This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/j40bKJ1xEzQen4NyvmqXWAoE2S8.roa
File:                     j40bKJ1xEzQen4NyvmqXWAoE2S8.roa (raw, json)
Hash identifier:          BttG9zdI9nPnduOpBpVE70UK85cv8UE5iCbY0YFa9TM=
Subject key identifier:   8F:8D:1B:28:9D:71:13:34:1E:9F:83:72:BE:6A:97:58:0A:04:D9:2F
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11A3
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/j40bKJ1xEzQen4NyvmqXWAoE2S8.roa
Signing time:             Tue 03 Feb 2026 02:29:46 +0000
ROA not before:           Tue 03 Feb 2026 02:29:46 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        120.106.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4515 (0x11a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:29:46 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8F8D1B289D7113341E9F8372BE6A97580A04D92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1e:f2:60:6e:95:00:14:fc:54:c5:cf:6d:f9:
                    c6:0c:b0:3b:7d:94:a6:3d:34:5c:98:17:e5:9b:f3:
                    22:60:12:8a:fd:45:63:f9:81:bf:f4:65:ed:07:f3:
                    4c:94:fd:58:d4:3b:11:e9:be:d5:f8:71:8c:f3:f0:
                    c7:3d:d3:dd:3a:05:48:a9:9c:5d:1e:2c:ec:5b:06:
                    84:f5:a2:d5:43:83:8e:25:d9:4c:cc:e5:58:c2:ae:
                    16:f6:45:3e:f4:a3:ed:e2:fe:cb:13:ad:31:7f:b7:
                    b6:27:cb:c3:44:ea:f1:33:1a:aa:9f:27:7b:8e:56:
                    41:a6:4c:5d:ce:a0:78:30:79:0e:ee:37:a0:73:69:
                    76:c8:35:54:47:e2:02:27:78:60:c4:24:39:8d:6a:
                    33:40:12:50:67:6c:5c:5f:f8:0d:fb:3c:74:7f:ff:
                    64:d9:4e:c0:7c:3f:83:88:f6:43:12:45:99:15:79:
                    a1:c5:3a:c0:3a:40:4a:3d:6b:ad:b2:7b:8b:2d:e5:
                    7c:bf:6c:a6:49:06:1b:0a:6b:d6:9d:3e:f2:46:29:
                    0e:dd:6b:98:10:f3:b9:61:1b:16:69:75:06:9a:f3:
                    95:e5:64:e9:40:20:9c:23:05:40:8c:a0:d5:d4:90:
                    b5:17:e2:77:f8:7b:c5:ba:64:a2:cf:dd:07:2f:fe:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8D:1B:28:9D:71:13:34:1E:9F:83:72:BE:6A:97:58:0A:04:D9:2F
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/j40bKJ1xEzQen4NyvmqXWAoE2S8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.106.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1b:ca:cd:b6:4b:2a:c5:e1:79:6e:db:bd:73:63:a3:60:8c:
         9a:c6:8e:0b:4b:07:31:fe:09:cf:d8:dc:b0:d5:32:35:c0:81:
         92:4d:df:a9:45:9f:40:0d:23:35:8f:8e:3c:52:39:67:09:a8:
         cf:30:21:5f:59:fa:42:14:03:31:fb:d0:81:99:d4:c4:99:a0:
         ea:ea:0c:06:10:1c:02:55:5f:0f:42:59:d1:92:95:3c:cf:18:
         34:f6:35:d0:de:46:7e:0f:6e:8f:d4:c3:0d:5f:05:04:11:9e:
         7e:0d:1e:2c:34:20:7d:81:ea:9d:99:93:98:91:d6:74:54:7b:
         c7:9f:05:46:80:1c:f0:3a:fb:bf:2a:16:63:bb:bb:a0:cb:ea:
         4c:84:62:bb:2b:f1:f7:3e:1e:4c:55:36:45:74:69:fd:50:3c:
         2e:66:2a:32:26:ae:5c:47:6d:e8:a6:2e:01:a4:40:19:50:e7:
         14:c9:bf:1b:c2:fd:56:96:d8:3b:a7:b1:b7:db:a2:2d:ed:ba:
         a4:0f:3c:9f:d2:04:84:40:a5:23:72:9b:84:93:81:ce:ee:e6:
         6f:70:70:5b:8f:85:0c:25:e0:1d:c7:8c:f5:68:65:bc:8d:9d:
         32:7f:6b:40:b7:9e:3c:8f:38:54:6e:19:db:17:79:45:b8:db:
         a9:c2:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:29 2026 by rpki-client