This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/fxjPtyXNp687rOFrpSq85iRE-wA.roa
File:                     fxjPtyXNp687rOFrpSq85iRE-wA.roa (raw, json)
Hash identifier:          PRUoncQ7xzgSpXhHMAiYN9KYzTCRPBrC6QU051lOHeY=
Subject key identifier:   7F:18:CF:B7:25:CD:A7:AF:3B:AC:E1:6B:A5:2A:BC:E6:24:44:FB:00
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12CA
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fxjPtyXNp687rOFrpSq85iRE-wA.roa
Signing time:             Tue 03 Feb 2026 08:55:02 +0000
ROA not before:           Tue 03 Feb 2026 08:55:02 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.72.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4810 (0x12ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:55:02 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7F18CFB725CDA7AF3BACE16BA52ABCE62444FB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:90:1f:46:b5:0f:54:f1:af:fb:b5:05:51:32:
                    05:68:2b:2a:fc:50:5e:f4:4a:0b:dd:e5:59:69:34:
                    98:60:0b:83:be:d2:1c:c3:0a:bf:a1:c6:33:95:ad:
                    b7:9e:c5:5d:67:74:d5:93:a1:56:69:f5:61:88:c2:
                    63:42:44:84:b1:6b:39:18:e8:fd:3f:21:a9:49:ed:
                    f2:0c:39:e6:62:d5:f1:03:c3:32:64:b3:57:35:b4:
                    d4:68:a5:bd:03:a2:59:24:fa:b7:d6:70:41:f0:c7:
                    3c:d6:2a:f0:76:d7:d1:df:27:aa:8a:1c:e2:ab:78:
                    dd:14:15:0a:38:96:d8:cb:3f:20:0d:e9:2b:6e:f2:
                    ff:d3:65:6e:66:a8:ba:ec:98:38:6d:60:9a:39:1b:
                    3b:55:5d:ed:9a:0a:f5:74:76:6f:fb:57:57:b8:7f:
                    d4:25:35:4a:e3:18:af:3d:8c:06:f9:50:15:08:71:
                    6d:f0:8f:eb:ce:a3:98:9a:1d:10:94:92:04:c9:9e:
                    fe:72:cd:74:1c:72:79:50:bb:55:0c:b8:e9:f3:45:
                    93:af:ac:73:49:65:fe:63:5f:ee:23:b2:c2:ee:db:
                    fc:a4:27:5d:d2:b4:9d:0a:6a:84:e6:5c:50:c2:f4:
                    a3:63:f8:5f:0c:7c:82:99:33:e5:97:de:11:79:94:
                    5d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:18:CF:B7:25:CD:A7:AF:3B:AC:E1:6B:A5:2A:BC:E6:24:44:FB:00
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fxjPtyXNp687rOFrpSq85iRE-wA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:33:99:76:75:63:a7:32:06:d1:c5:a2:7e:ab:cb:72:60:
         d9:83:23:b7:18:36:a9:78:e9:67:fc:5b:7d:4c:f6:b3:88:8d:
         ae:de:f5:30:8d:0d:37:09:74:42:4c:df:93:56:2a:0c:94:eb:
         6f:ed:c7:46:67:3e:5e:b1:fc:34:f1:01:9f:1b:13:4c:94:5c:
         dc:be:c1:f3:f1:63:f4:c9:19:b4:c8:6b:d4:8f:f5:8e:b7:04:
         b7:3d:13:b8:df:aa:8f:e6:2c:84:b0:f1:cd:17:5f:c5:11:ca:
         a3:d8:b0:de:5b:f7:be:56:20:68:f5:4f:11:63:07:f5:d4:61:
         ff:5b:27:ca:e3:87:4d:c3:2f:9a:77:e0:c1:62:57:5d:20:72:
         ed:04:1a:e8:f4:7c:79:29:bb:de:10:0f:05:1d:72:67:9d:b7:
         a0:a4:4f:6a:22:9a:6e:93:03:7e:88:27:cf:2f:a5:98:06:ac:
         f3:dd:88:44:5e:fd:ac:1c:03:c0:c8:da:7e:96:68:33:97:a8:
         2d:1e:a3:64:5f:a4:55:2b:28:25:76:bf:df:f5:fa:ff:c6:b9:
         2a:1c:00:27:a3:2b:52:bd:54:76:64:70:c0:65:9c:d9:86:98:
         89:83:5e:db:7e:6f:02:4b:a2:b2:57:e4:e0:15:33:c0:e7:d1:
         10:2a:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:58 2026 by rpki-client