This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/jE_5O17veXW7N3_ODCfZlkMEldU.roa
File:                     jE_5O17veXW7N3_ODCfZlkMEldU.roa (raw, json)
Hash identifier:          CvBtYWW2ZJKQUUlqfYxL3FTADLpNQCh6HVHfTwfi/qU=
Subject key identifier:   8C:4F:F9:3B:5E:EF:79:75:BB:37:7F:CE:0C:27:D9:96:43:04:95:D5
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1390
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/jE_5O17veXW7N3_ODCfZlkMEldU.roa
Signing time:             Fri 06 Feb 2026 01:11:49 +0000
ROA not before:           Fri 06 Feb 2026 01:11:49 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.70.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5008 (0x1390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:11:49 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8C4FF93B5EEF7975BB377FCE0C27D996430495D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:9c:04:55:2e:29:2e:60:dc:69:2a:de:0e:
                    b7:fd:2b:f3:3e:54:d3:51:46:53:84:6f:d8:69:89:
                    84:42:7a:85:70:1a:91:87:13:23:ac:9f:06:a3:e4:
                    0c:6d:b4:0b:3d:bf:bf:06:3d:4d:67:be:35:4d:b1:
                    02:de:46:eb:35:b0:dd:8d:89:f1:de:93:6b:10:43:
                    7e:d4:60:fb:47:70:a2:72:91:b4:d2:f2:de:8c:30:
                    f5:b2:8a:0a:0e:a4:69:89:ca:a4:c9:eb:9d:10:f3:
                    08:7b:7a:5a:8c:3b:c4:26:e6:3e:de:84:b1:8a:94:
                    40:fe:8e:1b:c2:b2:f7:4d:39:9f:35:eb:2c:7e:2f:
                    ab:b0:35:78:ef:da:4b:00:dc:42:6f:6b:0a:77:cb:
                    8f:94:68:44:cc:ce:56:75:70:9a:4b:ba:9a:7a:21:
                    46:3d:5a:94:63:bc:84:f4:07:bd:5d:e1:a5:52:a3:
                    96:ab:0e:2c:c5:02:f0:ac:2a:31:4b:cb:ce:97:92:
                    41:a3:0e:d4:ca:5f:e9:32:67:3c:d0:27:8c:74:82:
                    4a:bc:d7:e5:92:e0:b3:71:c1:a1:e9:20:1b:1b:8c:
                    62:c4:c1:cd:49:21:87:08:eb:85:36:39:15:98:75:
                    b9:5a:76:fd:7b:f0:d4:60:3b:2f:53:fa:bb:31:c2:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4F:F9:3B:5E:EF:79:75:BB:37:7F:CE:0C:27:D9:96:43:04:95:D5
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/jE_5O17veXW7N3_ODCfZlkMEldU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:93:0f:c8:e7:74:4b:1e:66:7d:0d:38:eb:76:22:8d:e7:aa:
         e6:46:e7:93:a0:09:31:15:01:25:72:c1:a7:c4:24:ff:ac:cd:
         0d:d8:e0:5a:67:34:a6:83:e7:15:e7:02:fd:a5:0d:14:a3:45:
         89:7d:49:d8:d0:e5:09:9e:b2:a6:68:85:1d:26:74:20:7c:e3:
         3d:92:bc:07:03:56:97:86:b9:66:0a:1a:97:2f:3d:fe:cd:80:
         2b:35:84:2a:f5:a8:f0:60:21:d4:a8:a6:ff:a4:be:76:7b:6c:
         53:e0:42:79:e7:6a:20:02:1c:e2:3b:41:d9:3f:f1:db:52:23:
         b8:de:54:84:8d:40:70:56:03:b8:af:81:83:24:91:64:31:cb:
         cb:64:16:f3:21:ea:3f:b3:bd:d3:bf:80:2e:a7:71:05:1b:96:
         47:c2:ba:ed:37:17:60:87:44:80:ff:42:6e:d7:fa:bb:a7:5e:
         c3:92:bb:fd:c4:4f:ff:4d:ad:cd:ea:15:6c:da:ef:55:03:8b:
         24:db:64:91:21:da:0e:c7:73:ce:38:8e:bd:2a:b4:ee:c1:0b:
         9b:87:19:1e:e1:8e:4d:84:b2:3b:0a:6a:06:e1:1d:71:b8:a7:
         44:2e:a7:7a:60:6a:18:45:56:a7:c0:45:63:4b:58:d9:0b:1c:
         e2:da:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:00 2026 by rpki-client