This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/TbI8Qotuc5OLrkndhvW-IBnb81c.roa
File:                     TbI8Qotuc5OLrkndhvW-IBnb81c.roa (raw, json)
Hash identifier:          JFlrIkhHyQ7gstc19fQIpr0Si9onRV7shYyfKEndROA=
Subject key identifier:   4D:B2:3C:42:8B:6E:73:93:8B:AE:49:DD:86:F5:BE:20:19:DB:F3:57
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       11CD
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/TbI8Qotuc5OLrkndhvW-IBnb81c.roa
Signing time:             Fri 06 Feb 2026 01:01:26 +0000
ROA not before:           Fri 06 Feb 2026 01:01:26 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        192.192.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4557 (0x11cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  6 01:01:26 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4DB23C428B6E73938BAE49DD86F5BE2019DBF357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:33:9f:e3:f1:8b:f2:68:bc:c9:0e:0d:1e:
                    79:29:c6:4e:89:13:75:96:9d:6e:48:91:00:ce:83:
                    5a:a7:53:6b:6b:55:af:be:54:b0:e0:bb:b1:80:a2:
                    24:1b:79:f9:d1:b9:90:f0:d2:64:84:62:5f:7b:b1:
                    88:e1:15:84:f2:be:40:ab:9e:e7:33:04:d6:12:c4:
                    ad:4a:06:ca:1a:51:c4:d8:5f:f0:5a:9f:e0:c6:c3:
                    5d:cb:48:5f:10:c9:4f:be:76:d4:fc:75:79:22:f8:
                    79:e6:dd:fe:64:1a:27:99:7d:57:32:8d:a6:bf:18:
                    b7:cb:9c:b8:0b:fe:fc:97:24:57:e7:3a:4e:9d:e6:
                    fc:91:de:94:6d:8b:f8:98:e3:27:87:89:ff:4c:73:
                    7c:15:c9:b2:e8:fb:5c:d6:46:f8:6e:7b:a4:4d:94:
                    dc:08:b8:7d:bc:a8:73:b1:a4:5d:49:0b:92:08:70:
                    04:eb:42:bb:ae:80:96:e9:3d:ac:fd:38:b4:bf:46:
                    c4:b3:b6:7c:0d:bd:5d:88:e3:15:57:68:12:90:96:
                    4a:fe:ca:d0:eb:1b:ea:c4:1b:12:42:d6:5f:d9:86:
                    45:95:18:78:5e:e8:69:f2:bc:7a:c1:4f:cc:51:1a:
                    73:5f:aa:97:7c:76:51:e4:53:3d:7a:34:d8:1c:ae:
                    f8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B2:3C:42:8B:6E:73:93:8B:AE:49:DD:86:F5:BE:20:19:DB:F3:57
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/TbI8Qotuc5OLrkndhvW-IBnb81c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:80:98:d4:5c:14:aa:1e:23:6f:a6:26:8a:78:49:51:8e:
         62:82:cb:d4:93:39:e3:ce:1e:78:12:80:9b:95:05:ff:32:1d:
         6b:33:52:15:98:c0:99:93:da:df:ca:76:ba:ee:98:99:f9:3b:
         b2:d5:7a:cb:74:43:99:38:4a:e5:a5:2e:06:b9:0c:d9:ee:83:
         e8:eb:5f:87:a1:24:4f:f5:35:35:3d:57:69:91:f7:4c:be:5c:
         ad:30:fe:6e:6d:41:1d:88:ed:97:7d:ef:35:82:85:61:77:ee:
         89:14:ff:6a:81:e2:6d:54:45:48:da:29:89:9c:4d:e3:9a:f4:
         ee:42:3b:de:ff:36:17:fa:0d:99:43:3c:50:dd:92:94:67:80:
         a9:44:42:c3:91:e1:e1:d8:1c:1c:52:2e:c4:10:0f:11:75:90:
         28:b5:43:70:b8:55:16:e7:1f:1a:85:c2:8a:00:db:39:28:7e:
         50:fe:cc:25:30:d8:49:0f:76:95:b7:e3:6a:4a:0e:4c:3c:bf:
         f0:ec:60:2f:0e:7c:d2:20:f7:47:dc:57:fe:ec:f0:4f:60:f1:
         6e:52:63:69:37:c1:7e:89:ec:c1:12:33:f2:46:75:4b:5f:04:
         70:8d:87:05:09:4e:ac:48:7c:3c:b3:6e:30:12:7d:8a:b2:5f:
         31:9f:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:51 2026 by rpki-client