This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/lPhlOQI5hRSAp5TZbjQwtlbluNs.roa
File:                     lPhlOQI5hRSAp5TZbjQwtlbluNs.roa (raw, json)
Hash identifier:          fOlwXoiJOdY1zw0HUJbLr6IWXH1arqopL8Gh0TmZaNE=
Subject key identifier:   94:F8:65:39:02:39:85:14:80:A7:94:D9:6E:34:30:B6:56:E5:B8:DB
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1091
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lPhlOQI5hRSAp5TZbjQwtlbluNs.roa
Signing time:             Tue 03 Feb 2026 01:54:03 +0000
ROA not before:           Tue 03 Feb 2026 01:54:03 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        192.192.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4241 (0x1091)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 01:54:03 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=94F865390239851480A794D96E3430B656E5B8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:af:30:db:57:9a:1c:1f:c4:41:97:43:8a:
                    91:e0:4b:a3:74:87:e0:e1:70:fb:5d:a8:b1:d7:7a:
                    22:6b:bd:cf:90:53:ca:b9:37:05:eb:6a:7c:24:08:
                    05:20:06:39:b9:4d:0d:22:8a:59:53:4b:9f:96:a9:
                    fe:93:96:96:77:37:47:92:95:01:08:fe:ed:cb:1f:
                    6f:47:7a:2c:dd:3e:63:40:21:5c:a6:70:b2:c8:0b:
                    e4:a1:ce:52:df:ab:6e:9d:8c:74:ff:8d:27:33:b5:
                    8b:74:a9:f0:72:4e:d8:4b:17:5e:de:cc:c0:78:b8:
                    3b:19:d5:29:00:ea:f3:fe:65:e6:32:84:60:36:69:
                    3f:c3:dc:8c:8c:2c:77:f9:17:4a:f4:c3:62:45:3d:
                    88:0c:92:56:d7:47:0b:a5:96:18:14:4a:43:09:3c:
                    7a:a6:d3:53:27:73:66:35:f0:d7:44:2f:e2:01:de:
                    80:55:07:84:46:2f:5c:5e:19:fe:36:65:f6:0d:db:
                    e7:ac:30:72:58:ed:12:a3:c5:5e:d9:64:ce:1a:19:
                    79:94:e6:9a:e0:ec:65:0a:5f:b2:b1:0c:12:f7:bd:
                    79:e5:46:b3:d2:d3:1f:3b:5c:e6:3b:70:43:14:fc:
                    c5:07:d7:8c:95:4e:f7:06:b0:83:ae:2f:8a:d8:31:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:65:39:02:39:85:14:80:A7:94:D9:6E:34:30:B6:56:E5:B8:DB
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lPhlOQI5hRSAp5TZbjQwtlbluNs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f8:63:bc:f3:d3:b9:c7:2a:17:d2:75:8b:d9:e3:c1:f3:b3:
         df:24:ee:35:79:6f:ed:a4:6d:69:e3:7f:99:7d:ba:c8:ee:7e:
         19:0e:0c:69:7a:f9:9c:ba:12:d0:32:c7:06:fe:c0:d9:a6:06:
         89:3b:bf:c7:2b:ca:d6:bc:52:e6:1e:bc:41:d6:10:00:91:c0:
         4b:57:e7:e2:eb:f6:9d:a5:4c:85:d1:96:f7:03:57:f4:8d:28:
         a5:da:21:2a:8b:7a:bd:02:cb:68:a8:c5:b1:bc:8a:c2:06:d8:
         a6:02:00:2b:ac:b6:47:60:68:58:02:f7:cc:1b:1b:06:ed:7d:
         21:43:79:03:3b:12:76:06:c9:01:35:ee:e0:2a:06:eb:35:53:
         10:06:0b:3c:93:0d:d9:e5:f1:ee:b1:3c:f2:85:78:c9:ab:cc:
         63:44:fc:ea:b8:bd:cd:10:37:20:6f:05:78:56:c0:b3:f6:99:
         d8:09:fd:27:c3:87:0e:dc:2f:04:dc:dc:ae:15:ef:1e:44:e7:
         c8:a1:ca:f1:e0:c6:c0:d1:14:03:6c:a9:db:ef:fa:50:ea:93:
         a4:5a:c4:27:44:70:dd:ed:f1:a8:a5:48:66:48:ea:cf:39:12:
         71:9a:0f:de:8b:91:4e:e9:02:40:5e:ef:58:81:cd:c1:92:52:
         5f:e3:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:38:27 2026 by rpki-client