This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/a8Yl8yxI2kf7QGJM2F-85cq3T34.roa
File:                     a8Yl8yxI2kf7QGJM2F-85cq3T34.roa (raw, json)
Hash identifier:          jd5AQUTHcnoZ8woJsFKLLuTBTyolRSVw5hQWxtIHfC0=
Subject key identifier:   6B:C6:25:F3:2C:48:DA:47:FB:40:62:4C:D8:5F:BC:E5:CA:B7:4F:7E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12FA
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/a8Yl8yxI2kf7QGJM2F-85cq3T34.roa
Signing time:             Tue 03 Feb 2026 09:00:23 +0000
ROA not before:           Tue 03 Feb 2026 09:00:23 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.70.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4858 (0x12fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 09:00:23 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6BC625F32C48DA47FB40624CD85FBCE5CAB74F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:cf:51:e5:27:aa:70:d7:97:39:e2:4d:42:
                    d0:4a:2b:51:68:53:9a:ab:a5:d7:f4:34:12:f8:e1:
                    b0:a9:bb:d6:32:1f:44:4d:e4:74:69:b6:3f:20:f0:
                    69:d9:cc:7a:a7:5c:f1:25:cb:ee:ad:ed:71:e0:73:
                    f7:f8:30:2e:34:20:ac:7a:06:84:42:e8:d0:5c:a0:
                    a2:b6:a4:84:b0:56:18:60:42:d9:6d:ad:2f:a9:be:
                    2d:b2:87:82:71:6c:e1:d9:0e:9b:71:32:73:8c:cf:
                    6e:f0:2e:0d:ba:56:01:2f:65:c3:a2:9c:e7:23:fb:
                    c0:24:fe:4f:28:44:6c:95:a1:00:c2:d0:81:6f:b2:
                    53:cb:63:b0:35:54:51:2d:df:e2:dc:90:eb:27:0a:
                    cb:74:68:4e:91:a9:97:f4:43:ce:34:8a:4d:dc:12:
                    f1:02:31:44:96:8a:7c:a8:ef:dd:6f:82:55:5d:7c:
                    d9:3d:c9:4f:2f:86:d6:fc:5e:c6:c3:ab:96:df:cd:
                    fa:4f:49:94:40:25:0e:cd:57:33:09:73:c6:15:3d:
                    a8:53:f2:19:21:cc:4e:64:fc:93:45:f7:82:19:48:
                    8f:1a:68:7f:9c:1b:bc:fd:ba:ea:91:3f:6e:d4:53:
                    3d:fe:4c:88:cb:35:79:c9:36:2b:29:5a:bb:b0:0b:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C6:25:F3:2C:48:DA:47:FB:40:62:4C:D8:5F:BC:E5:CA:B7:4F:7E
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/a8Yl8yxI2kf7QGJM2F-85cq3T34.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:21:3a:8f:fe:b6:ee:1d:db:8f:e2:f1:f7:fa:4d:ee:f0:9c:
         42:6c:fb:d5:9b:07:37:c5:ab:a4:bd:09:6c:d2:2a:05:1c:67:
         39:06:36:d2:a2:9f:db:81:83:e3:3c:98:cc:cb:02:31:83:eb:
         56:13:40:5f:44:9c:f2:36:65:36:a0:db:d0:86:c3:c2:cd:cb:
         06:85:9e:ad:84:be:da:f1:2c:d7:ad:78:89:84:ec:f5:f0:46:
         26:56:bb:bb:e5:e6:05:e9:79:c0:50:86:c4:3e:0e:a5:9e:05:
         75:2f:c5:e2:b5:46:23:2b:ed:1f:ba:df:6b:39:9d:21:c1:84:
         30:06:07:92:35:6f:f1:36:2c:ee:eb:76:c0:64:13:1c:6a:32:
         c9:93:6a:31:13:59:e3:6e:0a:6d:80:ef:48:93:b9:d4:62:6d:
         0d:54:60:bc:d8:86:dc:51:de:69:31:b1:90:9c:54:c5:fb:03:
         45:16:b9:44:ca:94:0b:fe:30:54:c9:5d:82:51:c9:54:2e:98:
         63:75:eb:78:35:03:55:39:16:f8:e2:1c:26:79:9f:b7:82:d0:
         67:75:ae:5b:e2:ef:d3:9c:f1:0a:c4:22:8c:a6:8d:9f:6a:54:
         84:bd:a4:79:bc:84:8c:3a:84:60:a5:34:ff:47:c1:fc:00:95:
         f1:ee:d2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:30 2026 by rpki-client