This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/la73QuqpZ0c8hSPgLEyKJYGWvG4.roa
File:                     la73QuqpZ0c8hSPgLEyKJYGWvG4.roa (raw, json)
Hash identifier:          1uSffDQe3xa+Ih4eGrH7NMdgjqknaA58dsbuNuO7wCg=
Subject key identifier:   95:AE:F7:42:EA:A9:67:47:3C:85:23:E0:2C:4C:8A:25:81:96:BC:6E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1157
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/la73QuqpZ0c8hSPgLEyKJYGWvG4.roa
Signing time:             Tue 03 Feb 2026 02:20:10 +0000
ROA not before:           Tue 03 Feb 2026 02:20:10 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.71.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4439 (0x1157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:20:10 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=95AEF742EAA967473C8523E02C4C8A258196BC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:73:86:e2:70:c1:4f:23:54:71:26:f5:24:89:
                    77:bf:6c:f3:d9:ed:b9:eb:1b:4b:51:94:86:9d:91:
                    a6:e6:5c:33:18:63:b8:2a:29:40:bc:f0:d1:ac:34:
                    66:2d:fd:7a:39:9a:e8:93:0e:27:58:ce:f0:6c:ad:
                    09:4e:22:cc:96:aa:72:57:2d:12:b5:bb:2d:86:f4:
                    c1:5f:b5:ec:70:07:a7:0e:6b:41:64:7e:c0:c6:4c:
                    42:cc:51:cb:49:28:1f:68:b5:bc:20:89:da:2f:43:
                    1d:aa:7a:b3:f3:c4:98:6a:de:83:7c:b1:ac:27:59:
                    18:17:44:77:14:35:a1:cb:42:ab:c3:9c:39:87:1d:
                    5e:40:99:0e:1e:57:03:d1:d2:75:70:8c:19:3d:7a:
                    a3:0d:ac:fe:6d:98:8e:88:60:f7:32:fd:42:e1:87:
                    cc:a2:2d:a3:52:62:7f:9a:bc:32:f9:ab:3e:81:c9:
                    cb:5c:01:95:8d:91:34:20:10:3d:e9:7b:d5:37:2a:
                    f2:5b:e7:c9:b5:bc:9a:5c:6b:1f:b5:1f:38:53:af:
                    0e:1a:28:1d:d6:85:1a:ff:22:53:30:5c:8e:16:fb:
                    67:87:f2:44:6f:bc:2d:2c:61:75:d1:ce:89:af:5f:
                    c8:52:53:6d:03:c1:58:4d:12:03:15:2c:ba:4e:84:
                    f9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:F7:42:EA:A9:67:47:3C:85:23:E0:2C:4C:8A:25:81:96:BC:6E
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/la73QuqpZ0c8hSPgLEyKJYGWvG4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:ba:cf:29:bc:b8:58:4a:ef:a4:ca:aa:7b:28:23:03:2a:8f:
         d6:73:31:e0:6c:15:4d:f2:b7:32:b3:af:5d:dc:9b:d3:c9:60:
         ac:95:72:2e:20:01:cc:7a:55:06:59:81:f8:22:93:72:1e:df:
         af:8a:60:b5:e9:27:63:24:c8:e8:63:d8:c9:20:59:9f:d4:3f:
         e4:14:36:24:60:18:dd:94:a1:a4:ee:62:8e:cc:13:c8:07:6a:
         7b:d1:78:aa:ad:82:cd:7a:5d:c7:09:b5:38:77:5e:19:d5:33:
         72:a0:ac:91:75:2c:ad:13:3a:c7:67:0f:1c:97:55:19:e7:6e:
         45:3b:35:f6:b1:b1:5c:e2:98:9a:dc:36:22:48:2c:fb:1b:b1:
         97:f8:35:61:c5:31:66:18:d7:20:8c:21:f3:b4:51:d8:0a:2f:
         2e:e9:76:c8:fb:00:57:5e:ee:2a:35:f1:4b:dc:d2:a8:a5:27:
         d3:65:c4:4a:cd:13:52:5a:a2:61:de:a8:aa:95:a6:ec:e4:a8:
         d0:80:e8:b4:3c:3d:7f:56:b7:93:5c:d8:db:7c:e8:a4:8d:0c:
         67:02:39:42:04:dc:4b:71:75:48:04:af:29:47:61:85:68:9f:
         5d:51:66:72:d2:1e:5a:a2:e3:7e:1f:7d:62:95:d6:e4:5b:0d:
         42:c1:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:48 2026 by rpki-client