This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/g8J8TdvAxZXHJxiwG1DdB_bke74.roa
File:                     g8J8TdvAxZXHJxiwG1DdB_bke74.roa (raw, json)
Hash identifier:          dj0DrHyObi3JX4maK4yop1ZOKqjv8tdqwpJFi0WwZNY=
Subject key identifier:   83:C2:7C:4D:DB:C0:C5:95:C7:27:18:B0:1B:50:DD:07:F6:E4:7B:BE
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12DA
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/g8J8TdvAxZXHJxiwG1DdB_bke74.roa
Signing time:             Tue 03 Feb 2026 08:56:43 +0000
ROA not before:           Tue 03 Feb 2026 08:56:43 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.59.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4826 (0x12da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:56:43 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=83C27C4DDBC0C595C72718B01B50DD07F6E47BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:81:90:0a:db:fb:68:a7:9e:15:43:50:e8:
                    5b:2f:8a:b2:01:a2:38:94:63:1b:a3:6b:04:01:cb:
                    b1:1a:43:98:d0:ea:a5:52:9c:71:64:48:c7:56:e6:
                    df:bd:5c:f2:f4:ca:a5:26:f3:5f:da:de:29:65:b2:
                    e6:cc:94:60:92:4f:fa:1c:9c:53:3a:2d:f7:f6:6e:
                    37:8d:83:70:cf:72:1d:49:94:18:2c:66:2b:cd:99:
                    59:7c:aa:09:4b:a0:01:a2:7e:13:8f:65:be:a3:3f:
                    e4:c2:6d:14:cc:97:1a:d7:50:56:53:31:1b:82:c7:
                    4f:9e:22:ec:09:83:84:23:33:4d:52:ca:7c:6e:8c:
                    b0:28:a2:d4:b9:24:e2:d9:40:c6:68:3f:0c:2b:73:
                    87:ea:fc:20:21:de:9a:37:ec:8e:2c:78:95:a0:18:
                    a1:dc:1f:71:9b:c8:43:04:e8:50:5c:b3:35:44:71:
                    33:5a:2e:4c:a4:4f:46:35:de:d1:3b:34:ef:6a:a4:
                    68:fc:be:7c:93:b4:08:9b:ab:bb:65:01:d4:9a:60:
                    6e:09:b0:6f:27:7d:7b:c7:a1:0c:2d:19:46:c6:de:
                    e9:72:ad:97:b9:99:23:d7:a5:63:db:bf:a0:28:4c:
                    83:40:ac:36:1c:c0:bd:85:18:19:3e:17:97:1f:60:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C2:7C:4D:DB:C0:C5:95:C7:27:18:B0:1B:50:DD:07:F6:E4:7B:BE
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/g8J8TdvAxZXHJxiwG1DdB_bke74.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.59.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:b8:ac:81:1d:8b:52:5a:0d:36:cd:5c:c5:51:e2:6f:cf:7c:
         25:79:7c:0c:12:f7:c6:5c:c2:a4:1c:47:34:50:38:09:5f:b6:
         2c:76:c4:82:09:07:7f:78:03:4f:ec:3a:9c:37:a4:b1:67:5d:
         38:1a:0a:73:c4:ec:9d:4b:71:4e:78:f2:a5:ad:a8:20:e3:69:
         60:b8:ae:d7:94:91:e5:45:6a:10:41:63:7f:11:62:29:03:83:
         4f:54:86:c5:cc:a6:af:23:61:f6:5b:10:30:88:51:ba:88:9b:
         b1:a8:ca:7d:94:49:02:44:b1:28:34:03:23:c8:4c:86:d3:75:
         91:5a:4a:b4:94:76:ef:28:30:2a:e9:b4:67:fa:52:3a:8e:e5:
         6e:32:1d:08:eb:10:8f:d8:59:d3:cd:06:67:99:24:12:bd:44:
         9f:ee:25:e0:df:c3:bc:df:31:26:52:50:1e:70:e1:d6:6d:a2:
         21:59:89:9a:a6:95:ff:aa:dc:57:9b:de:21:59:d6:69:55:52:
         18:f9:3b:86:9e:1f:ed:5c:6d:13:4c:48:80:64:85:f2:82:20:
         5d:3a:ae:9d:a9:d8:ac:de:66:30:e8:f2:85:11:7a:eb:4d:a5:
         1c:ca:6a:4f:5d:39:7b:c4:d0:5a:59:12:f7:0b:cd:1c:cb:44:
         6f:65:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:54 2026 by rpki-client