This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/VPzhZk0dFYw1KYI5COQSLcr59NI.roa
File:                     VPzhZk0dFYw1KYI5COQSLcr59NI.roa (raw, json)
Hash identifier:          NPVCtH6QiUsulvRDd0OOQ9Kcvcr5935k/dWk+p9pYrY=
Subject key identifier:   54:FC:E1:66:4D:1D:15:8C:35:29:82:39:08:E4:12:2D:CA:F9:F4:D2
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12B6
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/VPzhZk0dFYw1KYI5COQSLcr59NI.roa
Signing time:             Tue 03 Feb 2026 08:52:34 +0000
ROA not before:           Tue 03 Feb 2026 08:52:34 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.71.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4790 (0x12b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:52:34 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=54FCE1664D1D158C3529823908E4122DCAF9F4D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:c6:36:4a:63:46:8e:68:c1:b2:a1:dd:e5:
                    85:58:0b:ef:cf:e1:9a:9b:e9:93:35:3a:10:a8:60:
                    91:d8:48:71:a9:72:74:bc:67:f2:35:dd:63:88:62:
                    c4:51:c4:80:89:1d:37:c4:e7:7f:e6:fd:a3:17:b5:
                    46:1d:6e:60:85:ad:a0:73:9a:be:84:d1:b3:8d:0b:
                    fe:d1:1b:be:ca:78:23:6c:d4:c6:c9:51:e9:80:2d:
                    22:d1:1b:c7:6b:ac:43:7d:54:0a:6e:87:55:9f:6c:
                    77:57:5b:94:71:7a:39:fd:1b:95:20:28:bc:b6:bf:
                    31:ea:71:4b:e6:a2:9e:38:b8:92:9b:52:c7:ac:56:
                    2a:3d:4f:0b:ec:ba:8c:7d:71:5a:92:fa:95:d6:5f:
                    9d:9e:24:46:69:be:b9:08:91:14:da:c0:a2:cc:a2:
                    40:b9:be:c0:e1:33:8f:6b:71:1e:2d:eb:16:58:1c:
                    51:11:56:06:ad:bc:8d:3c:25:49:43:26:46:53:fe:
                    5c:fe:da:19:4d:af:e7:36:2b:dd:96:8e:39:de:fe:
                    9b:4b:af:27:8f:52:e2:cb:04:64:1c:f4:08:2f:23:
                    cb:5f:a0:75:44:a6:8b:24:74:60:51:4d:4a:3e:0e:
                    36:77:3b:de:89:0b:65:d8:3a:bc:5d:c3:0c:42:88:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FC:E1:66:4D:1D:15:8C:35:29:82:39:08:E4:12:2D:CA:F9:F4:D2
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/VPzhZk0dFYw1KYI5COQSLcr59NI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d0:6e:8c:58:cf:56:c6:da:87:a9:59:90:eb:c4:71:ca:f2:
         5a:9a:5a:0b:e0:05:f5:67:29:5c:44:4e:5a:82:59:05:0a:b0:
         8e:3b:c0:7e:e2:72:23:84:ae:2e:ef:88:6d:9a:1a:31:8a:1c:
         14:95:a3:a9:9c:88:a5:80:66:55:fb:c1:43:6b:7b:fb:17:91:
         65:ee:a0:e0:18:da:17:34:3a:27:93:a7:d1:50:83:bd:f6:b1:
         84:ed:37:6b:3f:36:ad:5f:da:e9:1f:eb:5e:dd:37:d1:78:6b:
         5e:38:53:4f:10:0a:bb:13:25:51:23:d8:3a:85:2c:1c:54:c7:
         78:57:bb:2b:ef:8b:59:6c:29:25:95:6c:18:57:5f:8b:15:40:
         0a:99:d0:34:53:f2:13:50:84:46:0c:7c:8d:4d:3a:59:d3:ed:
         71:a7:e7:e5:2e:e1:24:c4:93:63:1a:7e:6b:b8:99:45:f5:27:
         cf:f8:3c:44:7b:b4:11:f7:cb:06:2d:a7:ac:40:ee:70:3a:ba:
         71:f0:94:9e:e7:47:bf:13:ba:57:69:4f:5d:3d:9e:16:32:09:
         31:84:19:9e:d7:bf:15:f2:6f:03:b5:95:1f:12:71:26:e6:a8:
         f2:4a:91:0f:6f:e2:79:58:f9:aa:48:24:9b:b4:82:f4:c0:52:
         49:44:94:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:30 2026 by rpki-client