This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/lLPxF8fnQmTqo5WELzUqkn5lJw8.roa
File:                     lLPxF8fnQmTqo5WELzUqkn5lJw8.roa (raw, json)
Hash identifier:          K9zvQe2XSK2ufvs5Q1lkIZZfQwPT6jmQySFG4rjA6DA=
Subject key identifier:   94:B3:F1:17:C7:E7:42:64:EA:A3:95:84:2F:35:2A:92:7E:65:27:0F
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       114C
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lLPxF8fnQmTqo5WELzUqkn5lJw8.roa
Signing time:             Tue 03 Feb 2026 03:19:56 +0000
ROA not before:           Tue 03 Feb 2026 03:19:56 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        192.192.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4428 (0x114c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 03:19:56 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=94B3F117C7E74264EAA395842F352A927E65270F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fd:c8:8e:b0:2c:50:50:61:90:d9:d5:0d:90:
                    24:ac:df:e2:20:53:bb:d6:f6:09:1b:4a:b7:0b:3d:
                    22:46:0f:8b:22:c8:65:4c:f1:46:01:5e:b0:cb:dd:
                    78:40:b8:d7:75:a1:cb:3b:2d:77:16:45:e2:4c:f8:
                    42:5c:53:1f:5b:88:56:0b:3a:7d:46:1c:1d:7f:d3:
                    2c:b0:56:99:b3:3c:7c:97:92:f0:47:bf:98:de:3a:
                    6a:33:e4:f0:b5:48:0f:8c:b8:38:25:9a:4e:f4:85:
                    35:37:b6:4a:f4:61:17:8f:ba:28:c8:90:c8:3e:d7:
                    c8:58:9c:ba:74:3e:a4:c5:f3:d6:e3:7d:60:22:63:
                    68:da:92:ba:c0:ee:ab:d7:88:87:ff:9a:70:69:ce:
                    bd:44:ff:98:b7:d9:fe:f2:8b:db:2d:5c:4c:21:5c:
                    e4:91:17:2f:3a:02:c5:93:08:97:5a:a8:34:3f:38:
                    71:9a:4f:95:78:94:f2:ee:ac:52:68:4b:63:b1:e2:
                    db:62:85:8a:23:37:83:57:59:a2:7a:bb:9c:1d:f8:
                    63:99:18:93:e8:2c:47:ec:53:72:90:85:41:b0:cf:
                    b7:fe:ac:bd:f3:69:ee:f0:8c:b8:31:a8:79:46:75:
                    3d:db:54:30:6e:9f:a4:cd:c1:77:92:f6:e4:2b:8d:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B3:F1:17:C7:E7:42:64:EA:A3:95:84:2F:35:2A:92:7E:65:27:0F
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lLPxF8fnQmTqo5WELzUqkn5lJw8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:33:22:e8:d6:d0:c1:c2:97:0d:4b:e4:7f:57:4b:c0:cf:4d:
         01:e9:45:91:26:91:c5:90:73:5d:b0:28:2c:ae:98:4f:12:69:
         f4:b2:cc:ed:91:a2:12:4b:7a:d3:37:d3:9c:17:4f:a3:10:ae:
         d4:f2:ed:b1:6c:cb:22:1b:ce:31:3f:8f:6a:6e:f5:44:d3:fd:
         86:76:95:fe:a4:20:06:ed:18:1b:52:c9:2b:cd:02:c7:21:d1:
         d6:3b:9e:7b:f5:e5:69:45:4b:ae:9e:62:da:00:fa:82:f9:61:
         76:50:49:7f:46:60:54:7c:5e:f5:04:d3:78:93:b8:c2:a3:27:
         04:31:a0:c0:c7:12:1a:87:42:da:a1:5a:24:07:1c:95:b6:2e:
         e0:ef:95:f4:69:f7:26:e5:5d:17:54:35:0b:92:91:cf:fd:cc:
         cd:7c:4e:11:14:78:82:58:be:11:47:49:f2:68:62:83:37:3c:
         09:37:70:3b:a3:41:e0:0e:bc:be:8d:32:53:4b:be:c5:33:2b:
         36:f9:4a:04:db:3a:7a:a2:fb:9c:c0:38:59:8f:bd:05:4d:4a:
         22:6a:71:c7:b7:20:f1:b8:bb:c9:b8:c4:87:c2:b2:34:eb:98:
         92:6d:ef:22:30:e9:93:75:5a:66:6c:e7:fc:10:1b:13:98:85:
         ed:27:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:42:57 2026 by rpki-client