This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/U7uBe_dJY0QqxGHUBcCfMZzoDsM.roa
File:                     U7uBe_dJY0QqxGHUBcCfMZzoDsM.roa (raw, json)
Hash identifier:          yqQ5JzhuuEPAdVg+3pP75RA+2el8ycrWdt/E6Uh91cU=
Subject key identifier:   53:BB:81:7B:F7:49:63:44:2A:C4:61:D4:05:C0:9F:31:9C:E8:0E:C3
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1211
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/U7uBe_dJY0QqxGHUBcCfMZzoDsM.roa
Signing time:             Tue 03 Feb 2026 02:56:31 +0000
ROA not before:           Tue 03 Feb 2026 02:56:31 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        203.72.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4625 (0x1211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:56:31 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=53BB817BF74963442AC461D405C09F319CE80EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:83:bc:e4:19:fe:74:a7:b4:0d:a4:53:b1:
                    f9:bc:74:27:d2:70:8d:1e:4a:a3:9a:44:3a:e4:70:
                    b9:26:31:03:68:ab:df:ba:08:ab:5c:cb:1b:c8:68:
                    64:6b:f0:1e:2f:58:9f:1f:bb:0a:11:e3:76:3d:fd:
                    d8:82:16:52:d0:2d:2f:fe:e4:d7:c8:8c:09:8f:f5:
                    5d:b5:c3:e8:3d:76:8f:43:3d:23:b5:81:a5:7c:a3:
                    e5:d2:62:c8:f3:48:9b:6f:2b:ac:cf:87:af:f0:0e:
                    05:42:c2:a1:61:42:ce:d1:93:72:ec:c4:6f:cb:9e:
                    da:6f:25:a8:8f:f1:23:15:b0:59:36:f2:d8:ea:fb:
                    e0:f5:91:51:3f:31:7c:9e:14:ba:0e:75:57:8b:93:
                    01:51:02:ee:3d:b2:d5:08:92:84:f3:f2:90:95:77:
                    23:7e:a0:71:b9:28:fe:30:c1:5c:57:f3:8e:3b:08:
                    f7:87:a6:f3:55:e0:81:ab:18:3a:07:5f:3e:bc:42:
                    cb:33:84:f5:3f:f5:04:4d:5a:bc:f0:ea:21:81:66:
                    34:b6:5c:7a:3f:99:7c:9a:e4:c1:c9:7e:4e:e5:73:
                    95:51:b0:07:71:dc:e1:6c:9b:0e:df:6f:04:73:02:
                    64:61:d6:1e:8b:66:cb:98:1b:b0:33:50:94:83:09:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BB:81:7B:F7:49:63:44:2A:C4:61:D4:05:C0:9F:31:9C:E8:0E:C3
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/U7uBe_dJY0QqxGHUBcCfMZzoDsM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:55:90:61:6b:f7:af:6d:4f:1e:78:3b:39:d8:7b:2c:24:6d:
         a9:97:34:cc:94:4b:c9:bc:28:7d:5c:04:be:6d:18:3f:f3:a8:
         a5:53:6c:df:1d:33:e2:f9:d9:63:f3:5b:59:c8:f2:04:17:51:
         01:1a:33:73:5b:b5:ab:de:b3:8a:a0:fe:03:7c:78:04:9d:58:
         77:c2:4f:87:d3:04:84:75:1b:45:e5:8c:6f:b2:cf:6a:5d:f8:
         62:73:05:f6:bf:93:e8:69:32:48:d9:58:15:9d:b7:36:c0:c3:
         53:ee:33:8e:5a:cd:eb:18:91:f3:b2:8a:4e:70:a3:27:f9:24:
         09:31:5c:1a:bc:6a:d1:f5:eb:68:47:21:b8:9c:ee:23:dd:ef:
         ed:51:7a:d4:e2:15:bd:ec:e6:1a:18:41:2a:7a:3a:c8:b7:e9:
         19:05:72:24:d0:6d:3b:01:b8:9c:f9:e6:7c:f6:7f:04:63:93:
         0f:ba:60:81:7b:f2:4a:80:e6:ba:db:36:dd:6f:c6:84:4f:44:
         b8:f8:64:8f:f2:34:96:c5:35:7f:c8:ac:4b:85:0c:1d:91:e5:
         c4:02:ae:7a:06:bc:62:9a:03:de:b5:f1:e0:06:8e:ff:2d:3c:
         c0:d2:f6:e8:52:2e:d4:de:42:21:5b:85:6e:92:cf:c1:92:65:
         b7:58:3b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:29 2026 by rpki-client