This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/gZliXYVzCekpjXwZjSFhh_aYRXU.roa
File:                     gZliXYVzCekpjXwZjSFhh_aYRXU.roa (raw, json)
Hash identifier:          eF+S7ztp6Nu9ouBF0ZCodEAE5f5REDI/UHDKRmJoqxY=
Subject key identifier:   81:99:62:5D:85:73:09:E9:29:8D:7C:19:8D:21:61:87:F6:98:45:75
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1394
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gZliXYVzCekpjXwZjSFhh_aYRXU.roa
Signing time:             Fri 06 Feb 2026 01:12:06 +0000
ROA not before:           Fri 06 Feb 2026 01:12:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.70.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5012 (0x1394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:12:06 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8199625D857309E9298D7C198D216187F6984575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:79:f6:d7:19:dc:77:31:f1:4b:aa:be:86:
                    cd:51:bd:e8:c7:e6:f4:84:d6:bc:3d:f7:4e:6c:fb:
                    41:93:b4:c2:0c:b0:f3:10:4e:61:53:0e:28:be:12:
                    fc:a2:15:b2:63:b1:46:74:0f:64:72:e5:a4:f1:11:
                    80:1c:d7:09:4a:21:0e:49:9b:7f:ec:3b:3b:aa:64:
                    9f:ad:b9:39:66:ad:21:11:30:cb:9f:cb:a5:00:72:
                    f3:9a:ef:9e:ff:2f:13:99:29:67:75:ca:fd:e9:b8:
                    12:95:96:a5:11:bc:82:28:10:73:b1:e2:7a:7c:8d:
                    35:d4:7a:83:20:cc:8c:87:e6:0c:4d:5b:e8:0b:d2:
                    d0:db:ca:c8:6e:13:7d:64:49:d3:70:70:11:82:8f:
                    6f:3e:71:50:3e:42:9c:2f:5e:e3:65:86:e2:a6:e6:
                    c3:00:f4:c6:b7:71:b5:65:09:2d:9c:cc:86:c9:33:
                    b2:5d:31:80:3d:9b:b1:19:20:e5:ad:20:66:56:a8:
                    dc:2c:8c:6e:87:3e:0e:58:cd:a5:8c:8b:3c:b3:d8:
                    cf:0d:d9:4e:28:29:02:e4:eb:64:2d:eb:e6:f9:25:
                    a2:fe:a2:03:fe:c6:50:3a:58:b1:1f:ee:a5:56:97:
                    a4:ba:35:83:af:8e:d9:8c:cb:ac:f9:06:8a:35:cb:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:99:62:5D:85:73:09:E9:29:8D:7C:19:8D:21:61:87:F6:98:45:75
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gZliXYVzCekpjXwZjSFhh_aYRXU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:eb:72:c2:8a:de:ab:94:51:c4:68:d5:91:43:7c:b0:63:
         27:c4:f5:9d:e0:ad:7e:57:9d:f7:91:f4:13:6a:86:76:05:26:
         4c:f0:f4:0d:9f:ec:f9:fe:49:b7:32:e6:6f:f2:ea:be:13:35:
         29:03:97:76:04:68:13:24:f9:e5:62:55:70:6a:ea:a6:0c:17:
         93:f8:28:99:81:94:09:fd:a3:3c:53:c8:4b:c6:df:71:ff:55:
         25:97:92:c8:f3:42:fd:44:d6:08:1a:ed:f3:01:cc:d8:61:76:
         fd:7e:51:3d:d1:0e:2a:ab:17:e1:65:79:ce:f3:51:a3:8d:d1:
         74:5a:52:d6:1e:e0:e0:83:4c:62:0d:c3:46:e0:df:04:e6:4e:
         2c:65:76:21:c8:c6:e0:bf:4d:56:0c:1a:0f:5e:86:c8:f9:9c:
         71:7f:18:65:43:9d:68:cd:75:3f:58:45:9b:be:cd:4d:23:ce:
         9c:67:30:fa:96:9d:26:29:2d:b0:7c:b6:60:29:e5:c8:34:a0:
         e8:2b:1e:3e:ba:8f:e8:dd:98:b9:78:ee:f7:4d:a8:39:3f:cc:
         b8:2a:89:9a:30:d4:c3:bc:c7:6a:73:5e:70:b7:0b:8b:c6:5b:
         0d:d6:57:35:28:2f:8d:3c:fb:b6:c0:af:48:ce:3e:df:99:ab:
         cc:6b:8d:da
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICE5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDYw
MTEyMDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgxOTk2MjVEODU3MzA5
RTkyOThEN0MxOThEMjE2MTg3RjY5ODQ1NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpsXn21xncdzHxS6q+hs1RvejH5vSE1rw9905s+0GTtMIMsPMQ
TmFTDii+EvyiFbJjsUZ0D2Ry5aTxEYAc1wlKIQ5Jm3/sOzuqZJ+tuTlmrSERMMuf
y6UAcvOa757/LxOZKWd1yv3puBKVlqURvIIoEHOx4np8jTXUeoMgzIyH5gxNW+gL
0tDbyshuE31kSdNwcBGCj28+cVA+QpwvXuNlhuKm5sMA9Ma3cbVlCS2czIbJM7Jd
MYA9m7EZIOWtIGZWqNwsjG6HPg5YzaWMizyz2M8N2U4oKQLk62Qt6+b5JaL+ogP+
xlA6WLEf7qVWl6S6NYOvjtmMy6z5Boo1y/hJAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUgZliXYVzCekpjXwZjSFhh/aYRXUwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9nWmxpWFlWekNla3BqWHdaalNG
aGhfYVlSWFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0kaE
MA0GCSqGSIb3DQEBCwUAA4IBAQB7V+tyworeq5RRxGjVkUN8sGMnxPWd4K1+V533
kfQTaoZ2BSZM8PQNn+z5/km3MuZv8uq+EzUpA5d2BGgTJPnlYlVwauqmDBeT+CiZ
gZQJ/aM8U8hLxt9x/1Ull5LI80L9RNYIGu3zAczYYXb9flE90Q4qqxfhZXnO81Gj
jdF0WlLWHuDgg0xiDcNG4N8E5k4sZXYhyMbgv01WDBoPXobI+ZxxfxhlQ51ozXU/
WEWbvs1NI86cZzD6lp0mKS2wfLZgKeXINKDoKx4+uo/o3Zi5eO73Tag5P8y4Koma
MNTDvMdqc15wtwuLxlsN1lc1KC+NPPu2wK9Izj7fmavMa43a
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:31 2026 by rpki-client