This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/bgqatJs88UAwpHEHqV0wjM0M0b4.roa
File:                     bgqatJs88UAwpHEHqV0wjM0M0b4.roa (raw, json)
Hash identifier:          fcYD9Krv/00YWc2KKEikSOH4g52w0Mjl78zWU48RVTU=
Subject key identifier:   6E:0A:9A:B4:9B:3C:F1:40:30:A4:71:07:A9:5D:30:8C:CD:0C:D1:BE
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       127F
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/bgqatJs88UAwpHEHqV0wjM0M0b4.roa
Signing time:             Tue 03 Feb 2026 03:40:19 +0000
ROA not before:           Tue 03 Feb 2026 03:40:19 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        210.60.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4735 (0x127f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:40:19 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6E0A9AB49B3CF14030A47107A95D308CCD0CD1BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9e:93:81:f6:07:e9:c8:e9:8a:8f:69:81:46:
                    41:49:2b:2b:0f:43:a0:22:bc:27:c4:1c:0c:1f:98:
                    2b:17:93:0e:42:d8:c3:73:76:ec:f8:59:64:58:b2:
                    95:89:82:5b:48:13:33:a4:c6:15:cf:b0:a9:67:00:
                    f1:09:c1:ca:f5:03:4d:13:6f:f4:f0:26:08:4c:5a:
                    a1:3d:e8:fb:2b:af:63:3c:ce:1c:da:2b:c9:d0:0f:
                    5f:ae:9b:41:01:00:f0:83:f7:ec:df:61:30:c0:a9:
                    91:47:24:57:76:4f:c7:42:5f:b1:7e:17:d2:8c:7f:
                    2e:e0:5b:0e:22:8e:a2:a8:ec:f5:54:4b:b6:ef:4e:
                    68:02:3c:04:48:02:9f:db:53:cf:d6:55:95:17:7a:
                    d9:25:48:12:49:58:e8:71:e9:5e:da:3c:41:08:48:
                    2c:9c:a4:e0:60:db:df:aa:63:e9:ee:68:43:bd:b0:
                    03:83:f9:b7:83:16:4c:b3:d1:4f:5d:aa:80:44:7e:
                    56:d2:52:2c:be:56:5f:ae:86:8c:3a:ed:68:fc:9b:
                    b4:54:33:ba:f3:cf:37:a0:95:e7:07:52:36:44:6e:
                    cd:b3:51:71:38:d1:95:e5:a0:75:84:97:eb:d7:35:
                    af:fc:d7:b4:60:40:77:25:3f:5a:65:2b:b5:cf:cd:
                    d2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0A:9A:B4:9B:3C:F1:40:30:A4:71:07:A9:5D:30:8C:CD:0C:D1:BE
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/bgqatJs88UAwpHEHqV0wjM0M0b4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:aa:ed:21:39:5c:2f:72:ec:dd:80:d4:49:21:67:bf:eb:a5:
         b9:4f:86:fb:ae:d5:a4:7b:b7:06:4b:47:e1:c4:68:96:23:e7:
         9e:6f:df:e7:e7:6d:89:c4:bd:34:d8:97:9a:7e:bb:1c:d2:9f:
         6c:46:eb:5b:9a:9f:90:4b:ee:77:98:7d:16:13:3f:26:e0:b6:
         98:f8:22:e8:80:0b:96:7a:5d:32:de:86:a6:65:e0:19:6d:6a:
         b7:8e:9e:a0:c3:c1:76:7c:ab:f8:1b:24:7a:8d:16:2e:f4:4c:
         4c:76:9a:9a:14:cc:6e:9e:ef:1c:fa:d5:fd:c6:66:9c:53:8b:
         63:d4:ed:39:7c:08:8d:02:d9:41:4a:08:15:85:22:5e:82:b2:
         32:97:e8:04:aa:5b:33:05:b7:a8:73:13:0c:3b:31:52:93:55:
         e8:df:59:98:77:c3:e1:6c:41:c2:a9:0d:5f:cc:a5:74:73:4b:
         da:37:e0:a1:a2:02:cb:b9:9c:12:7c:bb:f9:92:9c:5a:ab:8d:
         03:82:8e:99:4d:d2:b5:73:0a:7b:5d:24:d4:fb:eb:02:23:9c:
         43:e9:fc:db:1e:76:3a:7e:bc:85:0d:87:82:87:6e:96:f3:a4:
         d2:25:58:8b:14:80:35:6e:e7:cb:81:dd:6f:98:76:89:8b:3a:
         3d:89:f4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:43 2026 by rpki-client