This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ddbCwWqKwTWpYe5DRsg3SLaYO9A.roa
File:                     ddbCwWqKwTWpYe5DRsg3SLaYO9A.roa (raw, json)
Hash identifier:          ms326yS+LIfhojhwS9R9DbCVm9b9M/FuBsW1vbBKSvs=
Subject key identifier:   75:D6:C2:C1:6A:8A:C1:35:A9:61:EE:43:46:C8:37:48:B6:98:3B:D0
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1300
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ddbCwWqKwTWpYe5DRsg3SLaYO9A.roa
Signing time:             Tue 03 Feb 2026 09:01:06 +0000
ROA not before:           Tue 03 Feb 2026 09:01:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.70.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4864 (0x1300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 09:01:06 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=75D6C2C16A8AC135A961EE4346C83748B6983BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:12:34:cc:a2:fe:49:fa:f6:2c:25:28:f2:
                    1d:49:30:9c:87:49:77:37:e1:81:26:ad:88:ce:a3:
                    ea:8c:25:6c:61:f7:ef:3e:7e:5d:72:54:ab:66:27:
                    ed:18:04:e4:7a:9d:7d:68:88:7a:18:e5:9f:61:3d:
                    b2:e6:4a:4a:f0:f7:1c:fc:7d:c4:03:9a:28:a6:36:
                    0f:9c:1f:a0:36:96:9a:68:16:67:2f:ee:7f:6c:43:
                    12:e0:29:6f:b0:58:46:f2:6c:6f:45:a0:f9:5f:29:
                    23:2e:2a:d3:a9:aa:a9:e1:a7:91:fe:94:ab:c3:b1:
                    49:e6:f8:3e:c3:25:80:dc:f9:ce:ac:63:d1:0f:f6:
                    6d:2d:98:e9:f5:90:68:32:ca:09:cf:a4:41:69:0e:
                    6c:42:84:f9:7f:70:b8:7a:84:8e:d2:e3:2c:a2:dc:
                    7a:79:4b:bc:3f:a4:22:71:77:c3:93:3b:00:60:6d:
                    5c:2d:04:b1:ab:78:fb:29:f1:35:99:ef:1e:e9:40:
                    a7:92:a7:ee:62:16:31:0e:66:93:d3:bc:6c:4c:a5:
                    ca:15:96:68:d5:be:3d:fc:4b:e6:c8:c6:91:e4:5c:
                    37:f3:1a:ab:b8:19:ac:9d:5b:af:53:86:dd:a6:8d:
                    ec:f1:f5:d9:da:6c:9e:96:09:a1:9d:44:5c:f2:69:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D6:C2:C1:6A:8A:C1:35:A9:61:EE:43:46:C8:37:48:B6:98:3B:D0
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ddbCwWqKwTWpYe5DRsg3SLaYO9A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:db:92:89:96:91:21:0e:e4:02:99:99:76:26:2c:8b:b2:0e:
         e0:91:b0:c9:ca:1b:2a:0f:bb:ad:da:b5:73:4d:24:a5:12:50:
         b4:c0:32:a2:39:d1:34:db:2b:9d:9c:24:10:af:79:09:17:05:
         ef:ef:c6:09:fb:9a:f9:d8:43:63:dd:27:5f:13:a3:3a:e4:8c:
         5f:72:7e:d9:9d:4f:8e:08:2c:dd:9f:4d:fd:28:49:58:11:29:
         e2:ed:78:c6:11:3c:9c:17:35:5b:eb:8f:cc:8a:3e:8a:2e:c2:
         5b:c1:54:d0:c9:3c:22:7e:ed:7e:48:42:09:3f:4e:27:ad:69:
         31:2a:f6:f0:81:38:dc:35:cb:c5:17:3c:e2:45:46:44:ae:05:
         87:16:d6:dc:18:f7:ca:94:15:4d:d5:1a:86:e5:c3:ee:de:e9:
         b6:47:10:d3:12:13:16:90:42:c5:0e:71:87:ee:1a:eb:73:29:
         51:e3:45:af:d3:87:1e:78:91:8a:ca:2a:5a:02:99:01:12:1a:
         02:b8:01:e2:02:9c:b7:db:34:3c:c4:bb:1f:10:91:7e:d9:5f:
         dd:7c:07:db:02:4a:b5:e8:3e:29:4f:f7:85:b6:ec:84:1f:b5:
         8d:43:32:6e:4c:f1:9a:30:b1:64:37:d8:cf:03:3f:57:83:56:
         0a:0e:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:30 2026 by rpki-client