This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/im2kFTVhW4UaFPBo1L-84dRdvHM.roa
File:                     im2kFTVhW4UaFPBo1L-84dRdvHM.roa (raw, json)
Hash identifier:          7sIA78GRzZGOwg7778gUCQJ8leXkjbKzWjRGODTBdJg=
Subject key identifier:   8A:6D:A4:15:35:61:5B:85:1A:14:F0:68:D4:BF:BC:E1:D4:5D:BC:73
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1191
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/im2kFTVhW4UaFPBo1L-84dRdvHM.roa
Signing time:             Tue 03 Feb 2026 02:28:14 +0000
ROA not before:           Tue 03 Feb 2026 02:28:14 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        120.106.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4497 (0x1191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:28:14 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8A6DA41535615B851A14F068D4BFBCE1D45DBC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:b0:4f:79:3a:81:74:2a:61:28:b0:8e:bf:
                    14:d4:e3:59:bd:81:85:7b:20:46:a2:18:ac:60:4f:
                    07:d7:92:7f:50:0d:38:8a:20:71:5e:c9:ff:90:f6:
                    f5:f7:2e:4f:f4:45:9f:af:dc:2e:94:be:d5:73:82:
                    4e:a9:92:23:f1:0c:8e:c0:ab:b1:b3:cf:79:82:9d:
                    07:6c:a1:28:15:2d:ed:c3:66:79:54:da:dc:5f:77:
                    41:9d:2d:ff:4c:53:b5:9c:35:1c:eb:f9:0f:68:e3:
                    32:cf:cf:f7:7d:8c:20:94:ba:77:92:45:d3:68:b4:
                    2a:50:e4:f4:78:b7:e9:af:92:95:50:7a:0e:1a:d6:
                    b9:cd:86:1b:54:fa:73:fc:da:e0:a6:61:d4:0e:79:
                    b4:c9:3a:23:a1:8a:3d:dc:dc:f7:c1:6f:ee:ac:20:
                    9c:06:8e:19:ec:65:c4:c5:06:09:cb:5c:03:1a:fa:
                    dc:04:bb:b2:e3:3a:52:e7:06:02:f1:b9:e2:f9:80:
                    a6:dd:f5:83:0c:c7:d0:1a:e7:d3:8c:46:2f:b8:e2:
                    fa:50:4b:32:29:4b:65:96:eb:f7:8b:64:38:ac:50:
                    52:f5:e7:e1:bc:01:80:a5:9c:ef:74:48:9e:9f:cb:
                    b2:e7:96:cb:df:69:43:14:ce:0f:e3:63:c7:ea:69:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6D:A4:15:35:61:5B:85:1A:14:F0:68:D4:BF:BC:E1:D4:5D:BC:73
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/im2kFTVhW4UaFPBo1L-84dRdvHM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.106.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:3b:0f:43:7b:eb:d2:7a:73:f0:cd:f7:c2:dd:1b:fb:36:06:
         f1:a4:70:46:27:da:ed:ad:e6:5a:7b:80:45:f5:e1:15:7b:97:
         42:1f:44:45:7e:ea:ef:cb:f2:0a:06:c5:16:04:4f:dd:a8:09:
         19:07:26:41:8d:d3:e5:49:17:2b:cb:7a:da:1a:4f:62:ab:27:
         cb:e6:fc:9f:45:c6:a5:67:f2:7c:35:f6:5d:d6:7b:b6:5a:b7:
         74:44:7f:aa:ae:49:0f:1f:6c:d7:14:e1:a7:db:2a:7e:99:04:
         f7:d9:8b:7c:a3:ad:f8:38:d5:97:5c:86:c3:b4:e0:a5:a4:20:
         41:ea:e6:2f:f7:7c:8c:e5:4d:96:05:0f:f2:cd:31:d1:8b:9a:
         76:fe:24:3f:9a:59:0d:cc:ab:36:78:1b:9f:44:e2:2e:f3:be:
         da:64:c2:63:4d:ff:39:03:f4:dd:ba:7b:e0:c6:4c:e9:73:68:
         eb:33:b7:fe:fe:85:9e:91:90:b9:42:90:23:3d:ec:61:28:e1:
         07:e7:57:0a:e8:b4:29:5f:bb:78:ff:72:1f:cc:c8:d9:5d:8b:
         c3:a3:a8:3a:a0:10:ab:61:ba:56:5a:bb:00:69:26:e4:c3:6e:
         11:d4:b2:40:b8:63:83:a7:bb:00:e6:a8:a8:a8:4a:83:23:1a:
         3d:02:9d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:56 2026 by rpki-client