This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/bMOiFJZsEL0DHUuS_YKtSjuRvHc.roa
File:                     bMOiFJZsEL0DHUuS_YKtSjuRvHc.roa (raw, json)
Hash identifier:          liojq+ZC4lnRxeRLAMyAFE+PS3coLfJ0hLnIDeCRuXY=
Subject key identifier:   6C:C3:A2:14:96:6C:10:BD:03:1D:4B:92:FD:82:AD:4A:3B:91:BC:77
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1340
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/bMOiFJZsEL0DHUuS_YKtSjuRvHc.roa
Signing time:             Fri 06 Feb 2026 01:04:41 +0000
ROA not before:           Fri 06 Feb 2026 01:04:41 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.68.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4928 (0x1340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:04:41 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6CC3A214966C10BD031D4B92FD82AD4A3B91BC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:36:40:dc:1a:87:e8:b2:bd:a0:da:d8:81:
                    dd:cd:0a:0a:db:ad:88:13:00:39:b2:51:a1:3d:03:
                    ae:5f:03:5b:08:4f:f6:02:47:df:82:37:8f:c8:51:
                    70:01:7b:36:4e:df:f7:23:67:d8:9b:0d:a1:4e:07:
                    f7:dc:0b:01:67:bb:dc:6b:2e:10:8e:a3:04:4b:31:
                    dc:a3:50:2b:98:df:d5:16:ca:2e:18:82:d6:f2:3d:
                    9c:59:3b:fe:64:01:1d:46:ad:71:d2:9b:bb:1f:79:
                    4a:51:19:1c:83:5c:eb:ff:a1:7b:51:12:89:a5:eb:
                    ac:06:03:4e:bf:cb:7d:cf:25:44:41:50:de:42:c6:
                    18:88:3d:9d:cd:e1:a6:44:46:88:2a:14:ce:0d:db:
                    4d:c1:61:28:51:b5:dd:a8:93:1a:49:3a:a5:d7:9c:
                    8e:30:7d:9f:07:bf:75:ad:97:11:23:f2:77:17:e7:
                    cd:27:17:0d:0a:5e:c1:fc:14:f3:e7:c2:46:df:9d:
                    ea:2b:7d:22:cc:7b:09:0f:09:8b:10:45:70:56:0b:
                    72:25:40:db:80:4b:da:ae:c7:30:cb:32:59:c2:08:
                    cd:5c:a8:43:1f:8b:b9:12:69:b5:2a:cb:03:4b:30:
                    0b:62:64:7d:7d:9b:9e:46:85:3b:4e:46:1c:ea:41:
                    ae:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C3:A2:14:96:6C:10:BD:03:1D:4B:92:FD:82:AD:4A:3B:91:BC:77
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/bMOiFJZsEL0DHUuS_YKtSjuRvHc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:b8:ff:5b:73:7a:e5:62:7b:6f:0d:17:25:0d:44:fe:87:f7:
         af:b7:59:30:ce:52:f0:13:68:68:6c:60:68:f5:22:0f:ce:01:
         51:19:06:f6:ea:c2:b0:ca:62:94:45:8c:cb:64:0d:78:2f:22:
         97:f1:92:7a:06:34:69:dc:1d:19:77:af:da:36:c9:a5:8a:ee:
         ba:78:a8:ac:39:26:6c:55:34:7f:63:83:21:b6:de:75:fa:49:
         18:ce:88:e2:7e:97:17:8f:50:10:f7:d2:a2:73:c7:e7:0d:c9:
         02:a5:26:1f:9a:81:e7:62:1e:4e:1c:d9:a8:bd:b5:dc:6f:7e:
         ec:fd:05:ca:89:99:50:d5:2a:d1:bc:39:f2:ad:9c:d1:c2:0e:
         5a:60:e1:0a:ee:f7:94:5e:0e:a6:21:5d:e6:5a:21:de:c4:ab:
         d6:bf:ea:bf:71:8d:f2:b7:e1:ba:dc:9d:4c:4c:8a:c6:11:74:
         0a:a0:40:93:ad:a5:0b:e0:1e:19:93:da:a6:7d:ea:36:a9:a0:
         79:5f:c3:5b:19:88:1d:cc:39:9b:45:03:32:17:ca:38:5f:8c:
         c3:05:aa:95:23:d2:ea:ca:89:81:19:a4:3a:8a:de:55:43:16:
         ed:7b:c9:d5:d0:cf:d8:28:6b:63:ec:70:5d:46:79:d4:c3:b5:
         9e:56:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:32 2026 by rpki-client