This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/lQ_N5jB5gz-aDIKSlI-BEU3gQiY.roa
File:                     lQ_N5jB5gz-aDIKSlI-BEU3gQiY.roa (raw, json)
Hash identifier:          pfI7IwJjKQsYr+33kxk2spQSqueStDmCNFjYrGmrTAw=
Subject key identifier:   95:0F:CD:E6:30:79:83:3F:9A:0C:82:92:94:8F:81:11:4D:E0:42:26
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1334
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lQ_N5jB5gz-aDIKSlI-BEU3gQiY.roa
Signing time:             Fri 06 Feb 2026 01:03:31 +0000
ROA not before:           Fri 06 Feb 2026 01:03:31 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.64.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4916 (0x1334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:03:31 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=950FCDE63079833F9A0C8292948F81114DE04226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:05:f8:2c:9b:d5:92:60:99:20:c9:c2:c4:49:
                    4e:30:ff:03:03:8e:9e:85:bd:d8:94:00:36:28:f6:
                    74:b9:cf:f1:71:3d:27:6a:20:0f:aa:a4:cc:ad:88:
                    c2:11:16:70:52:1d:a5:1f:fe:f7:af:93:61:ed:5f:
                    02:ba:76:e7:6c:e7:73:05:4f:03:11:07:cc:df:90:
                    e6:cf:63:6e:83:46:d0:48:e3:18:da:66:0c:a9:28:
                    69:91:2f:da:d7:84:e8:c2:e1:f3:8c:26:5e:1a:a3:
                    3a:c4:06:ea:99:d9:d0:99:21:1b:04:f4:9f:b8:c9:
                    ee:bd:5c:56:f8:bc:6b:3b:00:87:8c:2c:68:ea:1a:
                    2a:46:4c:47:19:cf:32:24:d7:c4:4d:f7:94:f0:53:
                    41:71:c8:6a:ab:e9:61:cb:07:31:45:af:b7:e7:92:
                    d9:62:a6:52:dd:ef:ea:d7:ea:37:db:69:71:c1:34:
                    b8:5d:46:1c:99:67:f0:dd:dc:57:f7:85:99:f3:c7:
                    38:14:dc:39:c1:d9:ca:7e:de:22:73:2f:dc:27:f4:
                    1d:5e:59:1c:05:2d:48:6b:d1:26:1f:af:3b:df:02:
                    0d:2a:81:0b:c4:84:ce:06:32:1b:77:03:60:89:8b:
                    b3:ab:04:44:b5:f6:6d:db:09:eb:18:52:e8:be:dd:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0F:CD:E6:30:79:83:3F:9A:0C:82:92:94:8F:81:11:4D:E0:42:26
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lQ_N5jB5gz-aDIKSlI-BEU3gQiY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:23:48:b9:9e:da:7e:7d:76:7f:ab:68:42:ae:9e:f2:81:93:
         79:cb:46:21:a9:cd:5e:71:77:65:50:23:30:c4:78:2e:04:e8:
         81:c1:9b:80:b9:a6:3a:61:15:16:57:76:58:ad:8d:7d:f4:86:
         fe:d5:42:03:56:9d:93:20:ad:2c:12:1f:d0:6c:fb:85:d3:7e:
         6f:6b:27:e7:66:d3:d9:af:0d:0a:7c:9c:a4:8f:71:e2:35:c8:
         09:61:8e:4b:6c:51:44:d8:27:12:22:bb:c7:27:e4:b0:9d:13:
         15:00:6d:45:c3:1c:ad:52:92:ac:21:ed:bc:78:83:54:65:10:
         41:1e:0d:b3:52:4a:a4:51:43:61:8c:b7:d6:48:34:37:b5:f5:
         70:16:2a:2c:40:85:7c:74:b6:86:ac:d2:e6:4e:50:29:5e:58:
         a9:0f:40:1c:71:9c:f6:89:0a:ed:04:02:b1:2a:5f:5b:28:1c:
         c5:12:b6:4b:ce:f1:6c:4e:71:fb:02:a7:6b:28:c3:aa:37:57:
         0a:53:3d:4a:b2:7b:7a:70:70:24:57:fc:23:56:d0:27:61:b8:
         ea:67:11:19:8e:4d:be:fb:cb:d9:e1:a8:44:c3:2a:3d:df:f4:
         5a:eb:12:66:83:88:c5:9a:98:cb:fa:82:e2:48:91:d3:61:de:
         32:5e:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:55 2026 by rpki-client