This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/klNo8QIEQZpNt6dhOEKHcgpuY7I.roa
File:                     klNo8QIEQZpNt6dhOEKHcgpuY7I.roa (raw, json)
Hash identifier:          UyrVYePGpEGzpobkgi4U6FjzRlBUooh7d1wPwzFt2FE=
Subject key identifier:   92:53:68:F1:02:04:41:9A:4D:B7:A7:61:38:42:87:72:0A:6E:63:B2
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1137
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/klNo8QIEQZpNt6dhOEKHcgpuY7I.roa
Signing time:             Tue 03 Feb 2026 01:59:54 +0000
ROA not before:           Tue 03 Feb 2026 01:59:54 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.68.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4407 (0x1137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 01:59:54 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=925368F10204419A4DB7A761384287720A6E63B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ce:6f:e7:a1:09:ab:2d:28:dd:d5:75:62:10:
                    25:fb:82:b5:54:d8:54:e0:72:64:66:ac:f0:c8:c8:
                    6e:1d:a3:40:0b:17:35:3a:09:df:b7:5b:7d:61:b2:
                    55:1e:bf:e0:e8:62:e6:b6:94:94:ce:b4:0b:e3:6b:
                    4b:ae:c2:a4:43:af:fe:ab:9b:3d:9e:1b:89:45:5d:
                    53:89:20:c9:f7:2e:8d:c7:e5:5f:54:df:32:99:6e:
                    12:fd:9f:d3:60:89:5c:90:bf:d3:91:b0:f7:19:d6:
                    a0:26:33:c6:97:da:eb:e5:30:a0:88:37:11:af:77:
                    c3:6e:47:75:a5:6b:0e:75:f8:fa:49:f5:84:02:8a:
                    1a:09:1e:75:05:65:56:65:19:1d:f0:d5:8e:fb:36:
                    96:62:72:82:27:eb:cd:ad:9a:a3:37:ef:24:41:12:
                    c6:c2:7c:1b:6d:66:dd:27:1c:6a:02:09:0a:6d:ee:
                    d6:44:81:c9:47:84:de:a8:05:be:76:48:f7:c2:05:
                    6c:82:4a:3a:1b:03:4d:db:4b:4c:e7:08:5c:c9:e0:
                    e4:97:7a:c4:e3:4e:ca:fc:d7:00:0f:46:88:42:7e:
                    2d:6f:3a:12:bd:08:d5:93:0b:31:0a:ee:70:61:ae:
                    13:56:3f:ec:13:92:21:c2:98:4e:c8:4e:e4:74:ad:
                    12:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:53:68:F1:02:04:41:9A:4D:B7:A7:61:38:42:87:72:0A:6E:63:B2
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/klNo8QIEQZpNt6dhOEKHcgpuY7I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:89:83:f2:78:3f:e6:21:d6:6f:5d:8c:80:61:29:a3:bb:b0:
         8b:17:6f:da:a4:be:75:11:0d:2b:b4:50:14:71:23:b1:e7:c1:
         70:68:fd:7c:54:a0:e7:4f:7c:52:d3:a5:37:07:7a:42:71:34:
         70:52:3e:f6:5e:a4:1d:70:d7:91:cc:33:6b:44:1e:37:6d:cd:
         2c:78:ac:20:d5:cf:ea:ff:2d:13:98:02:2b:ed:aa:63:5c:31:
         d6:a6:8b:2a:16:cb:51:c1:83:4c:e6:d8:88:06:49:92:b9:e2:
         15:d2:85:b7:a1:74:3a:65:be:b1:84:d5:67:ee:f6:7e:9e:b8:
         44:b6:d8:aa:bb:17:51:63:f3:9c:29:61:6e:08:d5:7f:49:b7:
         11:f8:93:5a:3e:f7:07:f9:c9:27:63:4a:1f:24:14:fa:88:94:
         22:da:1f:39:97:60:f1:e0:49:53:e3:df:47:10:32:7f:58:21:
         4f:aa:3a:36:24:bb:85:18:a9:7d:d8:4e:f9:ec:0a:10:ed:81:
         4d:d9:2e:89:fb:36:1b:0a:4b:24:26:b9:b0:b7:91:8e:a2:a3:
         1d:e4:da:31:4b:67:72:9d:d2:f9:c3:56:5b:ef:fe:ea:87:07:
         aa:dd:f9:f3:ca:fb:a3:a3:77:e3:ce:a6:2a:24:1f:50:dc:62:
         e1:11:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:00 2026 by rpki-client