This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Y0i6i8xSEW2CswInSKhb768wA3c.roa
File:                     Y0i6i8xSEW2CswInSKhb768wA3c.roa (raw, json)
Hash identifier:          yPWq1EYRDkyHqGIKoPNlxmKcsE8LC20t1fwQRbiVvSg=
Subject key identifier:   63:48:BA:8B:CC:52:11:6D:82:B3:02:27:48:A8:5B:EF:AF:30:03:77
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12FE
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Y0i6i8xSEW2CswInSKhb768wA3c.roa
Signing time:             Tue 03 Feb 2026 09:00:52 +0000
ROA not before:           Tue 03 Feb 2026 09:00:52 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.70.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4862 (0x12fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 09:00:52 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6348BA8BCC52116D82B3022748A85BEFAF300377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1c:58:e4:8d:6d:c6:8c:9f:f2:37:70:88:43:
                    9a:0a:9f:36:87:68:56:17:a2:f4:25:7a:83:df:8c:
                    b8:3c:0a:86:a4:ad:fd:a5:31:33:74:7e:64:a3:a4:
                    49:96:ec:77:18:bf:9a:77:a2:33:83:a7:66:79:c5:
                    fc:ff:29:89:f6:57:86:c3:cc:ca:a0:5e:bb:25:0d:
                    97:e8:2c:02:1c:e6:32:6a:74:f5:60:b4:f4:03:d6:
                    13:3d:29:6c:c6:0f:32:57:6b:02:1f:18:f2:40:5d:
                    ae:21:c0:f1:c4:db:51:6c:f1:8e:f3:ef:7a:de:12:
                    41:79:d5:86:bb:98:5f:76:c1:3f:cb:1d:03:72:07:
                    8d:5c:e8:bb:f9:d0:fa:f4:bb:a5:87:46:9a:01:3d:
                    28:0b:62:bd:0b:8c:ba:8e:8b:98:09:7e:9f:6b:f3:
                    b2:5f:f2:dc:0b:18:ed:67:b1:0c:e9:b9:d7:dd:d2:
                    50:57:0e:1a:b8:72:3d:29:20:23:b3:08:89:b9:0d:
                    91:99:8f:27:cc:b3:bd:2a:7a:d2:4c:da:04:29:5b:
                    ff:63:3a:97:2b:a6:fa:ac:f7:dd:70:7d:ce:40:87:
                    03:fe:02:ca:2a:4f:aa:25:55:33:ad:60:46:ad:c4:
                    06:87:6b:dc:4a:88:9c:c6:7c:81:eb:74:f5:dc:ef:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:48:BA:8B:CC:52:11:6D:82:B3:02:27:48:A8:5B:EF:AF:30:03:77
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Y0i6i8xSEW2CswInSKhb768wA3c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:10:94:0f:3d:9c:ea:80:70:46:6d:eb:80:5a:48:2c:9c:d3:
         df:a5:dd:e0:36:f9:94:e1:13:5f:e0:67:64:43:0b:53:13:9b:
         40:3b:6f:20:55:85:a2:e6:87:45:ff:fb:93:cd:53:db:ab:d6:
         ac:5d:bd:fa:88:ad:66:44:54:c0:10:42:3b:4b:6a:d7:26:ae:
         a5:e0:14:bc:7e:fa:f2:41:41:6e:f4:be:b2:99:a9:a4:90:d9:
         00:36:72:ef:ad:18:5c:97:79:e0:ef:5c:9f:b4:d4:61:e6:58:
         fb:c2:7c:99:12:bd:c4:4c:01:af:4a:a2:e8:75:df:29:f7:a9:
         e1:04:34:0d:bc:58:1f:a8:79:92:16:a6:c4:6a:9f:8f:3e:4b:
         e3:36:11:f3:6f:fb:06:3f:7b:44:b7:85:89:81:8f:b9:b9:8b:
         72:07:36:06:9b:2d:da:33:43:79:79:52:8a:57:73:03:5b:d0:
         1b:61:c5:6f:83:bd:e4:6e:0e:07:f9:71:ae:38:42:da:48:db:
         2f:8a:ab:65:c4:20:7f:32:77:e7:f5:f3:2d:4f:f6:0c:45:4a:
         32:72:5c:fd:50:c2:6a:69:d7:79:ce:e7:ba:23:a1:0d:30:a9:
         d3:86:6e:b6:07:75:d7:33:7e:a9:1e:ed:1c:ee:e0:2d:c3:48:
         bd:03:85:f1
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
OTAwNTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYzNDhCQThCQ0M1MjEx
NkQ4MkIzMDIyNzQ4QTg1QkVGQUYzMDAzNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyHFjkjW3GjJ/yN3CIQ5oKnzaHaFYXovQleoPfjLg8Coakrf2l
MTN0fmSjpEmW7HcYv5p3ojODp2Z5xfz/KYn2V4bDzMqgXrslDZfoLAIc5jJqdPVg
tPQD1hM9KWzGDzJXawIfGPJAXa4hwPHE21Fs8Y7z73reEkF51Ya7mF92wT/LHQNy
B41c6Lv50Pr0u6WHRpoBPSgLYr0LjLqOi5gJfp9r87Jf8twLGO1nsQzpudfd0lBX
Dhq4cj0pICOzCIm5DZGZjyfMs70qetJM2gQpW/9jOpcrpvqs991wfc5AhwP+Asoq
T6olVTOtYEatxAaHa9xKiJzGfIHrdPXc7+URAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUY0i6i8xSEW2CswInSKhb768wA3cwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9ZMGk2aTh4U0VXMkNzd0luU0to
Yjc2OHdBM2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0kaR
MA0GCSqGSIb3DQEBCwUAA4IBAQADEJQPPZzqgHBGbeuAWkgsnNPfpd3gNvmU4RNf
4GdkQwtTE5tAO28gVYWi5odF//uTzVPbq9asXb36iK1mRFTAEEI7S2rXJq6l4BS8
fvryQUFu9L6ymamkkNkANnLvrRhcl3ng71yftNRh5lj7wnyZEr3ETAGvSqLodd8p
96nhBDQNvFgfqHmSFqbEap+PPkvjNhHzb/sGP3tEt4WJgY+5uYtyBzYGmy3aM0N5
eVKKV3MDW9AbYcVvg73kbg4H+XGuOELaSNsviqtlxCB/Mnfn9fMtT/YMRUoyclz9
UMJqadd5zue6I6ENMKnThm62B3XXM36pHu0c7uAtw0i9A4Xx
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:58 2026 by rpki-client