This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ietjeWo0uVlIwmx1rD2vfdwuaE0.roa
File:                     ietjeWo0uVlIwmx1rD2vfdwuaE0.roa (raw, json)
Hash identifier:          V9JRBHSBo46XYfsLYvbEXLbNmA9oYQ74AhFsgT/kpt4=
Subject key identifier:   89:EB:63:79:6A:34:B9:59:48:C2:6C:75:AC:3D:AF:7D:DC:2E:68:4D
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11A7
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ietjeWo0uVlIwmx1rD2vfdwuaE0.roa
Signing time:             Tue 03 Feb 2026 02:30:02 +0000
ROA not before:           Tue 03 Feb 2026 02:30:02 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        120.106.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4519 (0x11a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:30:02 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=89EB63796A34B95948C26C75AC3DAF7DDC2E684D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:89:0e:96:28:d0:04:66:88:63:b6:f9:a1:
                    80:ac:2a:76:e1:52:a3:28:70:b3:0a:1a:07:24:05:
                    90:55:d8:28:b0:cc:31:db:ab:2d:b4:48:f4:72:cd:
                    49:42:47:8d:12:56:b2:54:ac:bb:79:58:a3:1f:d5:
                    1b:a1:46:c1:a8:ac:20:14:03:1f:2c:60:33:e5:b0:
                    08:03:ec:79:c9:79:7a:7c:a6:af:e5:d6:61:6f:7b:
                    c4:b2:c8:bd:1f:d1:ed:b0:77:09:57:75:bf:30:f9:
                    2f:fd:4f:06:54:19:65:06:b5:1e:35:73:97:ca:42:
                    11:13:05:6f:ff:67:05:42:6c:bc:18:0d:29:b8:79:
                    13:eb:ef:0a:df:62:dc:46:9b:d1:58:16:b1:43:7b:
                    e2:ec:24:7e:2a:24:ec:3e:ba:9c:4a:e8:10:8e:66:
                    b6:c3:9f:29:d3:96:a0:ea:49:1a:95:5d:48:c7:de:
                    fb:f9:86:96:33:f2:3b:a6:78:40:c6:fa:08:83:c9:
                    43:5c:47:d8:94:b8:e3:5d:e9:62:5d:e6:3d:63:8b:
                    97:bf:4f:52:d1:5e:5f:ba:4e:ea:a3:28:c2:4a:9e:
                    68:39:79:52:ef:80:29:fa:0d:8e:f8:d3:d2:cf:41:
                    e6:1c:ac:ce:e1:ac:b5:aa:d7:b8:c0:b4:a5:cc:9c:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:63:79:6A:34:B9:59:48:C2:6C:75:AC:3D:AF:7D:DC:2E:68:4D
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ietjeWo0uVlIwmx1rD2vfdwuaE0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.106.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:8e:6f:12:51:6a:59:75:97:7c:1d:76:53:e4:87:dd:65:d1:
         2e:c2:58:37:79:3b:b0:96:b9:78:09:5d:5b:52:c1:ed:36:99:
         31:e2:c9:17:79:61:dd:e2:ae:d2:87:f8:fe:a1:46:d3:5b:d5:
         5b:bc:2f:5d:f7:3d:72:28:14:97:8c:3b:fb:b6:51:4b:75:1a:
         4d:b2:e3:71:49:f6:9a:0e:20:cf:dd:db:6e:71:6a:dc:87:88:
         fd:ec:8c:1b:52:4d:28:f6:0f:93:c5:2b:0e:d0:b0:59:ff:e3:
         ca:03:10:8d:83:3e:33:b9:a0:d4:09:ea:a9:50:b2:0f:18:68:
         8f:76:2c:c5:9f:79:b7:3a:71:e6:37:9c:fc:09:ba:c1:b9:ce:
         90:2f:78:78:0d:0f:a5:c9:d9:c9:23:18:58:6c:bf:8e:26:45:
         42:4d:63:67:2b:36:32:5d:78:ff:c6:fa:5a:bc:d2:96:5e:ef:
         89:92:5b:6e:5f:b9:77:60:aa:84:79:16:71:f5:26:3b:2d:82:
         c5:2f:cb:83:3e:80:0a:43:d7:19:aa:57:45:15:c1:7d:c3:a6:
         1f:5f:ee:b2:3d:ff:6c:f0:d1:4e:79:03:94:74:99:7f:76:e6:
         fc:59:c2:88:6e:c6:63:99:8e:75:d3:c5:a0:2a:d5:11:0c:d2:
         54:84:d8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:26 2026 by rpki-client