This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/hpuVFzw6F920Xv74yaatKYQFBoY.roa
File:                     hpuVFzw6F920Xv74yaatKYQFBoY.roa (raw, json)
Hash identifier:          dS6t//kJpy6S0/jnCBR5bzIT/NJf+j7KlOg74WSjh1o=
Subject key identifier:   86:9B:95:17:3C:3A:17:DD:B4:5E:FE:F8:C9:A6:AD:29:84:05:06:86
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11BA
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hpuVFzw6F920Xv74yaatKYQFBoY.roa
Signing time:             Tue 03 Feb 2026 02:34:01 +0000
ROA not before:           Tue 03 Feb 2026 02:34:01 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        163.22.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4538 (0x11ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:34:01 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=869B95173C3A17DDB45EFEF8C9A6AD2984050686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:d8:97:e5:31:7b:66:5d:42:8e:64:a5:56:
                    6c:e8:75:26:27:af:d7:10:d5:75:93:1c:a7:e4:94:
                    5d:a0:16:ea:1f:6c:a5:76:69:bc:12:44:6f:88:51:
                    d0:de:b7:f4:94:f0:70:ea:70:1b:6c:33:11:69:5b:
                    3c:7b:7a:84:34:71:3e:44:a6:ff:39:c6:69:72:9e:
                    36:75:d9:49:c1:87:e8:c2:69:d3:17:76:86:00:79:
                    e8:13:f5:a1:da:42:3b:0d:38:1d:92:9c:dd:88:f2:
                    20:a3:d9:1c:c0:57:69:71:a0:b3:89:aa:34:62:72:
                    af:9a:2e:d0:42:78:e0:fc:11:7b:31:45:47:15:1c:
                    e1:6f:82:ac:42:70:e6:40:bb:65:e7:ce:3e:c7:8f:
                    f9:7d:af:4b:34:db:79:4d:26:6a:92:7a:13:98:ed:
                    0a:67:f8:01:b2:98:18:39:c2:35:64:5d:30:66:ec:
                    ea:3d:0a:ac:8f:b5:36:51:b6:28:00:31:92:46:52:
                    a5:27:c6:eb:3d:be:6b:fa:6b:38:bc:ac:23:22:44:
                    65:92:5a:db:aa:0a:bb:a8:b6:36:67:e4:38:80:32:
                    c5:f9:36:10:bd:ce:82:b2:67:12:6d:7a:20:95:26:
                    e8:ce:c0:43:19:74:3a:36:47:86:92:f5:5a:2c:69:
                    f7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9B:95:17:3C:3A:17:DD:B4:5E:FE:F8:C9:A6:AD:29:84:05:06:86
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hpuVFzw6F920Xv74yaatKYQFBoY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.22.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:f9:5d:74:55:74:dc:f8:9b:be:16:41:f4:42:f6:60:75:a6:
         95:15:73:ee:d3:e5:2e:95:16:87:0c:ef:4b:a3:82:99:d8:6f:
         90:cc:4e:47:33:e4:e2:73:38:f3:9b:25:cb:a2:f6:7c:f1:94:
         b0:5c:97:dd:2f:3f:aa:8d:ad:be:95:77:29:5d:c4:c1:78:c4:
         25:0c:bd:78:b1:57:62:13:ff:7a:05:ce:29:3f:e8:19:a6:4c:
         26:46:13:e7:06:fe:54:4b:69:96:09:71:da:09:43:57:8f:aa:
         7b:1e:8e:3a:41:10:18:ef:ff:c8:65:8f:17:a9:2d:fd:1a:65:
         3a:52:77:b8:6c:81:29:7a:6f:85:98:be:4a:bb:9d:2e:ac:54:
         8d:9f:c0:49:57:ef:ba:3f:28:c7:a0:3c:31:4b:b7:42:37:b2:
         e8:f2:fc:a2:22:e8:bb:7f:d3:b6:60:b0:1c:fe:65:71:b7:06:
         eb:74:7c:a0:0d:d6:a4:bb:0d:e2:8e:8a:c3:c1:b9:fc:c7:60:
         77:ee:86:d1:57:ea:cf:a8:a5:cd:c6:c6:e6:5f:97:d4:58:c2:
         03:54:f0:32:f8:e8:e0:72:7c:85:a1:9d:cf:e0:a1:d9:94:8d:
         2f:0c:0d:61:f2:a9:67:f8:67:ba:7b:b9:a0:72:eb:d4:27:c0:
         ed:8d:69:99
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MjM0MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg2OUI5NTE3M0MzQTE3
RERCNDVFRkVGOEM5QTZBRDI5ODQwNTA2ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgh9iX5TF7Zl1CjmSlVmzodSYnr9cQ1XWTHKfklF2gFuofbKV2
abwSRG+IUdDet/SU8HDqcBtsMxFpWzx7eoQ0cT5Epv85xmlynjZ12UnBh+jCadMX
doYAeegT9aHaQjsNOB2SnN2I8iCj2RzAV2lxoLOJqjRicq+aLtBCeOD8EXsxRUcV
HOFvgqxCcOZAu2Xnzj7Hj/l9r0s023lNJmqSehOY7Qpn+AGymBg5wjVkXTBm7Oo9
CqyPtTZRtigAMZJGUqUnxus9vmv6azi8rCMiRGWSWtuqCruotjZn5DiAMsX5NhC9
zoKyZxJteiCVJujOwEMZdDo2R4aS9Vosaff7AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUhpuVFzw6F920Xv74yaatKYQFBoYwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9ocHVWRnp3NkY5MjBYdjc0eWFh
dEtZUUZCb1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoxax
MA0GCSqGSIb3DQEBCwUAA4IBAQAj+V10VXTc+Ju+FkH0QvZgdaaVFXPu0+UulRaH
DO9Lo4KZ2G+QzE5HM+TiczjzmyXLovZ88ZSwXJfdLz+qja2+lXcpXcTBeMQlDL14
sVdiE/96Bc4pP+gZpkwmRhPnBv5US2mWCXHaCUNXj6p7Ho46QRAY7//IZY8XqS39
GmU6Une4bIEpem+FmL5Ku50urFSNn8BJV++6PyjHoDwxS7dCN7Lo8vyiIui7f9O2
YLAc/mVxtwbrdHygDdakuw3ijorDwbn8x2B37obRV+rPqKXNxsbmX5fUWMIDVPAy
+OjgcnyFoZ3P4KHZlI0vDA1h8qln+Ge6e7mgcuvUJ8DtjWmZ
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:56 2026 by rpki-client