This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/VxTFxh2_vCnnqmUQhi1G0TBAfCQ.roa
File:                     VxTFxh2_vCnnqmUQhi1G0TBAfCQ.roa (raw, json)
Hash identifier:          G9s2mExL//dNXIuo5av0PxFDdBdb8xG6Jas6Vz5GpzM=
Subject key identifier:   57:14:C5:C6:1D:BF:BC:29:E7:AA:65:10:86:2D:46:D1:30:40:7C:24
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1147
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/VxTFxh2_vCnnqmUQhi1G0TBAfCQ.roa
Signing time:             Tue 03 Feb 2026 02:01:47 +0000
ROA not before:           Tue 03 Feb 2026 02:01:47 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.71.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4423 (0x1147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:01:47 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5714C5C61DBFBC29E7AA6510862D46D130407C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:3f:92:f3:64:c3:1d:9e:3a:c0:52:a4:d7:
                    8c:74:ff:35:52:c0:c3:cb:a1:25:f0:0d:99:b9:4e:
                    fc:e2:bc:7a:8a:2d:20:10:df:99:7f:c0:9b:7b:08:
                    c3:9c:c4:78:43:c3:0e:5e:e6:83:52:93:58:f3:df:
                    63:e8:94:0b:c3:df:d1:f7:2a:96:00:39:f8:77:ac:
                    75:e8:48:eb:7e:0b:b4:c6:e4:d6:2e:6b:15:d4:e0:
                    f2:f6:af:1e:ca:9d:6b:22:9b:65:33:8c:c0:d7:99:
                    c6:b5:40:34:11:67:11:fe:ca:11:b1:a4:75:81:bb:
                    ff:d3:87:f1:07:9a:18:22:38:88:73:f8:22:0b:90:
                    e4:c2:39:a5:ab:76:a6:27:53:22:d6:a9:58:a8:df:
                    47:b5:17:3b:ad:e7:e5:db:3c:c3:96:8a:e9:e8:bf:
                    31:6c:93:0d:d6:80:9c:5a:d5:be:af:1b:42:0c:d0:
                    c0:fc:99:26:11:c5:48:53:97:3f:55:3c:f3:6c:1f:
                    50:87:5a:c5:06:a1:23:c9:5c:00:80:9f:07:d8:65:
                    07:6b:d7:df:6e:a0:65:c1:69:8c:14:f3:44:60:96:
                    e8:b4:c7:23:8f:58:b3:51:64:0f:b6:a4:ab:d4:a6:
                    84:89:65:cd:5c:01:aa:61:1d:cd:e3:d1:65:85:32:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:14:C5:C6:1D:BF:BC:29:E7:AA:65:10:86:2D:46:D1:30:40:7C:24
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/VxTFxh2_vCnnqmUQhi1G0TBAfCQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:24:85:6d:d3:68:87:5b:48:67:cd:ab:ef:6b:20:bc:b4:
         f6:6a:e5:0b:f3:e9:09:5d:90:9a:19:51:93:f7:e5:27:c1:74:
         06:16:6f:f9:5c:6c:9d:25:a6:0c:a3:ac:32:d0:b9:7f:ca:d0:
         cf:e7:03:3d:c0:16:a7:f0:6c:8d:95:c4:2f:2d:b5:b7:6c:03:
         59:7f:bc:af:5b:4a:bc:92:73:98:a6:b4:79:18:61:0f:11:74:
         27:cb:dd:26:e0:0a:52:91:c1:63:0c:e1:56:67:0b:90:02:5f:
         aa:5a:53:4e:b4:d0:cb:4b:10:30:67:1c:32:96:63:b4:18:f7:
         4f:ee:a7:7e:00:d1:72:17:90:c2:cb:e0:a4:04:87:a7:28:a2:
         14:70:2a:e9:a6:9e:0a:f8:78:5d:67:30:64:b3:90:94:2a:26:
         5e:20:d0:b4:d8:ba:b7:32:57:4b:e1:aa:83:f5:24:1c:ad:6c:
         a9:27:43:af:c5:25:06:71:c5:a2:c1:e4:f7:51:b5:f7:23:92:
         e7:d0:52:0d:d5:7b:bf:2b:53:93:e5:e5:2a:d4:9b:c4:ba:a8:
         2d:b5:e9:47:ce:9c:0b:b3:d7:7c:f4:1c:2e:5b:f1:33:17:90:
         ef:d0:f7:b1:bb:dd:de:d7:c9:7a:22:e8:43:ae:d8:c2:42:57:
         b1:fd:7b:61
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MjAxNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU3MTRDNUM2MURCRkJD
MjlFN0FBNjUxMDg2MkQ0NkQxMzA0MDdDMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKmT+S82TDHZ46wFKk14x0/zVSwMPLoSXwDZm5TvzivHqKLSAQ
35l/wJt7CMOcxHhDww5e5oNSk1jz32PolAvD39H3KpYAOfh3rHXoSOt+C7TG5NYu
axXU4PL2rx7KnWsim2UzjMDXmca1QDQRZxH+yhGxpHWBu//Th/EHmhgiOIhz+CIL
kOTCOaWrdqYnUyLWqVio30e1Fzut5+XbPMOWiunovzFskw3WgJxa1b6vG0IM0MD8
mSYRxUhTlz9VPPNsH1CHWsUGoSPJXACAnwfYZQdr199uoGXBaYwU80Rglui0xyOP
WLNRZA+2pKvUpoSJZc1cAaphHc3j0WWFMuutAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUVxTFxh2/vCnnqmUQhi1G0TBAfCQwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9WeFRGeGgyX3ZDbm5xbVVRaGkx
RzBUQkFmQ1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy0cQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBv7SSFbdNoh1tIZ82r72sgvLT2auUL8+kJXZCa
GVGT9+UnwXQGFm/5XGydJaYMo6wy0Ll/ytDP5wM9wBan8GyNlcQvLbW3bANZf7yv
W0q8knOYprR5GGEPEXQny90m4ApSkcFjDOFWZwuQAl+qWlNOtNDLSxAwZxwylmO0
GPdP7qd+ANFyF5DCy+CkBIenKKIUcCrppp4K+HhdZzBks5CUKiZeINC02Lq3MldL
4aqD9SQcrWypJ0OvxSUGccWiweT3UbX3I5Ln0FIN1Xu/K1OT5eUq1JvEuqgttelH
zpwLs9d89BwuW/EzF5Dv0Pexu93e18l6IuhDrtjCQlex/Xth
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:31 2026 by rpki-client