This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/iDpZdZmzeYfgx-bY0l0B1M0KW88.roa
File:                     iDpZdZmzeYfgx-bY0l0B1M0KW88.roa (raw, json)
Hash identifier:          g75n9VWAtj1o/Dkxs4MCMkaVHqG8hohObXXqznDfrEA=
Subject key identifier:   88:3A:59:75:99:B3:79:87:E0:C7:E6:D8:D2:5D:01:D4:CD:0A:5B:CF
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       10EF
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/iDpZdZmzeYfgx-bY0l0B1M0KW88.roa
Signing time:             Tue 03 Feb 2026 02:33:11 +0000
ROA not before:           Tue 03 Feb 2026 02:33:11 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        140.133.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4335 (0x10ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 02:33:11 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=883A597599B37987E0C7E6D8D25D01D4CD0A5BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:63:db:c2:3a:1a:59:16:b5:61:53:75:cb:
                    23:c8:dd:2e:3e:9b:95:29:2b:d8:9e:1f:4c:7b:86:
                    2a:48:9a:b7:e8:fc:9b:1f:5a:91:e8:c5:83:de:69:
                    c0:41:9a:5c:60:52:39:92:1d:0a:8d:82:33:c7:d0:
                    3d:c8:eb:90:64:2c:24:93:f0:c7:a1:1b:02:0f:98:
                    26:dc:ed:0e:87:73:ed:b3:aa:a6:15:5c:2c:25:94:
                    01:57:a4:49:40:28:52:bf:be:cd:2b:bb:55:4d:9f:
                    f6:ca:fd:b2:e4:25:7f:64:1e:a9:94:16:3f:39:7c:
                    b6:26:11:ec:16:d5:ec:df:18:0b:ae:f3:db:96:6c:
                    59:41:37:e9:25:a9:82:12:1c:cd:65:7d:6f:3c:c8:
                    26:a6:ef:af:29:27:64:84:bf:a9:e4:e0:06:fe:c3:
                    03:e0:f1:8c:c1:ab:e6:7a:80:21:9f:d8:62:ac:c6:
                    b6:fc:98:25:55:5d:71:fd:60:26:04:83:6b:c7:29:
                    13:63:0a:ac:07:6f:d4:f2:ee:58:a5:96:81:7b:83:
                    26:16:5c:e4:90:68:cd:4a:92:ac:0b:7b:99:85:f4:
                    64:11:10:96:f6:0c:d8:9f:f7:ad:6e:ca:46:e8:c5:
                    72:2a:d0:b7:54:ef:e7:5f:17:1b:e4:2f:f3:b0:b7:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3A:59:75:99:B3:79:87:E0:C7:E6:D8:D2:5D:01:D4:CD:0A:5B:CF
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/iDpZdZmzeYfgx-bY0l0B1M0KW88.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.133.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:d9:60:19:3b:ec:2a:4a:30:09:ca:de:f9:2e:fe:c4:1c:04:
         38:7c:a2:31:53:33:28:1e:14:1a:c9:52:cb:13:3e:68:c6:db:
         63:a1:bb:61:0e:1a:a4:3b:f5:22:dc:d7:dc:c8:23:6e:2d:35:
         66:35:68:f7:e4:d7:80:6b:ef:f3:a6:e5:97:3e:cf:59:72:cc:
         71:42:8c:38:5e:ca:d7:63:48:88:2b:1a:5f:d5:3e:dc:5d:e6:
         ff:2b:40:26:c9:f2:70:47:c8:17:32:59:a3:d8:27:f8:d6:ca:
         40:0c:15:d5:14:9d:fc:d7:14:1d:19:30:3b:50:ec:77:90:a8:
         79:90:71:c6:0f:ba:4e:2d:4e:32:d6:03:d4:e2:a3:ab:b7:4b:
         f4:4c:0a:fd:bb:8b:72:9b:6a:c7:f4:28:38:73:0c:7f:c0:54:
         00:b0:7e:b8:53:85:23:34:d2:15:44:d1:66:29:87:d5:fb:5d:
         44:95:4d:a9:2b:c1:03:d8:e1:12:c9:50:92:62:db:0d:d7:1f:
         78:eb:93:e0:97:fd:51:6b:c5:57:b6:43:b4:d3:97:e8:15:0b:
         20:9f:ce:f7:0b:44:e6:43:d9:1a:2a:8f:cc:05:c0:83:9f:ab:
         b2:45:b6:d7:5e:f2:ce:50:1f:18:a9:f1:68:0b:b6:af:c0:c3:
         10:78:1d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:39:27 2026 by rpki-client