This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ZAVuk-SgxNnHVs01TVzNsPHWtBE.roa
File:                     ZAVuk-SgxNnHVs01TVzNsPHWtBE.roa (raw, json)
Hash identifier:          q5rbuG3pJoOaXED4EITDkLKRADyxQBdOQC7asPcL+0o=
Subject key identifier:   64:05:6E:93:E4:A0:C4:D9:C7:56:CD:35:4D:5C:CD:B0:F1:D6:B4:11
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1318
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ZAVuk-SgxNnHVs01TVzNsPHWtBE.roa
Signing time:             Tue 03 Feb 2026 09:03:55 +0000
ROA not before:           Tue 03 Feb 2026 09:03:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.71.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4888 (0x1318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 09:03:55 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=64056E93E4A0C4D9C756CD354D5CCDB0F1D6B411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:17:39:35:18:a5:35:e0:3e:f1:87:ea:01:
                    f7:b3:d9:18:df:21:d1:10:db:e5:a6:d6:f5:e1:10:
                    bf:59:d7:54:c1:1b:15:7b:b9:39:dd:86:db:92:cb:
                    d3:91:6d:2d:fb:b0:b0:97:ce:cf:fc:a5:d7:fc:fc:
                    9a:99:fa:bc:ce:73:a4:41:c2:2b:74:19:ad:74:57:
                    94:d7:cf:61:20:14:48:3d:a1:d4:6d:7d:03:e2:ad:
                    8b:a0:e0:d4:54:4f:8b:5c:0b:a8:7d:8d:db:9a:0a:
                    5f:70:27:86:74:de:ff:4b:b2:93:c3:6f:0e:ed:2c:
                    b3:78:92:95:ac:bb:d6:1a:36:4e:e5:e4:ae:17:4b:
                    34:e9:80:39:51:b7:35:e9:dc:1e:5a:dc:7e:b4:a2:
                    1b:02:66:d7:57:32:02:4e:d7:5e:7f:5d:80:d9:0c:
                    a6:93:2b:6d:55:99:6c:4c:73:7d:6e:8a:7b:10:97:
                    b0:7a:f3:08:b5:a0:a4:f1:ec:75:31:eb:01:6b:75:
                    94:c8:61:04:61:8f:65:09:24:78:7b:92:40:39:61:
                    03:58:e6:b2:0e:b0:d5:dd:2d:a4:cf:d1:f6:75:66:
                    83:d5:3f:2a:6d:30:27:5f:5a:b7:f4:ea:c4:bf:55:
                    81:2c:fc:58:45:6f:28:84:d6:4b:96:ce:17:ca:ea:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:05:6E:93:E4:A0:C4:D9:C7:56:CD:35:4D:5C:CD:B0:F1:D6:B4:11
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ZAVuk-SgxNnHVs01TVzNsPHWtBE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.71.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:d0:5d:c4:88:12:7e:23:38:f9:84:22:de:c3:12:a4:d2:
         03:09:03:06:e8:d5:a0:a8:ea:fc:84:a4:bb:3c:f2:4f:16:0e:
         c6:69:2f:00:8f:7e:b7:7d:87:66:e2:ae:6e:d2:9f:5f:29:e8:
         eb:09:1c:a7:ba:c2:f2:53:0b:75:aa:0b:a3:41:62:df:96:96:
         e4:0e:83:1b:98:ec:4e:80:5b:14:76:3d:a0:5f:e9:97:30:cf:
         41:cc:63:89:68:c8:93:c4:a8:e5:f7:93:63:16:a2:b8:98:d3:
         07:03:53:7d:08:b2:81:eb:3c:74:52:5f:b1:45:6a:1c:0e:25:
         fb:68:25:80:a6:ec:7c:d3:00:28:c5:be:c6:1b:0f:4d:d6:b2:
         52:fa:cf:70:fa:59:65:3c:f5:2e:b5:fc:43:58:c1:ad:72:1b:
         67:ab:ae:ef:86:a4:a6:cc:a9:41:25:96:17:ae:cb:cb:16:be:
         bf:1b:a9:68:20:55:76:d3:66:b3:63:2d:5f:50:21:7e:48:d3:
         ef:ae:86:94:5b:0c:6f:60:4c:29:98:1e:c1:dd:75:1a:ee:18:
         7c:e5:33:c5:41:7e:74:21:f7:79:31:9f:e6:03:54:d1:5e:2d:
         45:ff:d8:ab:4d:f4:a6:45:5c:6c:62:5b:21:02:87:c4:25:85:
         e6:44:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:30 2026 by rpki-client