This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/cMb8VoaS6rFjmT4nneIHsDoTa4I.roa
File:                     cMb8VoaS6rFjmT4nneIHsDoTa4I.roa (raw, json)
Hash identifier:          EQjFPLQMqbj1/EjRDxFbApF5vCbZ33J4G/7m6l9Sq0U=
Subject key identifier:   70:C6:FC:56:86:92:EA:B1:63:99:3E:27:9D:E2:07:B0:3A:13:6B:82
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1261
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/cMb8VoaS6rFjmT4nneIHsDoTa4I.roa
Signing time:             Tue 03 Feb 2026 03:21:24 +0000
ROA not before:           Tue 03 Feb 2026 03:21:24 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        203.64.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4705 (0x1261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:21:24 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=70C6FC568692EAB163993E279DE207B03A136B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:ae:c6:7e:8d:f6:da:61:ba:60:8e:15:ef:
                    d2:5c:34:db:26:88:a5:fe:1f:83:b8:16:00:a4:da:
                    2f:31:c8:9f:d2:75:0a:18:d2:84:34:89:ea:87:47:
                    4e:ee:ff:0e:31:a9:82:21:ef:2f:39:25:ab:32:7d:
                    e9:9f:3f:a5:a5:61:9b:8e:e8:16:fd:fe:f8:6b:6c:
                    08:7a:cc:ff:c9:86:61:43:ba:78:c2:69:5f:73:e5:
                    10:f9:16:6c:d6:95:ef:42:40:ce:04:b3:de:51:2c:
                    07:94:60:9d:1d:a1:da:b4:a0:b6:88:a2:6e:41:c0:
                    6c:2f:57:f4:26:dc:6f:b0:48:f1:9b:99:1f:a7:fc:
                    0e:f4:68:a9:a8:0a:29:50:11:51:29:3b:e0:2a:a8:
                    f8:dd:0d:88:83:41:60:cd:4a:9f:af:65:c3:8f:85:
                    dc:0d:53:f1:88:6b:ba:df:ad:bc:23:71:eb:85:4e:
                    35:7a:1c:b4:7a:56:c5:6a:e2:e5:84:08:2e:38:0f:
                    15:16:a1:af:5f:8c:fb:34:2f:b0:10:1c:37:c6:78:
                    19:8d:5f:d3:75:0d:0d:6e:06:6d:41:d4:f9:e1:db:
                    dc:d7:ac:f9:44:97:ea:29:86:45:55:68:ff:8d:36:
                    7f:01:37:a3:15:50:16:ea:42:19:6b:d6:fb:e3:9a:
                    c6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C6:FC:56:86:92:EA:B1:63:99:3E:27:9D:E2:07:B0:3A:13:6B:82
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/cMb8VoaS6rFjmT4nneIHsDoTa4I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:6e:e2:3f:91:a6:0e:ba:b4:f9:97:1f:29:34:6f:26:67:
         8e:14:1b:85:1f:27:83:03:71:50:2d:1e:f7:ea:7a:54:10:5c:
         3f:19:d4:dd:5b:15:c1:13:06:30:af:74:77:10:28:b2:0d:f7:
         1c:49:9d:d0:5c:c7:e9:16:fc:6f:a8:69:c3:37:46:bf:ec:5e:
         05:3d:59:9c:1e:9e:b5:61:1a:5e:37:2a:f5:0e:b2:cb:a8:00:
         b7:d8:d8:3d:12:d1:b6:6c:c0:21:80:f7:34:b0:eb:f7:32:4e:
         7c:03:ea:14:b7:f5:67:f9:2b:df:44:32:c1:d4:34:08:a4:d6:
         86:f4:ba:70:54:b6:62:e0:d0:23:09:0f:19:fe:e1:c5:78:99:
         1a:0c:e6:65:a1:5c:d4:26:fa:f0:d1:59:0f:a8:b8:83:95:48:
         e1:b0:14:31:74:ec:cd:5a:11:f3:99:e7:c7:96:d4:b8:14:b4:
         36:d2:6d:89:f3:3e:ef:59:b9:19:1a:5a:3a:71:7e:78:27:38:
         8e:1d:f9:23:4b:b1:67:5c:5e:45:0e:69:7a:e3:c1:d5:d9:ab:
         75:02:8e:dd:57:2b:78:0d:8f:fe:ce:22:66:63:2c:a1:0d:a2:
         39:b3:08:af:55:f4:62:b4:06:2b:d7:4c:a7:9d:06:10:c7:56:
         ec:f8:36:d3
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MzIxMjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcwQzZGQzU2ODY5MkVB
QjE2Mzk5M0UyNzlERTIwN0IwM0ExMzZCODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC05a7Gfo322mG6YI4V79JcNNsmiKX+H4O4FgCk2i8xyJ/SdQoY
0oQ0ieqHR07u/w4xqYIh7y85JasyfemfP6WlYZuO6Bb9/vhrbAh6zP/JhmFDunjC
aV9z5RD5FmzWle9CQM4Es95RLAeUYJ0dodq0oLaIom5BwGwvV/Qm3G+wSPGbmR+n
/A70aKmoCilQEVEpO+AqqPjdDYiDQWDNSp+vZcOPhdwNU/GIa7rfrbwjceuFTjV6
HLR6VsVq4uWECC44DxUWoa9fjPs0L7AQHDfGeBmNX9N1DQ1uBm1B1Pnh29zXrPlE
l+ophkVVaP+NNn8BN6MVUBbqQhlr1vvjmsaBAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUcMb8VoaS6rFjmT4nneIHsDoTa4IwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9jTWI4Vm9hUzZyRmptVDRubmVJ
SHNEb1RhNEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCy0Co
MA0GCSqGSIb3DQEBCwUAA4IBAQB5Lm7iP5GmDrq0+ZcfKTRvJmeOFBuFHyeDA3FQ
LR736npUEFw/GdTdWxXBEwYwr3R3ECiyDfccSZ3QXMfpFvxvqGnDN0a/7F4FPVmc
Hp61YRpeNyr1DrLLqAC32Ng9EtG2bMAhgPc0sOv3Mk58A+oUt/Vn+SvfRDLB1DQI
pNaG9LpwVLZi4NAjCQ8Z/uHFeJkaDOZloVzUJvrw0VkPqLiDlUjhsBQxdOzNWhHz
mefHltS4FLQ20m2J8z7vWbkZGlo6cX54JziOHfkjS7FnXF5FDml648HV2at1Ao7d
Vyt4DY/+ziJmYyyhDaI5swivVfRitAYr10ynnQYQx1bs+DbT
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:30 2026 by rpki-client