This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/gnpuiOI_dcKAjUUqtUVtP4Vf1fY.roa
File:                     gnpuiOI_dcKAjUUqtUVtP4Vf1fY.roa (raw, json)
Hash identifier:          N/VZkEfSizM8Dez9n6Fn015Qs74kJMP6oX905kxeS4w=
Subject key identifier:   82:7A:6E:88:E2:3F:75:C2:80:8D:45:2A:B5:45:6D:3F:85:5F:D5:F6
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1174
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gnpuiOI_dcKAjUUqtUVtP4Vf1fY.roa
Signing time:             Tue 03 Feb 2026 08:44:50 +0000
ROA not before:           Tue 03 Feb 2026 08:44:50 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        192.192.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4468 (0x1174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 08:44:50 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=827A6E88E23F75C2808D452AB5456D3F855FD5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:d8:e3:88:04:34:27:a9:72:a8:77:82:e9:
                    b5:d0:4e:db:5a:da:a8:41:96:03:cb:d9:28:7f:bb:
                    83:77:12:c6:97:88:2c:b9:48:e9:ba:b4:08:8a:2e:
                    2d:c8:c9:0e:be:86:59:7e:65:60:83:2c:d5:1d:bc:
                    ba:cc:0c:3a:75:ae:5b:fb:25:cf:a9:80:68:ca:e1:
                    fa:7b:79:e0:a3:b2:a5:76:52:c4:b5:97:ee:e1:a2:
                    f4:4e:3a:c2:17:67:10:49:92:ce:bc:18:d1:dd:6e:
                    8e:aa:59:05:9c:2d:8f:7f:7d:21:85:1e:c4:39:b9:
                    cd:ae:d3:29:cf:89:d4:2a:cc:4c:17:02:d5:71:62:
                    03:b9:28:ad:c9:29:21:45:49:77:88:2d:be:5f:4d:
                    13:af:c3:34:46:f9:0a:93:a1:79:92:c2:ba:4f:d0:
                    99:9d:d7:43:79:c5:b1:36:87:8b:c0:44:d9:f2:ca:
                    01:2c:65:85:10:5c:f3:fa:33:fd:25:54:a9:5d:48:
                    14:e1:4c:d7:38:a9:f5:05:6c:a7:33:e3:a7:eb:6a:
                    74:62:ea:84:48:fa:75:ef:4e:f3:51:e7:9c:e9:28:
                    bc:f0:59:2a:ee:fb:89:09:ce:2d:7b:85:20:73:1e:
                    63:94:95:59:92:98:fc:99:9b:92:28:f1:87:1e:fe:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7A:6E:88:E2:3F:75:C2:80:8D:45:2A:B5:45:6D:3F:85:5F:D5:F6
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gnpuiOI_dcKAjUUqtUVtP4Vf1fY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:c6:fd:cb:c1:b9:89:77:b5:61:ca:b1:71:4c:25:2e:9f:66:
         68:e5:f8:67:97:49:47:b8:6c:a3:80:08:66:30:43:3a:41:f5:
         a5:cf:66:1f:cf:8a:93:12:9c:b0:1b:84:b7:a2:8a:6f:c6:4a:
         86:35:37:02:9a:95:8c:7c:35:cf:78:2e:f5:7f:79:69:b5:7a:
         bb:33:1e:fa:c1:a4:0b:aa:b3:fd:54:72:96:67:d6:42:0e:db:
         84:b8:84:7c:f7:65:14:ef:e1:fb:5f:bc:17:9e:46:07:83:0a:
         6e:22:43:a2:ec:d2:b5:fa:79:06:7b:5c:91:7b:b8:39:ec:ad:
         03:7d:f3:b4:5a:39:b9:a8:60:9b:41:ed:eb:0f:c9:2d:99:b4:
         c9:cf:b9:96:af:6b:b1:4f:ea:1b:d5:53:dd:2b:3d:1d:41:df:
         87:b9:e2:cd:18:93:be:45:dc:51:32:fe:dc:7a:1a:6d:f6:83:
         1a:d1:76:37:41:5f:0f:9a:e1:62:6a:95:dc:d9:8f:00:6f:f4:
         fe:0a:2b:b7:3a:e8:f3:2b:59:a1:21:2b:ba:42:65:fa:29:bc:
         34:16:7e:d7:0b:bf:00:4e:b5:6f:f3:4f:16:08:8f:44:70:6d:
         1c:2a:af:77:8d:e0:26:d2:98:1c:9d:79:ee:e6:4f:52:13:8b:
         a8:a5:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:44 2026 by rpki-client