This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/_0Msdx1shxAmNrmsmwDT8_rhH2U.roa
File:                     _0Msdx1shxAmNrmsmwDT8_rhH2U.roa (raw, json)
Hash identifier:          3FhTyEDAGj0bdEG5iHi+F9KscEZiLeXbWWjLGqmqY6g=
Subject key identifier:   FF:43:2C:77:1D:6C:87:10:26:36:B9:AC:9B:00:D3:F3:FA:E1:1F:65
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       13A4
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/_0Msdx1shxAmNrmsmwDT8_rhH2U.roa
Signing time:             Fri 06 Feb 2026 01:13:14 +0000
ROA not before:           Fri 06 Feb 2026 01:13:14 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.70.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5028 (0x13a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:13:14 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FF432C771D6C87102636B9AC9B00D3F3FAE11F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:46:5e:4c:5c:21:8a:76:e7:00:4e:7c:10:
                    18:2e:6a:95:85:b1:13:b4:3b:f6:6b:dc:d0:a8:f7:
                    89:0a:4a:12:31:68:04:80:bf:0a:21:00:06:d3:b2:
                    c6:46:44:aa:39:f8:20:5e:58:22:0d:24:71:cc:8a:
                    a4:91:44:07:62:de:ae:b3:48:d2:bb:36:a3:12:c1:
                    de:1c:6d:bd:96:0f:66:8d:fe:90:fc:21:41:b7:f0:
                    7b:1e:cd:fd:b9:bb:20:cf:e9:c3:08:fd:74:0a:56:
                    fa:d3:1e:15:92:aa:9d:8a:b5:af:73:b5:37:38:e2:
                    44:ce:e7:ef:04:d7:0c:75:2a:4a:ec:36:98:da:07:
                    77:c9:ed:d1:cf:7a:67:df:9c:48:a4:40:7e:e5:64:
                    de:28:51:f2:7b:0f:23:67:f5:d9:40:09:66:26:fc:
                    c4:68:fd:8a:63:fe:50:d6:27:ad:a0:bd:85:a0:0d:
                    4b:c4:67:7a:17:98:17:26:da:89:62:a0:5c:8f:41:
                    3c:ab:9c:14:ef:5c:e7:e5:ba:50:ce:a0:09:6a:73:
                    77:4d:95:89:82:8d:ea:72:05:64:89:e7:64:94:f6:
                    6f:d2:7e:db:19:a4:5b:e9:14:ea:09:5e:05:62:33:
                    85:2d:53:de:e7:f1:8a:3e:4b:e0:b7:2c:5d:23:59:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:43:2C:77:1D:6C:87:10:26:36:B9:AC:9B:00:D3:F3:FA:E1:1F:65
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/_0Msdx1shxAmNrmsmwDT8_rhH2U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ee:2d:db:88:9d:69:d4:9e:16:98:55:27:51:38:bc:7b:13:
         a2:9b:57:33:4e:6f:f2:87:29:41:79:40:b4:ff:a5:63:05:b4:
         0e:15:ee:39:f3:2c:4a:8d:46:f8:32:16:15:76:f0:c6:a3:63:
         d0:dd:4c:8b:fc:28:9d:f5:7f:1b:64:d9:34:cf:b8:0b:4f:28:
         36:12:78:0a:e8:64:80:45:ca:c5:f6:9d:51:a1:7e:87:b8:f4:
         7a:02:5f:c4:3c:77:93:0c:52:e3:69:8b:bb:f5:05:99:86:4d:
         8a:50:ef:f1:0b:c4:1e:16:a4:5e:a1:dd:c1:4d:1f:a4:86:1c:
         fb:52:33:95:bb:b3:4a:54:cf:68:3f:ad:63:6e:55:2d:21:d4:
         45:91:00:ce:7a:03:00:33:57:e1:e7:4d:8c:3a:32:90:12:a2:
         10:16:13:74:5a:09:42:9e:fc:e6:2f:3e:85:4f:58:c8:b7:cc:
         c4:b6:c4:42:c1:71:4d:f8:48:44:90:80:d1:32:e8:7f:10:c9:
         20:1c:84:61:2c:6b:d5:c5:77:64:86:28:cf:12:16:57:7c:fa:
         01:9b:2c:de:9d:f5:e5:63:0f:d3:58:7c:77:db:8b:c7:2b:61:
         08:cb:cc:6c:60:fb:c4:41:d4:91:49:e4:1d:57:8c:93:51:5f:
         9f:40:a5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:53 2026 by rpki-client