This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/WYsa1avsiXKy-gnZg9jNaXGIMf0.roa
File:                     WYsa1avsiXKy-gnZg9jNaXGIMf0.roa (raw, json)
Hash identifier:          1FQlZ5dw43G+6MwDm8WA6ua1xvUvv1FZHnks/RULe0s=
Subject key identifier:   59:8B:1A:D5:AB:EC:89:72:B2:FA:09:D9:83:D8:CD:69:71:88:31:FD
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       10E6
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WYsa1avsiXKy-gnZg9jNaXGIMf0.roa
Signing time:             Tue 03 Feb 2026 02:32:10 +0000
ROA not before:           Tue 03 Feb 2026 02:32:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        140.133.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4326 (0x10e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 02:32:10 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=598B1AD5ABEC8972B2FA09D983D8CD69718831FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:ca:22:98:65:5a:e0:0f:52:98:bf:be:8c:
                    fd:9e:24:65:71:06:75:d5:e2:a4:fb:84:e2:57:97:
                    cf:e3:dd:83:f8:2f:e9:8d:7d:6e:e3:3a:d0:02:e9:
                    54:db:45:cb:75:e0:ac:46:f7:85:51:76:4d:01:35:
                    62:c2:c9:c5:4f:23:d0:c2:d3:5b:80:0c:a3:db:4b:
                    76:5f:b4:43:77:f3:28:2a:1a:cb:1c:9b:69:32:53:
                    6a:50:8e:2e:ca:23:3b:ae:52:dc:c9:ec:10:a2:fc:
                    3f:56:bc:a9:f6:9d:90:90:0c:aa:89:c2:d6:03:7c:
                    8d:0e:af:06:c2:af:68:fd:2f:87:0a:91:00:c3:bc:
                    f3:b5:8f:f5:b6:ba:e2:1f:b7:e1:56:4f:bb:1a:8c:
                    d7:73:80:dc:75:b9:dd:ad:69:8d:f1:bc:ef:59:ce:
                    5f:07:0a:88:6b:a4:8b:28:fa:58:38:26:1b:79:55:
                    86:02:5e:58:3e:6c:1c:69:6b:39:10:ee:c4:7d:c9:
                    52:e8:96:7b:dd:11:74:dd:fa:71:36:2a:90:80:0d:
                    6e:32:73:5d:20:56:aa:9e:14:1b:90:10:d9:b8:8c:
                    63:ad:2f:b5:76:e4:12:9f:48:91:61:bb:5f:59:39:
                    29:2d:49:63:53:f9:24:3f:89:ad:ba:15:56:25:d0:
                    c9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:1A:D5:AB:EC:89:72:B2:FA:09:D9:83:D8:CD:69:71:88:31:FD
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WYsa1avsiXKy-gnZg9jNaXGIMf0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.133.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:07:e8:5a:df:79:90:2d:c9:67:b2:2f:c1:72:62:97:70:9f:
         c7:5f:f7:8f:dd:ce:f3:fb:ce:a4:15:ea:a1:18:fd:2e:8f:46:
         79:49:48:8a:44:7e:5f:47:77:57:b6:51:e5:63:8d:17:21:3d:
         fa:91:81:89:06:61:b2:b8:bf:ee:58:51:29:b5:0c:c1:f0:40:
         91:fd:3c:b9:2a:1d:84:d4:63:73:a3:10:82:14:9c:4a:6d:ba:
         a0:34:45:5c:1b:dd:c7:f0:05:a0:2c:0d:3d:bc:43:8f:21:5c:
         21:39:95:ce:c0:5e:85:e8:5d:6b:b0:be:97:f4:50:eb:67:60:
         b4:0a:e9:5f:f1:b6:c9:a8:a1:65:e6:90:f5:26:00:60:fd:d4:
         cf:3c:93:9d:21:ed:a9:f4:50:9c:48:c8:a2:8e:f0:6c:bd:58:
         a4:ff:93:be:b6:63:86:a9:7b:27:2c:59:5a:b2:4e:39:54:b2:
         4e:d3:fb:81:50:43:3f:a8:83:2e:17:7f:bf:f3:b1:3c:48:76:
         93:01:0c:f8:c3:e6:bd:52:67:5c:2c:a1:5e:8b:8b:5e:2c:2d:
         10:e7:0b:06:11:48:08:12:91:de:6d:ca:f4:93:1a:af:79:2b:
         ca:8a:26:27:2f:dc:98:86:6c:77:b5:6d:c3:79:11:7c:8d:06:
         e5:9b:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:51 2026 by rpki-client