This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/g_PZjinyYV_f0-NjpT-cqFd5SV8.roa
File:                     g_PZjinyYV_f0-NjpT-cqFd5SV8.roa (raw, json)
Hash identifier:          6tgkEU82SkqXaHKY/yWnh29HBcUUq799mQp7BYXQr6Y=
Subject key identifier:   83:F3:D9:8E:29:F2:61:5F:DF:D3:E3:63:A5:3F:9C:A8:57:79:49:5F
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11BC
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/g_PZjinyYV_f0-NjpT-cqFd5SV8.roa
Signing time:             Tue 03 Feb 2026 02:34:09 +0000
ROA not before:           Tue 03 Feb 2026 02:34:09 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        163.22.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4540 (0x11bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:34:09 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=83F3D98E29F2615FDFD3E363A53F9CA85779495F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:8a:87:92:4c:d3:6f:a9:c5:40:1b:1f:3a:
                    5a:4a:2a:e9:e5:3c:b0:75:cc:25:41:6d:60:f1:55:
                    9a:da:e9:95:0b:39:f8:b2:19:12:64:9d:47:66:9e:
                    c9:2a:79:86:69:67:7b:da:8b:73:b3:c9:2d:ab:25:
                    cb:20:f9:fc:77:8a:ae:9c:85:6c:db:51:c3:80:ce:
                    42:77:f5:d6:6e:77:0e:de:8b:26:69:37:28:12:23:
                    b2:b8:5a:8a:30:06:86:95:70:e7:3a:49:27:04:41:
                    6e:d0:a8:1c:e1:86:c5:d7:83:4a:26:51:37:dd:8e:
                    bf:3d:d9:08:8a:01:90:76:7c:7f:b1:bd:0a:2c:f7:
                    00:4f:a0:58:e9:29:5a:64:d2:21:4e:36:fb:24:2e:
                    56:2a:3e:0e:9e:1a:d5:f3:c9:18:d7:f8:f7:73:d7:
                    75:fe:76:87:d7:d0:7c:39:26:f7:98:07:6e:b1:ca:
                    b2:82:58:e6:19:8e:c1:66:a2:59:8a:68:ba:29:66:
                    14:21:d2:5a:bf:c6:36:d6:cc:d3:56:fc:96:bf:37:
                    23:25:33:4f:63:d1:a4:e0:b4:78:1e:79:73:db:15:
                    0f:1d:d9:28:00:83:e0:b7:36:86:2d:f1:1f:f8:ef:
                    4c:74:2f:d8:3f:c7:6e:75:96:65:25:1e:37:46:f0:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F3:D9:8E:29:F2:61:5F:DF:D3:E3:63:A5:3F:9C:A8:57:79:49:5F
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/g_PZjinyYV_f0-NjpT-cqFd5SV8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.22.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:82:eb:26:23:98:40:85:63:e6:09:cb:65:d5:11:f1:53:ea:
         53:a2:c8:df:95:d9:f6:3d:2e:68:2f:8e:ea:d8:74:3c:e8:72:
         a1:1e:d7:20:22:48:3a:ce:97:42:09:75:88:39:25:6c:3a:86:
         bd:78:8a:7e:e6:76:90:9b:68:8f:da:76:05:10:92:57:96:07:
         e4:14:dd:f5:4a:ab:98:a8:9e:b7:6b:15:14:ec:b4:ab:28:bd:
         3c:66:a5:cf:14:62:17:c3:f9:ba:e8:ce:ae:53:9e:c7:1d:7e:
         ac:88:bd:9c:08:3e:db:27:17:ad:ff:12:10:d1:47:01:04:32:
         08:0b:6a:71:f4:e4:d3:4c:28:38:b3:1b:4a:9f:78:45:2e:1f:
         29:01:3e:17:30:bb:fa:f2:58:8c:96:40:46:c0:b2:15:49:f3:
         60:db:d7:99:db:19:8d:f3:7f:44:de:7f:4c:6d:9d:6a:e4:76:
         e2:e7:8f:00:19:12:1c:e0:b7:1a:98:2a:9b:7d:5a:22:52:c4:
         ed:d0:bf:fc:64:78:4e:21:9c:d5:89:56:65:4a:f1:ec:da:b1:
         0d:4c:c4:72:7c:06:79:0e:7d:86:a5:b2:9c:7b:90:42:74:a7:
         f9:ae:03:40:be:34:18:cd:7f:a7:94:23:61:fe:90:ca:8e:93:
         1f:5c:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:46 2026 by rpki-client