This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/kcUuBRII_gqQujbvitWNuXAe_mk.roa
File:                     kcUuBRII_gqQujbvitWNuXAe_mk.roa (raw, json)
Hash identifier:          mtJBhHwQEnpWzgQieIHHVL//pr6wXz8izFkmvoSQeRc=
Subject key identifier:   91:C5:2E:05:12:08:FE:0A:90:BA:36:EF:8A:D5:8D:B9:70:1E:FE:69
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1312
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/kcUuBRII_gqQujbvitWNuXAe_mk.roa
Signing time:             Tue 03 Feb 2026 09:03:14 +0000
ROA not before:           Tue 03 Feb 2026 09:03:14 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.71.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4882 (0x1312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 09:03:14 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=91C52E051208FE0A90BA36EF8AD58DB9701EFE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:bd:f1:09:a0:60:ee:4f:1c:2a:b7:77:f3:
                    cd:d8:7e:65:ce:5e:f8:a7:39:6b:3e:35:3f:e7:93:
                    77:24:d7:67:52:a1:94:f0:91:06:c7:50:7b:85:fa:
                    e7:49:2c:11:2a:93:80:87:f5:c5:ef:05:c3:a5:09:
                    30:45:63:db:62:34:42:59:d8:44:04:d0:80:bb:bc:
                    68:0b:f7:29:d3:77:36:71:34:52:58:01:5c:52:27:
                    ba:1a:d8:b5:9f:03:fe:80:93:18:89:af:3b:08:d6:
                    75:1f:ea:52:bd:69:2b:b3:fb:dd:0d:4c:24:fd:73:
                    3b:7a:b1:9b:04:16:75:66:40:0f:35:c7:ef:50:bc:
                    af:35:a6:28:23:79:f9:87:fd:84:de:05:7b:bb:9a:
                    fe:39:90:cc:35:ff:f3:74:a2:03:ed:50:01:ee:d4:
                    3a:2c:52:3f:c8:31:83:d4:af:94:a3:00:24:ec:71:
                    e9:13:da:fb:5d:2e:99:87:a4:d1:0d:47:0c:fe:4c:
                    30:45:ce:b8:3f:a0:8b:22:c2:bb:3c:bd:4f:38:8b:
                    26:81:3f:35:30:3e:b8:18:01:29:cb:3f:eb:0d:14:
                    f0:16:7a:db:b3:41:4b:40:8f:f2:6c:c9:43:6d:67:
                    06:e9:03:32:dc:a8:35:4b:dc:5a:96:92:73:74:3d:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C5:2E:05:12:08:FE:0A:90:BA:36:EF:8A:D5:8D:B9:70:1E:FE:69
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/kcUuBRII_gqQujbvitWNuXAe_mk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.71.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:c7:dd:71:4c:e6:49:23:44:92:8d:0a:70:0d:b2:93:a2:fa:
         a9:1e:98:5d:b1:a5:6e:29:17:e8:fb:5a:3c:5d:87:a4:73:6c:
         98:b8:ab:d5:c3:ed:9f:6a:b7:f8:5b:78:06:95:40:55:29:d7:
         95:b9:2e:96:5d:4b:4e:4e:da:a9:5a:42:bc:24:c7:c4:ce:08:
         88:75:68:a4:18:5d:a6:2d:dd:4e:59:9d:bc:b9:93:eb:54:29:
         ab:b6:22:d6:90:8e:46:f9:b4:57:99:aa:a1:b0:c8:0b:71:6d:
         31:4e:ad:81:10:05:b0:a5:01:65:79:3f:68:74:d8:71:65:ea:
         06:ac:3a:23:af:1b:7d:0a:95:7e:63:6e:a3:89:98:d4:87:f8:
         26:cd:38:fb:26:73:65:a9:91:50:05:de:7c:8c:ec:50:c2:8a:
         4c:d7:72:26:08:d0:2f:bb:34:f8:c8:d4:60:a5:cf:66:71:bf:
         0c:e3:f9:2f:ac:62:93:83:58:02:90:71:97:51:fa:05:d5:0d:
         91:fa:6c:2e:06:15:24:56:ca:5c:75:a9:8b:70:af:8d:12:e8:
         bb:52:57:9a:a8:ce:19:3e:8f:f0:bc:7b:ec:26:7f:04:64:da:
         dc:16:2b:d3:70:c5:8d:49:e1:da:5b:18:29:6c:fa:0f:47:8c:
         d2:93:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:53 2026 by rpki-client