This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/hEBRLx4rPJ5xs6V_vI5zJLa4VeM.roa
File:                     hEBRLx4rPJ5xs6V_vI5zJLa4VeM.roa (raw, json)
Hash identifier:          tL6upP04kR7hJ14UE3Rf/QYz8Yg/VDY8LPUWvaHQvRE=
Subject key identifier:   84:40:51:2F:1E:2B:3C:9E:71:B3:A5:7F:BC:8E:73:24:B6:B8:55:E3
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12B4
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hEBRLx4rPJ5xs6V_vI5zJLa4VeM.roa
Signing time:             Tue 03 Feb 2026 08:52:20 +0000
ROA not before:           Tue 03 Feb 2026 08:52:20 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.71.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4788 (0x12b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:52:20 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8440512F1E2B3C9E71B3A57FBC8E7324B6B855E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:00:6d:d8:98:1d:4b:ee:2a:17:67:e6:c3:
                    4f:78:a9:e0:11:cc:e7:9f:d8:e2:3b:7f:9b:85:75:
                    95:2a:9a:e2:09:a5:d8:7e:16:fe:1a:88:fb:43:95:
                    94:f4:af:07:f2:5a:c8:3d:27:df:72:d1:f1:d9:26:
                    76:14:5a:5b:f1:86:cc:93:3a:17:0b:8f:8b:17:64:
                    31:28:aa:33:94:06:82:c1:c6:fa:04:ed:1c:f6:90:
                    5a:56:c7:5b:7d:2c:1a:de:3b:30:92:30:0b:86:fe:
                    8f:86:a5:c7:5a:86:82:77:47:52:c9:09:d5:fb:cf:
                    ca:38:4d:da:44:49:b0:c7:ca:f3:c1:15:c2:4d:b5:
                    56:3b:da:13:f3:fd:c2:ff:dd:04:2d:78:c3:2d:62:
                    5c:c2:22:e2:a6:12:54:27:3d:19:ae:40:b5:9a:1d:
                    7a:74:52:8a:35:8e:b7:61:de:14:3d:1d:51:b1:b4:
                    82:c1:6a:82:8a:f9:f6:d5:e8:6b:59:b3:53:a4:39:
                    5a:3a:bc:24:e9:4a:28:51:a1:dc:cc:a5:8f:6e:44:
                    89:55:33:e8:69:15:e2:fb:05:71:f1:a1:36:6e:00:
                    8f:be:86:cb:b4:7f:c7:88:30:5c:55:62:1d:89:1b:
                    a0:e8:b4:4f:e0:00:94:65:a0:31:11:51:d3:a2:3d:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:40:51:2F:1E:2B:3C:9E:71:B3:A5:7F:BC:8E:73:24:B6:B8:55:E3
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hEBRLx4rPJ5xs6V_vI5zJLa4VeM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:93:9d:9a:e9:b7:13:66:85:71:ec:4f:bd:20:d6:13:28:
         0e:07:4b:25:e9:2e:3c:c7:3b:60:e6:26:fd:7f:a7:23:45:71:
         09:99:0c:85:2c:75:07:70:3a:88:b2:34:75:be:1d:88:2b:f9:
         53:bd:21:71:63:0c:01:8f:67:d5:56:a9:9a:26:13:ef:a1:66:
         d9:9a:59:66:0a:cd:39:b1:86:85:44:70:04:ac:7b:4a:28:72:
         30:c4:f1:86:28:a3:dd:4f:f3:2d:5b:1f:0f:a2:25:1a:8c:00:
         84:b4:eb:1a:63:25:cc:a3:ef:73:57:68:cf:70:b7:eb:7d:fc:
         bf:a0:e2:04:f9:75:0d:b1:d1:17:b4:a3:d7:10:e1:b1:4e:3f:
         1e:77:1a:82:f4:af:e4:da:89:92:6f:ea:03:6b:8c:00:1f:61:
         2f:6c:ea:e2:a1:8e:c1:f7:99:e6:bb:8e:44:c4:8f:aa:75:c6:
         79:45:9a:85:ff:82:ea:77:8e:42:5f:ce:e0:2e:f2:8f:17:f8:
         c5:1f:c0:fd:55:10:65:26:c8:29:49:3f:f1:83:1e:70:e2:7d:
         d5:7e:c4:4b:93:9b:4a:9f:f1:fa:68:cc:c6:95:90:84:61:c2:
         c2:be:24:35:93:04:50:c3:2e:8e:89:f4:7b:db:4d:42:da:09:
         9e:1a:14:f3
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICErQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
ODUyMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg0NDA1MTJGMUUyQjND
OUU3MUIzQTU3RkJDOEU3MzI0QjZCODU1RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYHABt2JgdS+4qF2fmw094qeARzOef2OI7f5uFdZUqmuIJpdh+
Fv4aiPtDlZT0rwfyWsg9J99y0fHZJnYUWlvxhsyTOhcLj4sXZDEoqjOUBoLBxvoE
7Rz2kFpWx1t9LBreOzCSMAuG/o+GpcdahoJ3R1LJCdX7z8o4TdpESbDHyvPBFcJN
tVY72hPz/cL/3QQteMMtYlzCIuKmElQnPRmuQLWaHXp0Uoo1jrdh3hQ9HVGxtILB
aoKK+fbV6GtZs1OkOVo6vCTpSihRodzMpY9uRIlVM+hpFeL7BXHxoTZuAI++hsu0
f8eIMFxVYh2JG6DotE/gAJRloDERUdOiPaGTAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUhEBRLx4rPJ5xs6V/vI5zJLa4VeMwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9oRUJSTHg0clBKNXhzNlZfdkk1
ekpMYTRWZU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy0c0
MA0GCSqGSIb3DQEBCwUAA4IBAQA+CJOdmum3E2aFcexPvSDWEygOB0sl6S48xztg
5ib9f6cjRXEJmQyFLHUHcDqIsjR1vh2IK/lTvSFxYwwBj2fVVqmaJhPvoWbZmllm
Cs05sYaFRHAErHtKKHIwxPGGKKPdT/MtWx8PoiUajACEtOsaYyXMo+9zV2jPcLfr
ffy/oOIE+XUNsdEXtKPXEOGxTj8edxqC9K/k2omSb+oDa4wAH2EvbOrioY7B95nm
u45ExI+qdcZ5RZqF/4Lqd45CX87gLvKPF/jFH8D9VRBlJsgpST/xgx5w4n3VfsRL
k5tKn/H6aMzGlZCEYcLCviQ1kwRQwy6OifR7201C2gmeGhTz
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:31 2026 by rpki-client