This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/l7Nyrq3KSxYwTTX82svrI6dfWbw.roa
File:                     l7Nyrq3KSxYwTTX82svrI6dfWbw.roa (raw, json)
Hash identifier:          LOjh/PvxHuW+q1smSjRo8CWLla7W52HAXH9THk5YnFI=
Subject key identifier:   97:B3:72:AE:AD:CA:4B:16:30:4D:35:FC:DA:CB:EB:23:A7:5F:59:BC
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       13AC
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/l7Nyrq3KSxYwTTX82svrI6dfWbw.roa
Signing time:             Fri 06 Feb 2026 01:13:49 +0000
ROA not before:           Fri 06 Feb 2026 01:13:49 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.71.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5036 (0x13ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:13:49 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=97B372AEADCA4B16304D35FCDACBEB23A75F59BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:38:64:98:7f:7b:cf:24:ad:31:14:3e:c2:
                    7d:69:1e:db:ab:d1:93:0e:a8:24:f0:7a:9b:d0:28:
                    a0:a4:79:3f:9c:3b:63:e8:f7:0c:3a:5b:da:a6:65:
                    ab:7d:f1:ed:a1:b6:a4:1c:4e:2b:99:d4:7f:31:55:
                    1d:1b:a5:d1:6c:d4:eb:d6:12:92:2b:8e:25:b0:0c:
                    41:3d:75:72:76:0d:0c:ca:2e:00:49:f3:92:7c:b7:
                    e1:8a:e5:dc:f3:4b:96:bd:68:c7:91:48:63:70:59:
                    2e:27:b8:f1:29:39:17:44:93:dd:27:89:ee:e2:70:
                    83:b9:a4:69:a2:5e:c2:be:11:1a:e8:08:d9:07:9e:
                    47:32:27:be:c8:a8:fe:8b:51:6d:f6:7d:2f:b5:c5:
                    08:d8:0d:dc:81:24:f5:6e:de:86:ba:cd:b8:d7:5c:
                    0d:99:5d:36:cf:20:8a:1f:d8:46:66:4e:6f:7f:62:
                    86:af:fe:3d:96:07:a1:fc:be:7f:6e:1f:9b:37:13:
                    30:5a:af:55:2d:b2:8d:20:ea:b4:a7:7e:10:97:0c:
                    c4:ca:02:5c:5c:ec:05:d6:d2:f0:0c:f6:43:3e:22:
                    22:b7:60:73:57:ce:df:a5:f3:71:b1:f2:36:48:ed:
                    d9:2d:15:f0:f6:52:92:2f:3a:bc:71:fb:24:13:e0:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B3:72:AE:AD:CA:4B:16:30:4D:35:FC:DA:CB:EB:23:A7:5F:59:BC
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/l7Nyrq3KSxYwTTX82svrI6dfWbw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.71.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:99:93:b1:42:3e:e2:6c:98:01:ea:a9:1e:e9:af:3b:4e:
         ee:14:a7:81:29:1f:b3:c5:0a:e0:3e:ad:71:d6:6d:8e:c4:e5:
         42:31:3b:06:de:5c:72:3d:4a:36:cc:bb:6f:2e:bc:4f:25:d2:
         21:5c:a7:ec:ee:1d:2e:73:7b:c5:fe:c6:38:1f:62:db:b9:a8:
         bb:90:f3:cc:a4:45:e3:ec:0a:1e:69:c0:52:a7:84:d9:4a:4c:
         7e:f3:94:7e:22:d9:9e:97:40:be:ed:b9:03:1e:91:7e:b1:ff:
         d2:7c:82:9f:8e:e6:cc:4b:7a:39:5e:5d:a4:e7:d6:67:cf:ce:
         b8:a3:cf:5f:8b:a3:5a:17:1e:b7:48:1c:3e:07:9b:27:04:13:
         05:9e:09:18:9d:0e:f9:a2:3c:f1:e5:3c:ef:03:80:6c:2d:e5:
         34:0e:7f:c5:32:a5:a4:97:86:b3:71:98:2e:71:78:5b:d3:8f:
         33:6e:da:0a:3e:55:db:7c:7e:23:9e:59:96:03:04:97:e6:fc:
         dd:55:52:9f:0f:81:7e:0d:77:af:35:41:ac:25:ba:02:2f:10:
         b4:ca:e2:83:10:4f:8a:ba:c1:44:89:96:66:56:ac:45:64:6f:
         09:b4:a4:30:c1:6f:22:07:7f:a8:24:2d:f9:27:f5:33:9d:1b:
         ba:ec:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:28 2026 by rpki-client