This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/i64pOXSRj3LTHb1ijhrvi-l5gTk.roa
File:                     i64pOXSRj3LTHb1ijhrvi-l5gTk.roa (raw, json)
Hash identifier:          ubwQJW+41cdMY6Ys8q7Tvg/r2GztMKQSUWozZMYX/wY=
Subject key identifier:   8B:AE:29:39:74:91:8F:72:D3:1D:BD:62:8E:1A:EF:8B:E9:79:81:39
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       11C9
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/i64pOXSRj3LTHb1ijhrvi-l5gTk.roa
Signing time:             Fri 06 Feb 2026 01:01:05 +0000
ROA not before:           Fri 06 Feb 2026 01:01:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        192.192.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4553 (0x11c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  6 01:01:05 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8BAE293974918F72D31DBD628E1AEF8BE9798139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:18:1d:d4:65:91:b1:39:9c:cd:bf:67:cb:
                    1b:69:b8:b6:1d:5a:3a:15:c1:7a:9b:45:91:a6:e5:
                    0a:97:4e:c5:0d:40:bf:02:4c:b3:83:bc:b8:3d:fe:
                    ed:bb:0d:ac:4a:45:15:10:19:d1:47:e7:04:8e:c0:
                    fb:05:a9:ea:b6:88:a7:b1:22:98:09:22:d0:20:c2:
                    f9:da:93:ef:7a:55:4b:6c:ab:09:c0:2b:e2:dd:72:
                    17:3d:b3:6a:f2:16:27:80:34:6a:74:07:e4:88:74:
                    e9:c0:ba:c9:56:19:01:8f:01:6a:b3:45:60:bd:b5:
                    c2:e0:4a:7a:f4:40:2a:bc:98:c9:d3:71:aa:ce:0d:
                    6e:df:7a:53:4f:ed:cb:d8:d9:1f:f5:47:4c:08:ed:
                    11:a6:bc:db:d8:78:39:b1:d8:3b:43:36:81:03:23:
                    99:68:28:e0:ae:15:cf:a9:b6:41:93:aa:c5:75:e2:
                    9e:35:5c:dc:e0:e1:f4:91:82:31:36:3a:35:f0:c9:
                    c9:0b:d2:ae:b3:20:3b:ca:01:ed:f9:fb:a7:52:73:
                    69:66:11:d7:f6:fd:10:b9:1d:9b:1e:a1:a1:40:71:
                    3d:0c:28:36:26:9f:f7:9e:6f:f1:38:a1:c2:16:c9:
                    1c:50:0c:21:d8:f3:41:90:0d:a7:56:5a:b5:2a:31:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AE:29:39:74:91:8F:72:D3:1D:BD:62:8E:1A:EF:8B:E9:79:81:39
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/i64pOXSRj3LTHb1ijhrvi-l5gTk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:f3:23:65:3a:81:05:c0:11:ee:b0:0b:c9:e3:dc:5f:a6:
         2a:ff:38:61:02:3f:fb:12:d0:0a:ef:c3:24:73:21:8c:15:59:
         fb:75:d0:be:93:fa:95:50:c2:e9:43:84:75:b3:ba:d6:63:0f:
         c2:2f:3c:bf:56:a8:00:f6:20:a3:b8:06:d2:ae:04:5c:0b:93:
         5c:b9:80:90:09:cd:f1:59:20:ac:5f:a2:0a:f1:f2:e7:0b:e1:
         f7:b3:0c:4c:58:e7:bc:6c:e6:5e:fa:74:95:d6:18:fc:fd:2f:
         e1:19:85:92:5d:62:ae:3d:05:4f:48:b8:1b:bf:9a:90:00:fe:
         c5:53:49:c3:80:2d:8e:30:50:23:37:12:13:ba:1b:2e:a7:24:
         b4:3b:39:92:ce:8f:06:7b:1b:44:de:fb:fe:e5:10:c9:32:1b:
         db:f8:f3:9b:23:0d:83:d3:33:93:a0:a6:cd:77:d4:5b:90:9e:
         90:11:5d:2b:d0:30:d6:d1:da:38:a4:7d:68:25:5a:f2:35:14:
         b4:b3:aa:fd:0b:68:cb:e7:93:50:10:94:91:e3:3f:bb:fe:43:
         d6:e1:f0:8c:3b:7e:96:46:87:12:73:61:60:e1:eb:3e:4c:48:
         a0:a3:f1:29:c2:3f:8d:f0:e7:22:89:cb:f7:b2:6d:65:69:74:
         e9:ec:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:38:26 2026 by rpki-client