This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/gRaL1w8Rj693ViRvJts2ZbWHIdc.roa
File:                     gRaL1w8Rj693ViRvJts2ZbWHIdc.roa (raw, json)
Hash identifier:          YNo/Zs9zqjBNSy/qad1gDUTWR6aL+gXAXn8qSbDRKHc=
Subject key identifier:   81:16:8B:D7:0F:11:8F:AF:77:56:24:6F:26:DB:36:65:B5:87:21:D7
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       129E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gRaL1w8Rj693ViRvJts2ZbWHIdc.roa
Signing time:             Tue 03 Feb 2026 08:49:23 +0000
ROA not before:           Tue 03 Feb 2026 08:49:23 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.68.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4766 (0x129e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:49:23 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=81168BD70F118FAF7756246F26DB3665B58721D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:38:cb:14:3b:37:c9:5b:d7:31:a5:71:ce:
                    fc:1e:11:7f:a1:14:23:2e:84:e7:34:49:f0:c8:08:
                    db:89:08:1e:3f:5a:27:c9:57:9b:89:0f:b1:2a:a3:
                    c8:c5:55:0a:b2:55:16:60:58:8a:c8:90:e7:fc:04:
                    ae:0e:28:f5:47:7d:0e:d7:db:dc:83:90:2e:d9:1c:
                    09:e5:b4:c9:e9:38:18:1f:eb:42:6a:a7:c8:1d:57:
                    88:56:27:cf:d2:7d:05:f5:41:b3:2a:5e:8b:8d:a2:
                    23:ac:08:20:a3:6d:e8:01:f7:0d:7b:eb:02:26:20:
                    2e:03:5c:e4:95:26:b8:ee:93:50:ea:ba:b0:8e:3d:
                    c1:98:03:56:3f:6e:bb:39:c9:7d:e1:15:c5:bc:15:
                    c5:19:79:50:49:9e:e7:87:f1:b4:85:32:30:84:d8:
                    3b:6e:6b:e1:fc:84:09:9d:e5:33:74:5f:6c:62:47:
                    4a:ae:8e:16:e1:2e:13:31:33:19:1f:bc:45:12:c9:
                    ee:ca:be:d2:4f:21:a4:bc:6e:e5:09:4d:96:0e:05:
                    b6:7c:d5:40:a4:74:00:95:d9:c7:15:ca:ac:64:6b:
                    0c:6d:4e:08:d6:b4:dc:fb:ec:cd:00:24:74:4e:d5:
                    c3:58:8f:c6:52:9a:a6:d8:bd:48:61:ae:68:db:c5:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:16:8B:D7:0F:11:8F:AF:77:56:24:6F:26:DB:36:65:B5:87:21:D7
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gRaL1w8Rj693ViRvJts2ZbWHIdc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:e5:e6:d3:f2:7d:f0:43:94:fa:1e:29:10:40:01:40:f6:13:
         80:8f:43:69:6d:ec:a6:68:ae:bd:1b:f7:ab:de:50:19:98:f1:
         8c:0f:60:d9:6f:17:dc:48:5e:c0:50:d5:37:03:f5:17:90:d9:
         f0:e1:ba:d9:c4:38:50:3f:4e:6b:71:96:a6:72:2a:bf:47:1a:
         da:cb:1f:89:98:a7:2c:3c:ef:64:e3:81:4c:e0:31:b8:ad:aa:
         0a:98:68:95:a6:1f:d1:09:50:7a:72:bb:9a:02:43:4a:65:d7:
         0d:60:9e:9b:0c:40:5a:07:8d:d7:e9:11:06:b1:a9:ef:e1:a1:
         86:a0:17:64:58:cf:fc:bc:2c:e0:d0:80:06:8a:02:95:cc:62:
         78:f8:1a:ff:b2:8d:94:24:21:1f:99:53:78:39:d4:91:f6:7b:
         33:36:09:59:4a:96:d2:fd:e0:4e:a9:ba:6c:19:bb:7b:6a:85:
         dd:31:ca:7f:42:4f:f7:e6:9a:ac:80:96:aa:77:df:9c:9e:86:
         e6:52:30:df:8c:d5:44:36:a0:ef:ae:25:ac:56:c7:ae:97:7f:
         10:06:54:1e:21:fe:4c:2d:f7:3b:e4:01:12:d0:ac:f2:30:1a:
         29:f8:97:98:07:2a:25:22:16:06:0f:59:12:4e:8a:00:e6:1d:
         bf:14:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:45 2026 by rpki-client