This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/TNZMgtjTK7wHhq4Cr2EfdmT2C_U.roa
File:                     TNZMgtjTK7wHhq4Cr2EfdmT2C_U.roa (raw, json)
Hash identifier:          o3yHp3zuVYU8IaScudAI94RkFeO9WDZz5+rYpYf1KHU=
Subject key identifier:   4C:D6:4C:82:D8:D3:2B:BC:07:86:AE:02:AF:61:1F:76:64:F6:0B:F5
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11A9
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/TNZMgtjTK7wHhq4Cr2EfdmT2C_U.roa
Signing time:             Tue 03 Feb 2026 02:30:10 +0000
ROA not before:           Tue 03 Feb 2026 02:30:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        120.106.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4521 (0x11a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:30:10 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4CD64C82D8D32BBC0786AE02AF611F7664F60BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:e6:f7:f7:65:c6:c3:19:72:84:b5:87:48:
                    85:2c:06:86:99:2c:01:c9:db:79:d5:b6:60:ba:3f:
                    10:c3:5b:15:94:0e:2f:0a:58:f6:7f:85:e5:f6:7c:
                    5b:fb:f3:cb:67:d8:10:cb:6c:3a:0c:6f:9e:44:a2:
                    ed:54:6a:a1:bf:77:db:70:5b:d3:66:de:4d:49:bf:
                    6c:aa:10:11:de:e1:82:80:14:63:6f:c2:e4:a6:0a:
                    87:27:3c:c1:22:b7:5d:12:92:67:28:20:d4:e3:28:
                    48:01:de:b6:9f:66:3a:d8:e2:01:b9:77:3a:63:53:
                    f7:82:8d:b1:6a:39:c7:e1:ac:2d:cf:1e:8b:31:db:
                    d7:98:af:4f:04:41:d1:a2:08:26:bb:f7:f0:a6:7e:
                    eb:c8:9f:f4:bc:0f:98:ce:a0:d6:5f:3c:8c:c7:29:
                    68:73:60:6e:bb:26:8e:a7:40:d6:bd:b2:2e:21:c9:
                    1f:54:16:3b:e6:42:88:2d:b2:ac:0c:8e:84:ed:96:
                    84:b4:bb:92:4d:51:e1:99:5d:cb:17:57:5f:ed:23:
                    5f:91:f5:4c:67:e7:20:7b:28:67:c9:16:58:28:aa:
                    3b:7d:f8:18:78:7c:f3:bc:51:6d:20:20:ff:61:24:
                    49:0d:7c:2e:50:e2:a9:f2:21:12:71:e6:bf:97:05:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D6:4C:82:D8:D3:2B:BC:07:86:AE:02:AF:61:1F:76:64:F6:0B:F5
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/TNZMgtjTK7wHhq4Cr2EfdmT2C_U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.106.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         94:63:87:49:c3:1b:e1:f7:19:b8:7f:70:0e:56:eb:fc:12:dc:
         96:34:e8:19:44:33:ed:de:7f:92:99:c2:09:f4:bc:cb:0d:f1:
         40:23:1b:b2:43:e6:09:f2:d2:48:76:f0:e0:f6:e0:6c:ac:e3:
         52:72:ec:90:b4:40:ae:66:86:35:09:ba:84:b3:31:b9:f1:9f:
         21:23:4b:f0:46:f8:a8:6f:84:92:e1:16:1b:63:c1:e0:0b:2c:
         56:56:75:fd:5f:14:28:c7:04:1f:6e:f2:39:2f:26:94:27:41:
         f4:c8:46:89:ab:52:27:e6:e5:75:f3:84:a0:16:27:ab:1d:45:
         15:61:77:a7:ff:08:9d:a7:c1:93:56:6b:37:76:f9:69:a1:47:
         93:1f:b3:76:15:0c:be:97:1c:af:5b:a4:c4:36:7c:93:2e:d9:
         73:9d:b2:6e:2d:e6:26:78:51:9d:79:e8:4d:e9:99:15:d8:c1:
         44:0a:4f:7a:ab:14:28:85:31:bf:0d:b3:ee:1f:4e:80:62:dc:
         a5:18:62:0f:31:ee:dd:5e:44:13:b0:c7:85:b4:10:1a:c5:15:
         a8:e3:97:07:40:87:52:92:fa:9d:f4:31:25:73:b5:a8:fd:38:
         4c:96:82:a1:f7:04:e5:18:7f:a4:0c:74:78:89:ee:02:b7:61:
         43:67:c8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:32 2026 by rpki-client