This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/kF1Q-3STh10ZInNPzXf0-bidYwQ.roa
File:                     kF1Q-3STh10ZInNPzXf0-bidYwQ.roa (raw, json)
Hash identifier:          8CexwSO8cQX++KLjOE3hJNXo7AtOmFV59dCesHOMwYI=
Subject key identifier:   90:5D:50:FB:74:93:87:5D:19:22:73:4F:CD:77:F4:F9:B8:9D:63:04
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1170
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/kF1Q-3STh10ZInNPzXf0-bidYwQ.roa
Signing time:             Tue 03 Feb 2026 08:44:12 +0000
ROA not before:           Tue 03 Feb 2026 08:44:12 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        192.192.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4464 (0x1170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 08:44:12 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=905D50FB7493875D1922734FCD77F4F9B89D6304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:5c:5a:11:10:91:69:c6:b3:e4:3c:bd:77:
                    58:d2:4f:fa:bd:10:33:28:0d:9f:56:31:0a:23:90:
                    22:94:95:fd:20:60:cd:09:67:79:4d:5b:2b:e7:8a:
                    05:c4:ff:2e:7c:a5:9d:e2:28:83:d5:f9:ea:f7:e8:
                    76:37:05:af:39:11:23:51:12:f5:fe:69:36:c9:47:
                    68:35:16:18:3f:96:2b:24:b1:01:d8:65:54:b8:ad:
                    01:13:8b:24:21:75:34:e9:01:e6:6e:de:9b:ee:32:
                    43:0a:ab:b5:e7:fa:02:94:11:6d:11:0b:cd:15:31:
                    26:04:41:cb:db:24:72:71:82:6a:86:95:f3:6c:63:
                    6d:2a:e2:86:a7:d4:5c:1b:d4:51:f7:a6:ea:ac:08:
                    25:35:a5:8b:ee:43:78:71:1e:1c:60:29:58:82:96:
                    a8:90:fc:ce:1f:98:05:d2:85:79:cf:2b:f0:56:a0:
                    d8:f6:d0:af:b3:c0:88:75:65:54:f4:2e:99:04:99:
                    30:f4:fa:0f:4d:d2:6c:ae:af:3b:05:cc:a6:27:02:
                    bb:a7:5d:e8:ec:de:92:4b:a3:67:02:38:36:28:eb:
                    87:41:67:cb:a1:42:ca:f1:9e:d5:26:e4:54:fb:53:
                    ab:90:2b:a1:96:59:99:b0:4d:75:1f:0f:88:05:1f:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5D:50:FB:74:93:87:5D:19:22:73:4F:CD:77:F4:F9:B8:9D:63:04
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/kF1Q-3STh10ZInNPzXf0-bidYwQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:11:e0:02:bf:0d:8e:00:b3:d0:6c:d3:80:07:60:e8:e2:
         58:2f:d2:48:dc:02:ac:00:9e:4c:2a:77:a1:a3:8b:b0:15:d5:
         59:f4:75:38:76:bf:52:04:f7:3a:c4:ee:c4:35:79:2a:d4:3b:
         cd:53:bf:9c:d0:46:8c:70:d6:e8:57:03:9b:ef:b7:be:16:fb:
         60:4b:e6:7d:34:6a:79:3f:78:b2:a4:9f:d6:a1:3f:38:f3:74:
         c9:ef:2c:58:1c:33:2e:4b:22:91:67:1d:ce:40:de:31:1b:6e:
         cb:64:d0:53:12:ce:7b:80:b6:98:a5:4e:b2:f5:3f:ee:1e:d2:
         da:f4:c9:1f:d8:56:15:a6:f0:ed:e1:0e:5e:8b:10:35:c4:ef:
         86:f2:f5:82:13:b6:98:14:f4:b8:65:50:78:4f:85:6e:5a:f7:
         3f:44:79:94:ee:3a:0e:43:d8:f9:12:38:0f:1f:86:a4:7c:13:
         18:e2:09:e9:9d:ef:29:34:ee:a2:97:98:e6:86:f0:48:15:b5:
         24:78:09:ee:34:af:fb:a2:0a:d2:1c:e5:bd:4b:2b:6c:4e:0c:
         0e:3e:17:f3:84:b0:3e:c3:c5:57:00:11:cb:82:22:90:4e:19:
         50:7b:2d:70:4c:25:ec:7b:87:8a:81:62:50:cc:99:63:33:c8:
         b8:00:86:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:38:28 2026 by rpki-client