This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/XTDQTfWi6kAP3sWXwNRagvcTT3o.roa
File:                     XTDQTfWi6kAP3sWXwNRagvcTT3o.roa (raw, json)
Hash identifier:          Cd2UAecJku9lCiQpekETU7RMhhgBtR8t8M0X0T57UtU=
Subject key identifier:   5D:30:D0:4D:F5:A2:EA:40:0F:DE:C5:97:C0:D4:5A:82:F7:13:4F:7A
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       127D
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/XTDQTfWi6kAP3sWXwNRagvcTT3o.roa
Signing time:             Tue 03 Feb 2026 03:40:10 +0000
ROA not before:           Tue 03 Feb 2026 03:40:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        210.60.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4733 (0x127d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:40:10 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5D30D04DF5A2EA400FDEC597C0D45A82F7134F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:62:1f:c1:cc:85:d5:21:e4:2c:3f:3b:53:
                    57:9f:a6:05:45:00:25:51:6e:95:ab:be:93:bf:b3:
                    0a:21:f3:be:ec:89:ba:5e:d1:65:04:8d:c5:7f:35:
                    7a:3c:c6:53:cd:1a:af:77:9a:21:a4:61:aa:c2:97:
                    0d:a1:1d:8c:ee:80:f7:ef:5f:af:6e:b5:f7:77:70:
                    14:70:ee:39:bc:2a:c2:2a:8e:53:e9:39:fd:e3:59:
                    24:dc:26:5c:de:85:ad:55:a1:64:ee:27:7e:5a:6f:
                    0a:2d:22:55:b1:2d:21:d0:54:46:11:a4:97:8b:5c:
                    54:fd:87:06:e2:cb:ea:13:20:ec:6b:cd:3e:b4:da:
                    7f:2c:c1:a9:14:c9:7d:0d:ed:e2:f2:45:72:94:b6:
                    7a:a9:f8:99:a4:6c:38:ce:98:39:97:04:67:12:b0:
                    7c:13:06:b2:41:66:61:06:23:64:04:b6:85:a1:c5:
                    49:1d:fe:e4:1b:65:41:8d:3c:e1:52:c6:e1:d2:00:
                    42:8a:a3:cd:d4:63:c8:75:59:bf:73:f9:65:3d:09:
                    00:c1:74:ff:9c:92:b3:89:ff:a4:f4:37:84:3d:94:
                    58:c6:cd:b2:6b:bf:d7:bc:33:82:23:aa:4a:40:eb:
                    dd:48:38:7b:01:0c:29:f6:ad:84:e1:04:b8:7a:30:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:30:D0:4D:F5:A2:EA:40:0F:DE:C5:97:C0:D4:5A:82:F7:13:4F:7A
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/XTDQTfWi6kAP3sWXwNRagvcTT3o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:2a:ce:19:81:e8:ea:e0:ca:5b:7c:c6:cd:a8:ca:46:e0:f3:
         14:9f:c5:49:8c:89:b0:d8:1b:0e:c5:cc:4f:43:73:65:bb:90:
         72:2e:b1:5d:23:8a:7e:58:f8:4c:fb:73:b1:81:1a:fc:50:e8:
         ce:6c:a1:17:a8:f0:c4:f5:fc:2f:5b:9b:a1:18:13:58:98:00:
         36:83:ac:07:15:18:24:9e:3b:18:72:74:af:c0:38:27:89:22:
         9f:70:43:6f:94:0f:81:55:c5:d7:9f:8e:49:43:df:df:09:9a:
         0e:b5:9f:39:4a:49:dc:2b:85:3e:7a:f4:66:22:17:68:49:d6:
         84:bb:86:6c:fa:f9:18:df:46:1b:8c:48:f6:4d:54:5e:4f:a9:
         d1:d2:2c:17:48:d6:47:47:17:a9:19:28:3f:54:a0:9d:6b:c6:
         a3:ce:6a:e4:a3:28:3f:d3:6e:96:4f:7c:79:fe:16:f7:25:19:
         c3:6a:35:9b:82:53:88:19:4f:bb:9c:43:8a:09:85:c2:d5:55:
         27:b3:db:6f:3b:fe:e7:1c:b9:2c:3d:7d:1c:f9:84:23:dc:02:
         37:df:93:e4:c6:83:92:ba:ac:63:08:a1:4d:aa:8f:42:23:5e:
         a0:9c:4b:62:50:11:27:d0:af:94:6b:82:0f:a2:29:86:98:b9:
         7e:a9:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:24 2026 by rpki-client