This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/gIGwHVHfkiBUswIxBiTvJltMOfo.roa
File:                     gIGwHVHfkiBUswIxBiTvJltMOfo.roa (raw, json)
Hash identifier:          kBap1bFvIf5i/z3azXilwbQAvHMdE2M5lbuuH6JPfO4=
Subject key identifier:   80:81:B0:1D:51:DF:92:20:54:B3:02:31:06:24:EF:26:5B:4C:39:FA
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11EB
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gIGwHVHfkiBUswIxBiTvJltMOfo.roa
Signing time:             Tue 03 Feb 2026 02:53:24 +0000
ROA not before:           Tue 03 Feb 2026 02:53:24 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        203.64.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4587 (0x11eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:53:24 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8081B01D51DF922054B302310624EF265B4C39FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:81:a8:83:0a:11:22:b8:96:d5:b2:b3:15:
                    ad:ce:a1:bc:f5:78:30:c7:76:30:12:e4:06:d7:d1:
                    5e:ab:c8:24:18:80:85:fe:d2:ba:d5:8b:86:c8:b4:
                    d4:16:90:9d:3d:aa:ba:1f:49:5b:87:5d:e6:3a:7d:
                    03:e3:f8:20:00:5b:a8:f9:7d:80:bb:66:dc:37:88:
                    b2:6c:fb:83:70:79:7c:ba:31:c1:c2:62:29:46:c0:
                    76:01:67:6f:f8:55:33:ea:03:68:39:05:9c:64:f0:
                    41:4d:ba:32:23:34:db:dd:c6:5b:93:ca:6b:78:64:
                    cc:65:ec:bd:b3:86:54:7e:d6:c1:31:c5:69:74:d0:
                    7d:5c:dd:2a:bd:79:40:bc:0f:4b:c2:d4:a8:ad:4e:
                    22:fa:21:ce:80:6c:eb:85:07:bb:a7:ea:44:b1:cf:
                    42:d6:44:b4:81:e6:62:f4:0c:4d:e4:50:2b:67:a9:
                    ea:59:32:4e:58:2b:95:d7:be:a2:47:f6:76:c5:9c:
                    a0:76:7d:ee:33:1f:3a:94:97:db:cc:ba:ac:36:a0:
                    bd:cd:ef:a5:93:06:12:bb:66:73:37:8b:8b:a6:d2:
                    30:fa:21:64:ce:eb:e9:7a:4f:88:14:32:3d:aa:64:
                    84:1f:66:0f:a5:b7:16:59:5f:95:be:30:af:eb:6b:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:81:B0:1D:51:DF:92:20:54:B3:02:31:06:24:EF:26:5B:4C:39:FA
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gIGwHVHfkiBUswIxBiTvJltMOfo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:50:31:98:7f:a2:88:13:5e:75:02:0f:9e:6a:82:e3:ec:ee:
         92:f5:5b:96:3b:fb:ac:c4:a0:9b:4f:17:1c:4b:59:db:b5:cc:
         89:93:03:c4:71:1d:f6:8e:ef:3e:06:d2:80:9b:38:61:3f:f9:
         85:3c:2d:2f:9a:6e:3e:d3:68:dc:e8:f8:03:cc:0f:44:ed:7e:
         5b:cb:08:c7:e6:65:86:e8:af:6b:48:16:eb:62:95:49:67:9b:
         67:b7:34:9a:8e:59:63:39:58:f9:08:2a:1d:06:f5:74:d0:b2:
         96:22:3f:d9:dc:6c:ab:70:bc:bb:e6:cf:38:73:1e:b9:d6:57:
         a9:ad:8b:b5:14:42:bf:2c:73:74:9e:38:c8:13:01:8a:3d:97:
         b1:99:c6:2f:d0:e9:c6:96:0a:87:64:12:87:df:39:5a:11:7c:
         d5:77:57:1b:2c:55:39:5a:04:32:95:bb:4f:4a:6a:08:22:1c:
         1d:77:f9:3e:d1:9f:31:5e:53:f1:c1:ee:e8:95:ff:d4:95:c7:
         e2:f5:78:bf:a3:30:52:03:4f:83:5c:01:68:05:f7:e5:cc:1e:
         64:87:3c:c6:07:50:c9:a2:c8:8e:50:f6:8d:ec:2f:37:b8:c3:
         4c:8c:3d:18:72:e8:15:51:b0:69:d0:1c:c4:c3:9a:68:f4:86:
         67:00:1b:cd
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MjUzMjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgwODFCMDFENTFERjky
MjA1NEIzMDIzMTA2MjRFRjI2NUI0QzM5RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnnoGogwoRIriW1bKzFa3Oobz1eDDHdjAS5AbX0V6ryCQYgIX+
0rrVi4bItNQWkJ09qrofSVuHXeY6fQPj+CAAW6j5fYC7Ztw3iLJs+4NweXy6McHC
YilGwHYBZ2/4VTPqA2g5BZxk8EFNujIjNNvdxluTymt4ZMxl7L2zhlR+1sExxWl0
0H1c3Sq9eUC8D0vC1KitTiL6Ic6AbOuFB7un6kSxz0LWRLSB5mL0DE3kUCtnqepZ
Mk5YK5XXvqJH9nbFnKB2fe4zHzqUl9vMuqw2oL3N76WTBhK7ZnM3i4um0jD6IWTO
6+l6T4gUMj2qZIQfZg+ltxZZX5W+MK/ra01VAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUgIGwHVHfkiBUswIxBiTvJltMOfowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9nSUd3SFZIZmtpQlVzd0l4QmlU
dkpsdE1PZm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy0Ai
MA0GCSqGSIb3DQEBCwUAA4IBAQBzUDGYf6KIE151Ag+eaoLj7O6S9VuWO/usxKCb
TxccS1nbtcyJkwPEcR32ju8+BtKAmzhhP/mFPC0vmm4+02jc6PgDzA9E7X5bywjH
5mWG6K9rSBbrYpVJZ5tntzSajlljOVj5CCodBvV00LKWIj/Z3GyrcLy75s84cx65
1leprYu1FEK/LHN0njjIEwGKPZexmcYv0OnGlgqHZBKH3zlaEXzVd1cbLFU5WgQy
lbtPSmoIIhwdd/k+0Z8xXlPxwe7olf/Ulcfi9Xi/ozBSA0+DXAFoBfflzB5khzzG
B1DJosiOUPaN7C83uMNMjD0YcugVUbBp0BzEw5po9IZnABvN
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:24 2026 by rpki-client