This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/_xcn7-HwIvU8CjEFhQtdgr5q0JY.roa
File:                     _xcn7-HwIvU8CjEFhQtdgr5q0JY.roa (raw, json)
Hash identifier:          15RAH+EadNEARI2tkBmOXW4zrVAE6je3c+lRZ+Oq8qE=
Subject key identifier:   FF:17:27:EF:E1:F0:22:F5:3C:0A:31:05:85:0B:5D:82:BE:6A:D0:96
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12E4
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/_xcn7-HwIvU8CjEFhQtdgr5q0JY.roa
Signing time:             Tue 03 Feb 2026 08:57:47 +0000
ROA not before:           Tue 03 Feb 2026 08:57:47 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.60.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4836 (0x12e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:57:47 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FF1727EFE1F022F53C0A3105850B5D82BE6AD096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:84:51:d3:6d:16:7e:b0:df:92:8e:af:1b:
                    cf:36:16:03:29:5c:83:65:1d:47:a2:4a:ba:46:07:
                    c6:89:00:82:67:d1:25:89:f5:72:fe:11:78:79:9e:
                    93:2c:47:2d:7d:e9:11:db:bb:f2:c9:3b:93:8d:37:
                    73:b1:05:c3:5e:5a:d2:2e:2f:28:d7:98:81:d3:13:
                    13:77:76:0b:de:ee:cc:c0:90:8a:d7:c4:fa:a5:6e:
                    74:31:6a:c0:71:85:b0:92:d8:b1:ef:33:25:52:15:
                    53:2b:cb:ec:98:71:bc:b9:08:6f:fc:51:f5:53:fd:
                    ca:b6:c3:c9:5c:c4:f7:be:c6:fa:53:62:c7:f2:fe:
                    1c:d6:92:44:13:63:a3:51:64:aa:83:a9:0e:2c:9e:
                    3c:d9:a6:bb:7d:d6:bb:93:06:2a:f3:67:0e:41:dd:
                    8e:b0:a3:3f:82:b7:b0:50:a7:42:f1:b5:5b:04:59:
                    bf:dd:c3:13:3b:e9:e5:50:50:e7:86:3a:e2:02:40:
                    0c:bd:e8:fd:48:81:51:ce:ba:9a:77:30:10:47:b2:
                    61:26:a0:c7:2f:01:c5:e4:47:a0:a8:58:b3:27:a9:
                    cb:70:42:38:ee:75:59:17:9b:d8:6b:cf:1b:12:eb:
                    40:07:c3:e4:fc:7f:00:49:61:6e:57:2c:fc:3f:b7:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:17:27:EF:E1:F0:22:F5:3C:0A:31:05:85:0B:5D:82:BE:6A:D0:96
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/_xcn7-HwIvU8CjEFhQtdgr5q0JY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:9f:7d:81:49:4d:41:77:3d:69:ef:d7:8a:1e:9c:4c:10:45:
         e4:b0:9c:ed:23:01:ed:ec:3c:86:33:c4:d3:a1:1e:79:4d:8a:
         56:ea:45:25:d1:d2:8e:74:3f:a4:37:a9:ce:a1:4d:ca:70:5c:
         42:b8:f0:ca:53:2d:96:5f:95:34:41:f0:4d:9b:0b:11:5f:dc:
         04:9f:0b:87:76:68:39:4b:5d:b0:90:b5:04:3d:21:56:35:5f:
         85:e6:72:25:64:2b:1c:be:7b:80:0d:02:90:05:d7:2c:a6:44:
         b3:30:ec:e8:ea:1d:f8:7b:d7:db:ef:c3:e9:f3:f9:5d:43:8a:
         09:45:b9:23:4c:55:c5:25:10:84:28:1f:f2:3e:3d:92:06:60:
         7f:d0:4c:48:e6:a4:4c:25:93:d4:70:c2:9c:19:57:fe:59:ea:
         6b:8a:f4:48:73:6e:c4:f9:5b:8d:6b:c3:43:1a:40:90:87:94:
         aa:0d:d5:01:23:1d:a2:71:63:83:c9:04:d1:77:b5:2e:2a:10:
         d9:a5:99:1e:6e:11:f0:df:05:42:5f:b3:83:f6:cd:df:28:5c:
         33:e1:6b:42:8f:86:ec:5f:19:79:cd:b8:eb:50:a8:cb:55:b6:
         b0:8f:5d:8b:81:a3:3f:20:e8:f8:b2:13:99:2d:92:65:75:f0:
         4c:6e:bb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:51 2026 by rpki-client