This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Y2GiM7LYE2x92CxMViX9WV_-KEE.roa
File:                     Y2GiM7LYE2x92CxMViX9WV_-KEE.roa (raw, json)
Hash identifier:          cz6yxKzTodiVsXhvx3yWkGL8sLQRLq3fAolkWt32oY4=
Subject key identifier:   63:61:A2:33:B2:D8:13:6C:7D:D8:2C:4C:56:25:FD:59:5F:FE:28:41
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1099
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Y2GiM7LYE2x92CxMViX9WV_-KEE.roa
Signing time:             Tue 03 Feb 2026 01:55:36 +0000
ROA not before:           Tue 03 Feb 2026 01:55:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        192.192.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4249 (0x1099)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 01:55:36 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6361A233B2D8136C7DD82C4C5625FD595FFE2841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:48:78:89:58:c6:8d:dd:cb:63:11:be:2e:
                    ba:2a:dc:79:11:e6:49:14:d6:a4:88:1d:35:1d:48:
                    ce:75:4c:c5:6d:42:56:02:8b:5e:a7:38:6c:46:ef:
                    7e:79:87:8a:bf:a8:06:c3:2a:f6:a8:42:b9:5a:99:
                    31:c7:b6:a6:29:04:aa:d7:de:2e:2b:e1:97:b4:e7:
                    bd:50:86:e6:10:94:d9:e5:8e:4c:91:27:e5:18:ca:
                    d9:3f:5e:88:f3:a4:d2:e3:51:09:de:37:e3:af:ee:
                    e4:5e:b7:23:31:65:b2:b8:57:59:9a:23:ab:d0:33:
                    94:88:bc:16:2c:ab:62:ea:e0:30:01:ea:31:7a:f0:
                    0c:f9:91:4f:f5:ec:3b:ee:24:58:87:72:75:b6:34:
                    9e:6f:e6:b2:7a:28:62:f2:49:be:77:80:d0:c5:45:
                    05:6a:5f:02:89:de:0b:83:14:ec:ec:62:89:d0:f8:
                    a5:bb:ad:36:e5:57:d8:60:83:69:48:d2:b7:3f:2d:
                    a8:2d:06:f3:9f:c3:01:6a:4e:f2:ba:d5:7a:22:d1:
                    b8:10:b8:1e:76:25:64:2e:be:63:c7:1e:8c:a0:2c:
                    cb:fa:bb:56:83:dd:73:6f:d5:0d:b2:47:d9:40:39:
                    cb:54:dd:9d:52:b2:cc:2d:05:d2:b8:58:c9:f9:f3:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:61:A2:33:B2:D8:13:6C:7D:D8:2C:4C:56:25:FD:59:5F:FE:28:41
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Y2GiM7LYE2x92CxMViX9WV_-KEE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:5c:b5:da:ff:a6:95:a8:b5:2a:78:ef:6a:09:e5:8f:b4:bd:
         69:ad:e6:23:1d:95:36:57:e3:bf:0e:a8:66:4f:55:b8:05:a9:
         eb:e7:50:9c:e0:f8:a3:93:22:2f:88:a5:25:46:8b:c8:5e:b1:
         28:c2:ce:3f:13:94:2f:d7:fa:24:f8:70:0c:07:95:81:2f:38:
         2d:84:8d:1d:9b:e0:77:dc:10:15:d5:6c:a4:ec:57:19:36:f6:
         65:40:7e:8e:9e:6b:fc:76:fd:ad:3b:5c:e6:ac:31:1a:60:f6:
         3a:f2:e3:56:48:27:95:6d:5c:65:9e:4f:bb:76:08:ec:22:68:
         f1:8e:14:e5:ea:28:46:53:4a:35:03:41:69:15:bf:c2:20:9a:
         55:35:9d:e2:76:52:de:dd:af:48:0f:1f:23:4c:6b:ef:3f:6f:
         77:9b:c4:3f:df:fc:3a:e9:c1:87:5a:a8:1d:05:54:7a:6c:13:
         8e:04:06:06:77:fb:46:7e:68:bd:93:6b:5a:f0:46:fe:32:55:
         53:ab:18:91:0d:17:3b:f4:81:5e:d4:6e:49:cd:50:11:41:a8:
         9a:12:0f:4d:75:b2:f7:ee:96:74:19:64:0e:55:be:3b:b5:20:
         07:fb:7e:05:98:c2:b0:3a:73:3f:a1:74:62:33:04:bc:40:50:
         36:b6:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:45 2026 by rpki-client