This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/lJTxc67rtKUAN83H6AgvoT40VRM.roa
File:                     lJTxc67rtKUAN83H6AgvoT40VRM.roa (raw, json)
Hash identifier:          o5OG4cONKSypBaVCxq799VD71WkGFZbCLQHz/BiVx5A=
Subject key identifier:   94:94:F1:73:AE:EB:B4:A5:00:37:CD:C7:E8:08:2F:A1:3E:34:55:13
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12D4
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lJTxc67rtKUAN83H6AgvoT40VRM.roa
Signing time:             Tue 03 Feb 2026 08:56:06 +0000
ROA not before:           Tue 03 Feb 2026 08:56:06 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.59.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4820 (0x12d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:56:06 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9494F173AEEBB4A50037CDC7E8082FA13E345513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:40:c9:a6:63:39:57:ec:99:04:fe:44:0a:
                    9a:20:7f:52:68:d7:b1:ec:d4:c1:18:ad:55:de:5c:
                    45:c2:ec:31:17:41:5d:5e:05:93:dc:2b:f4:28:ec:
                    a9:34:e5:a5:f1:f1:69:db:1d:2c:e7:6d:6e:7f:15:
                    a2:00:4c:25:0c:24:84:e6:4e:30:d0:93:ca:77:20:
                    bc:81:07:88:f3:12:a6:c4:81:4d:9c:f5:6c:df:70:
                    fd:a8:71:bf:94:da:b6:45:3b:76:5c:56:82:25:fe:
                    e4:cf:9f:27:5b:02:ee:f8:81:06:ec:61:4a:31:9b:
                    9e:8e:94:45:84:1e:cd:24:81:be:71:9f:11:73:a0:
                    be:fa:d1:e9:14:78:58:f9:56:6c:a6:4c:4b:d9:06:
                    0a:4b:ba:c8:7a:a3:ce:e2:5c:db:2b:b8:e3:34:a5:
                    65:e1:60:64:79:6c:d2:60:fa:1a:35:78:b4:62:69:
                    df:06:c6:44:e0:e3:e8:21:cc:3d:fb:e6:e8:11:f6:
                    39:fa:4c:d5:6d:c2:94:fe:71:29:d8:0d:8d:71:16:
                    dc:38:b9:bf:6d:e9:2c:a5:5f:b8:8d:91:8d:a8:0e:
                    2d:4a:ad:4b:ad:79:b9:42:7f:64:ff:f2:a4:2e:f9:
                    b7:49:8f:00:41:ce:e5:a8:86:e0:ec:f7:b7:ee:a3:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:94:F1:73:AE:EB:B4:A5:00:37:CD:C7:E8:08:2F:A1:3E:34:55:13
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lJTxc67rtKUAN83H6AgvoT40VRM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.59.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:89:0b:af:9e:57:04:4f:3d:74:30:89:1d:63:26:24:79:94:
         b7:8d:f9:e3:c9:a6:c3:fa:65:fe:30:61:63:54:48:8a:ec:03:
         77:93:87:6e:51:b3:d9:72:37:a6:46:b8:c3:40:19:46:a1:8a:
         d8:5c:9f:15:dc:0f:c9:ed:25:bd:81:1c:77:0a:38:e4:03:e3:
         c5:d9:bc:d1:44:74:99:5f:f9:6a:9c:01:17:38:49:c8:b9:80:
         d2:f4:61:4e:ff:cd:0c:4a:86:af:05:4b:bc:73:49:20:97:92:
         62:b2:eb:5a:f8:b9:18:d8:27:f7:30:29:ea:d1:90:9c:5d:c5:
         82:c9:3b:e8:20:ab:36:b4:34:23:0a:86:bd:ec:e9:83:6b:29:
         ff:0d:5d:9c:7e:88:89:3e:59:f5:31:46:d6:d1:76:d6:4d:8a:
         33:bd:69:69:4c:e9:46:19:60:79:81:01:77:09:a5:46:ee:7d:
         5f:d5:7e:a0:10:dc:85:2b:42:39:e7:cf:b8:fa:8f:21:54:ba:
         6a:fd:7b:90:81:42:e6:0e:13:5e:c6:c4:04:fe:48:b5:24:70:
         7d:4a:b0:8a:c2:94:35:f9:af:70:62:51:3d:b4:85:74:f5:d7:
         b3:ff:30:70:d5:10:92:18:59:67:e4:d9:15:2d:da:6f:a0:6f:
         2e:04:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:25 2026 by rpki-client