This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/lh4zP6fIP8QtGuviGrzY6Mo5Lwo.roa
File:                     lh4zP6fIP8QtGuviGrzY6Mo5Lwo.roa (raw, json)
Hash identifier:          ia8S24c6f8rITuYd7la9U5NOvzTSmxsyclna8rzZBGI=
Subject key identifier:   96:1E:33:3F:A7:C8:3F:C4:2D:1A:EB:E2:1A:BC:D8:E8:CA:39:2F:0A
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12BA
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lh4zP6fIP8QtGuviGrzY6Mo5Lwo.roa
Signing time:             Tue 03 Feb 2026 08:53:05 +0000
ROA not before:           Tue 03 Feb 2026 08:53:05 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.71.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4794 (0x12ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:53:05 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=961E333FA7C83FC42D1AEBE21ABCD8E8CA392F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:99:5b:aa:b1:9c:9f:0e:c3:3c:d1:6c:fd:
                    96:ba:4c:7f:0a:68:c2:f7:c6:37:3e:2a:7e:5a:8e:
                    bb:bb:b5:34:9f:5c:d0:aa:ca:62:e3:d7:49:23:1c:
                    2d:bc:f1:b2:1b:a1:27:1d:15:2d:26:6c:59:07:cf:
                    34:a3:8e:b3:28:a4:09:9d:36:98:a0:d2:de:02:33:
                    ec:c5:f2:57:18:2f:92:7d:56:dd:85:fc:59:c0:4d:
                    32:df:7c:b2:f3:6d:1c:67:08:b4:d3:1e:4c:be:92:
                    1a:43:9d:1d:d8:98:0c:a6:05:6e:08:71:9c:70:fa:
                    cf:11:ab:f3:79:64:2c:e8:b4:4a:40:33:69:8e:16:
                    84:e6:ac:f1:ac:8c:dc:c0:6f:57:dc:09:24:bc:06:
                    d0:9d:01:31:79:4b:b8:d1:66:89:fb:d6:e7:c4:9c:
                    26:7d:3b:7d:6e:2c:85:94:a7:ed:7e:5e:9a:22:be:
                    d2:c4:2c:53:6d:64:d1:ac:39:ce:7c:20:d0:a9:48:
                    e3:3b:11:12:b9:7c:87:3a:92:60:41:8d:37:e3:47:
                    d8:f2:42:3f:62:43:c5:be:a8:52:d7:ce:11:f6:74:
                    4b:11:19:43:c9:2e:96:05:1e:8d:52:ed:0d:f0:10:
                    52:6b:7e:6f:ed:dc:82:0e:6a:9d:3b:84:21:22:6f:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1E:33:3F:A7:C8:3F:C4:2D:1A:EB:E2:1A:BC:D8:E8:CA:39:2F:0A
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lh4zP6fIP8QtGuviGrzY6Mo5Lwo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:7f:98:bd:b3:51:fa:44:69:e0:e7:fa:d5:9b:b1:98:06:
         e7:73:17:94:c4:9c:0c:ea:d5:c2:c2:0d:4b:0e:a8:38:c8:52:
         b6:ac:6a:74:8a:d2:d7:b6:40:5a:95:88:6c:95:d2:d5:6e:12:
         5b:50:47:33:bb:a2:a1:c5:5c:37:f1:24:6e:ab:8a:6e:36:c8:
         63:75:c3:ba:8b:8c:7c:06:a5:25:33:b8:20:19:fc:4c:ad:1d:
         46:88:16:f6:1f:9a:31:05:9d:44:81:7a:2f:03:1b:53:3b:a5:
         d3:c9:51:ea:62:66:7f:15:3c:63:e2:f7:bb:da:98:a3:91:7b:
         f8:74:2e:8a:7b:63:91:b2:24:86:4d:85:41:fb:ef:93:61:83:
         0c:97:08:90:ec:69:27:ea:73:43:8a:7e:ec:be:e5:9a:bc:48:
         6e:9d:6f:ee:a6:29:a4:6b:d8:99:76:e7:ea:2d:d1:0e:b3:75:
         29:99:a0:e6:11:4f:a0:68:c9:f5:e1:58:71:4b:9f:f6:59:cb:
         3f:87:90:18:d4:9d:09:42:cb:8b:bc:1f:22:42:b5:ab:68:f4:
         2e:f8:24:4a:9b:4b:17:96:d8:48:f3:21:44:a1:d2:17:ef:ed:
         fe:2f:ec:63:d2:de:58:51:6c:b2:3f:3c:91:36:5e:6b:ae:bc:
         5e:53:5f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:56 2026 by rpki-client