f2:42:fa:45:ce:e0:4c:6c:14:
                    d9:b5:b9:fb:86:1f:30:69:da:50:e1:7b:e2:56:5d:
                    9a:e6:b2:b5:37:21:b2:67:c2:24:cf:dc:e0:f8:3f:
                    84:ea:84:e9:0e:f7:58:a9:2e:3a:22:8d:c4:2b:1d:
                    c1:a6:c8:a2:2d:36:6c:26:d7:a7:4f:7d:2f:5b:9e:
                    db:cb:ba:30:0d:77:a9:82:db:b1:df:a7:77:25:ec:
                    61:26:90:c2:26:3f:ae:01:30:aa:5f:ae:1c:9f:07:
                    5c:4d:ae:cb:06:b9:70:ba:73:de:a4:40:ab:04:f7:
                    c8:be:a9:74:97:8d:87:16:d5:d7:72:f1:59:1b:c6:
                    4d:f5:6e:23:1e:71:fb:c0:24:57:23:0e:99:78:be:
                    37:cb:95:26:cf:ca:ed:39:53:cd:75:0f:ea:5a:4a:
                    af:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:09:47:F4:84:22:6A:0D:1E:7E:C9:4B:F7:A4:A7:69:8F:7C:D7
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Se8JR_SEImoNHn7JS_ekp2mPfNc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:89:52:fc:b2:8d:33:5a:2b:8a:94:c3:e1:69:4d:d4:d2:ca:
         56:fa:00:2f:5d:4c:d6:61:c9:1c:89:d9:3c:de:6d:d5:38:db:
         f8:a7:c0:bf:df:18:9a:19:59:32:3d:f3:c1:64:ae:36:e9:19:
         ef:6b:3c:fd:8c:fa:fe:1f:19:13:77:9a:74:e5:f5:47:c2:a4:
         5b:20:47:d7:3e:79:6e:d5:0b:66:fc:8d:f2:c9:b2:a4:91:79:
         a8:5e:09:0a:f7:4e:b8:3e:a9:a2:06:1e:a2:75:43:ff:9a:0c:
         45:77:65:61:d8:a8:b8:da:1f:f8:4e:d2:8e:79:4b:23:2d:0b:
         cd:5f:3b:0c:72:df:e2:82:cf:7e:10:ec:66:65:9e:79:a2:cc:
         4a:ab:34:a0:08:1b:c4:6c:a9:33:5b:f6:8a:e3:da:2c:33:47:
         15:3b:5f:71:31:95:db:f8:f5:cf:b9:e1:48:a3:cc:e0:79:59:
         41:a3:52:d6:f3:7b:16:f3:89:f2:89:de:cc:2c:7e:ab:a5:73:
         4d:c7:11:92:d6:b0:57:ef:a9:1d:d2:e5:9c:32:37:af:ac:30:
         2c:0b:ea:5d:31:64:52:20:93:0e:ba:5c:a2:fc:ee:8c:a3:39:
         bf:13:41:53:f4:24:06:94:db:dc:d0:e8:eb:da:71:c0:d9:2d:
         1f:f0:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:49 2026 by rpki-client