This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/XLsnST1HAmaeIrUfh8sX9f1kklY.roa
File:                     XLsnST1HAmaeIrUfh8sX9f1kklY.roa (raw, json)
Hash identifier:          LglR6mWbCAuPhHiTJKh+174B1RwWJDYqepaBDOw60vE=
Subject key identifier:   5C:BB:27:49:3D:47:02:66:9E:22:B5:1F:87:CB:17:F5:FD:64:92:56
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1178
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/XLsnST1HAmaeIrUfh8sX9f1kklY.roa
Signing time:             Tue 03 Feb 2026 08:45:28 +0000
ROA not before:           Tue 03 Feb 2026 08:45:28 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        192.192.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4472 (0x1178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 08:45:28 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5CBB27493D4702669E22B51F87CB17F5FD649256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:1f:12:8f:fa:a6:83:42:a8:2a:6b:0b:10:
                    7a:c7:f0:3a:9d:a2:14:ef:3b:37:02:1e:92:92:e9:
                    e8:88:7b:93:ec:0c:57:ca:75:0f:8e:f2:d3:32:40:
                    11:3c:97:eb:ed:01:70:5e:8f:24:61:28:5a:d3:32:
                    bb:1e:c1:05:7e:62:0d:98:44:1c:13:d9:28:fd:d7:
                    da:25:56:43:59:44:ae:b8:90:bf:d7:cf:e7:c4:4f:
                    4b:62:54:37:51:b8:fd:97:60:a8:10:59:10:96:d4:
                    8b:c3:29:3b:78:22:42:8f:30:e3:50:ec:1c:97:f2:
                    2f:79:d9:9f:39:b4:07:3a:98:2b:5e:e9:7d:fc:8c:
                    4e:df:5d:13:07:8f:9a:dc:7b:7f:33:93:c0:55:9d:
                    f0:16:93:2c:03:54:0c:a6:da:7f:30:aa:a1:93:43:
                    de:a7:34:14:af:a9:e3:6a:c0:0b:3a:0f:44:40:15:
                    57:f2:50:26:cf:d0:03:3d:51:0d:50:3e:14:1b:21:
                    a6:83:c1:75:39:71:ed:ba:1a:5e:a7:16:94:3a:ff:
                    1b:9d:76:64:8e:1d:4a:3b:fb:e9:2a:85:13:4a:06:
                    46:90:ee:8f:a8:40:42:db:df:4a:f6:42:30:90:2e:
                    25:b6:5a:54:24:d1:ae:04:b3:88:6c:1c:8b:46:8f:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BB:27:49:3D:47:02:66:9E:22:B5:1F:87:CB:17:F5:FD:64:92:56
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/XLsnST1HAmaeIrUfh8sX9f1kklY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:55:11:1d:50:2c:64:70:de:f3:45:d5:9f:e4:9b:e3:10:cc:
         00:50:36:1e:92:c4:45:78:39:d4:7c:99:b8:24:2e:64:d1:58:
         2d:a2:5f:cf:8a:a0:4f:c1:59:00:46:87:d6:7d:b3:3f:7b:d2:
         cf:f8:c5:2d:94:36:00:3b:06:fb:e2:b6:70:ee:c7:df:79:bb:
         6a:90:9c:fc:8b:55:25:ae:76:da:2c:cd:cc:ec:17:69:73:35:
         1e:0e:20:73:7a:3c:c9:fe:44:4b:b5:48:d7:60:41:91:09:04:
         11:38:b0:04:f7:ef:5e:26:d9:82:ef:bf:22:81:e0:fc:13:a9:
         3d:21:09:c2:ce:6d:d6:43:fb:05:d3:f0:d5:81:4e:d5:bc:78:
         dd:96:f7:fb:59:e9:f5:86:27:9b:c0:c3:18:66:bd:8a:29:6f:
         d0:e9:2f:5f:53:5c:cc:62:c9:82:18:a8:34:d4:36:ad:9b:a8:
         7f:cd:89:7b:20:b8:ed:c0:59:00:1a:17:3a:37:af:9b:75:ce:
         45:d6:47:18:62:e8:4f:21:06:da:e9:c4:ed:8f:a2:97:07:44:
         12:b5:0e:75:3e:cb:48:ad:fe:bb:53:9a:38:56:90:e2:c7:2b:
         75:85:18:8c:7b:bf:e1:1e:6a:e6:ef:0b:ca:8c:87:57:66:03:
         54:5a:8e:7c
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNjAyMDMw
ODQ1MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDQkIyNzQ5M0Q0NzAy
NjY5RTIyQjUxRjg3Q0IxN0Y1RkQ2NDkyNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMth8Sj/qmg0KoKmsLEHrH8DqdohTvOzcCHpKS6eiIe5PsDFfK
dQ+O8tMyQBE8l+vtAXBejyRhKFrTMrsewQV+Yg2YRBwT2Sj919olVkNZRK64kL/X
z+fET0tiVDdRuP2XYKgQWRCW1IvDKTt4IkKPMONQ7ByX8i952Z85tAc6mCte6X38
jE7fXRMHj5rce38zk8BVnfAWkywDVAym2n8wqqGTQ96nNBSvqeNqwAs6D0RAFVfy
UCbP0AM9UQ1QPhQbIaaDwXU5ce26Gl6nFpQ6/xuddmSOHUo7++kqhRNKBkaQ7o+o
QELb30r2QjCQLiW2WlQk0a4Es4hsHItGj4DFAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUXLsnST1HAmaeIrUfh8sX9f1kklYwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9YTHNuU1QxSEFtYWVJclVmaDhz
WDlmMWtrbFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMDF
MA0GCSqGSIb3DQEBCwUAA4IBAQAGVREdUCxkcN7zRdWf5JvjEMwAUDYeksRFeDnU
fJm4JC5k0Vgtol/PiqBPwVkARofWfbM/e9LP+MUtlDYAOwb74rZw7sffebtqkJz8
i1UlrnbaLM3M7BdpczUeDiBzejzJ/kRLtUjXYEGRCQQROLAE9+9eJtmC778igeD8
E6k9IQnCzm3WQ/sF0/DVgU7VvHjdlvf7Wen1hiebwMMYZr2KKW/Q6S9fU1zMYsmC
GKg01Datm6h/zYl7ILjtwFkAGhc6N6+bdc5F1kcYYuhPIQba6cTtj6KXB0QStQ51
PstIrf67U5o4VpDixyt1hRiMe7/hHmrm7wvKjIdXZgNUWo58
-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:53 2026 by rpki-client