This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/cLsx2ltfcWiK6sC883l6tKSmn68.roa
File:                     cLsx2ltfcWiK6sC883l6tKSmn68.roa (raw, json)
Hash identifier:          pxk5xIRb8GpaJPOsx2YvkUuvQpothy1z8igVQ3MQB9I=
Subject key identifier:   70:BB:31:DA:5B:5F:71:68:8A:EA:C0:BC:F3:79:7A:B4:A4:A6:9F:AF
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12A6
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/cLsx2ltfcWiK6sC883l6tKSmn68.roa
Signing time:             Tue 03 Feb 2026 08:50:40 +0000
ROA not before:           Tue 03 Feb 2026 08:50:40 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.68.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4774 (0x12a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:50:40 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=70BB31DA5B5F71688AEAC0BCF3797AB4A4A69FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:86:6a:e5:c6:f2:f2:40:da:ad:9a:e1:f0:
                    e9:b0:70:1c:a1:88:9d:46:8c:05:09:72:4b:45:a5:
                    53:11:75:fe:d9:9b:ab:b6:33:77:66:49:ce:74:d7:
                    ff:3b:22:98:9c:1b:db:bc:b6:df:4f:53:25:32:92:
                    a8:93:ce:fe:f5:ad:3c:cc:47:a6:56:88:4b:59:4d:
                    30:c4:cf:7b:32:e9:06:40:99:3b:c3:fe:e9:59:69:
                    40:aa:19:9a:68:6e:7b:50:a2:fa:e0:af:fc:0f:8d:
                    74:2d:c6:0b:8e:42:01:c1:dd:3a:e2:09:ed:6e:93:
                    52:bc:01:5b:b1:87:6d:e7:bb:c0:54:92:5d:22:a0:
                    f6:e5:48:8f:00:77:34:16:10:6e:7a:8a:95:7d:6c:
                    c4:b9:d1:2f:53:fd:9b:c6:22:c6:28:5c:fe:c7:71:
                    0f:c0:fb:05:85:ab:18:6a:6f:f9:1b:77:f2:51:ba:
                    a3:f7:1d:82:d2:53:37:dd:06:37:66:ba:26:46:86:
                    ac:db:02:59:13:37:50:eb:de:90:df:68:6c:fb:0e:
                    98:fa:0e:c6:29:1f:39:de:be:50:da:10:a9:d2:57:
                    01:3e:a0:81:9e:f0:b3:54:ba:47:7a:e1:a1:9d:19:
                    63:0c:99:d9:e9:bb:17:9d:92:2e:56:53:c7:73:49:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BB:31:DA:5B:5F:71:68:8A:EA:C0:BC:F3:79:7A:B4:A4:A6:9F:AF
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/cLsx2ltfcWiK6sC883l6tKSmn68.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:17:58:c8:34:67:ba:37:86:88:f9:6f:19:cf:ec:2b:3e:c7:
         5f:66:1c:f5:ef:d0:96:46:bd:24:a7:ec:c6:82:5f:90:0a:e1:
         d3:3c:01:33:01:77:be:e9:a7:fc:c1:26:71:20:bb:1d:30:28:
         ad:7d:a0:92:0b:5a:69:e1:13:ce:8c:60:45:86:b6:1e:e3:63:
         7b:fb:99:39:b7:aa:9c:85:64:2f:78:34:6c:62:94:e4:cf:4f:
         2c:7b:08:d0:25:8f:d8:92:be:d3:4b:75:a1:f1:ac:1a:76:9b:
         af:b8:72:86:ac:91:b2:2c:08:92:a5:71:26:b8:3d:fa:ae:b0:
         77:7e:63:2a:bc:db:cd:43:fc:21:72:0a:44:69:1e:29:a8:22:
         5f:8e:05:8a:55:6b:ff:bf:a6:c1:20:a5:ad:4b:a6:cd:10:6d:
         a4:dd:ac:86:f7:4a:70:eb:fa:69:ef:bb:a2:21:0c:0f:17:cc:
         35:c2:02:9a:83:6c:83:7d:9d:46:37:da:be:5c:0e:6f:01:62:
         6e:2f:af:f7:15:81:62:f8:c3:06:60:5a:26:8d:2e:f6:24:0a:
         86:24:9b:a2:56:7a:02:6f:55:72:cb:17:0f:f3:ad:eb:8e:ae:
         75:21:07:00:a4:02:9b:d1:0b:2d:92:9b:b0:27:5d:d4:8d:e8:
         25:99:82:9d
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
ODUwNDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcwQkIzMURBNUI1Rjcx
Njg4QUVBQzBCQ0YzNzk3QUI0QTRBNjlGQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG+4Zq5cby8kDarZrh8OmwcByhiJ1GjAUJcktFpVMRdf7Zm6u2
M3dmSc501/87IpicG9u8tt9PUyUykqiTzv71rTzMR6ZWiEtZTTDEz3sy6QZAmTvD
/ulZaUCqGZpobntQovrgr/wPjXQtxguOQgHB3TriCe1uk1K8AVuxh23nu8BUkl0i
oPblSI8AdzQWEG56ipV9bMS50S9T/ZvGIsYoXP7HcQ/A+wWFqxhqb/kbd/JRuqP3
HYLSUzfdBjdmuiZGhqzbAlkTN1Dr3pDfaGz7Dpj6DsYpHznevlDaEKnSVwE+oIGe
8LNUukd64aGdGWMMmdnpuxedki5WU8dzSfrFAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUcLsx2ltfcWiK6sC883l6tKSmn68wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9jTHN4Mmx0ZmNXaUs2c0M4ODNs
NnRLU21uNjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCy0Sc
MA0GCSqGSIb3DQEBCwUAA4IBAQA9F1jINGe6N4aI+W8Zz+wrPsdfZhz179CWRr0k
p+zGgl+QCuHTPAEzAXe+6af8wSZxILsdMCitfaCSC1pp4RPOjGBFhrYe42N7+5k5
t6qchWQveDRsYpTkz08sewjQJY/Ykr7TS3Wh8awadpuvuHKGrJGyLAiSpXEmuD36
rrB3fmMqvNvNQ/whcgpEaR4pqCJfjgWKVWv/v6bBIKWtS6bNEG2k3ayG90pw6/pp
77uiIQwPF8w1wgKag2yDfZ1GN9q+XA5vAWJuL6/3FYFi+MMGYFomjS72JAqGJJui
VnoCb1VyyxcP863rjq51IQcApAKb0QstkpuwJ13UjeglmYKd
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:50 2026 by rpki-client