This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/mGPJkfqexNq_fhlb_JwYamRPm6A.roa
File:                     mGPJkfqexNq_fhlb_JwYamRPm6A.roa (raw, json)
Hash identifier:          bT6Zh/1w1dNZcHwZmbJfqsM9uXZOt31etyFiHHeMXss=
Subject key identifier:   98:63:C9:91:FA:9E:C4:DA:BF:7E:19:5B:FC:9C:18:6A:64:4F:9B:A0
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       11C5
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mGPJkfqexNq_fhlb_JwYamRPm6A.roa
Signing time:             Fri 06 Feb 2026 01:00:44 +0000
ROA not before:           Fri 06 Feb 2026 01:00:44 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        192.192.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4549 (0x11c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  6 01:00:44 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9863C991FA9EC4DABF7E195BFC9C186A644F9BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:18:87:b3:70:91:0e:4a:a3:4f:d0:b2:78:
                    85:20:37:92:b5:52:49:b8:20:44:f3:0b:f5:22:6f:
                    82:d5:b7:c6:eb:4c:72:cc:1d:c1:16:37:f6:65:81:
                    d9:82:ff:d0:c4:53:99:00:c2:6b:d0:bf:d1:69:47:
                    a5:e7:41:d8:c3:e0:a6:4b:25:af:d5:b1:a8:e2:09:
                    da:c6:50:c4:30:00:ca:38:f7:ac:8c:b0:60:84:6c:
                    db:cf:2f:85:4e:30:49:8c:df:eb:96:54:ae:30:60:
                    7a:b0:39:26:fa:d0:6c:d1:9b:d2:57:eb:08:19:97:
                    3a:03:39:de:86:38:de:0d:ea:a8:4c:25:ee:b1:dc:
                    d5:c7:3d:ef:76:cc:f0:97:e9:04:21:ba:f1:f9:84:
                    49:28:c2:43:d7:07:76:e4:8e:d0:13:71:2a:b3:c6:
                    5e:99:35:44:d4:8e:ee:c0:5d:9b:93:77:0b:27:de:
                    2d:6e:48:79:6e:15:25:68:f9:1d:ec:12:56:8a:e5:
                    78:ab:24:26:c9:11:05:46:6e:14:c3:cb:11:5f:7f:
                    ef:55:31:0f:da:61:ef:14:c0:e6:2a:64:ac:31:9e:
                    8e:d3:10:c3:9f:cd:f3:00:80:08:6e:84:83:1d:c2:
                    6e:f6:fe:fc:01:89:bd:80:b2:20:71:25:be:1b:8e:
                    ef:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:63:C9:91:FA:9E:C4:DA:BF:7E:19:5B:FC:9C:18:6A:64:4F:9B:A0
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mGPJkfqexNq_fhlb_JwYamRPm6A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:48:e1:89:fe:4f:b8:e5:21:e7:e8:6e:d6:69:1a:70:08:0d:
         5c:36:dd:60:f7:0d:8b:93:85:e5:54:9c:12:83:61:2e:69:dc:
         26:85:9f:6b:37:3d:aa:16:c9:03:0c:88:3f:bb:d7:77:4a:47:
         f1:a4:37:12:32:7e:c6:07:1b:d5:54:3c:a0:fa:33:23:76:5d:
         ff:80:60:41:39:44:a2:a1:7c:5a:77:8e:e9:6a:1b:7f:1c:86:
         c3:fc:1f:25:30:55:33:b8:ef:b7:c5:f7:d7:4c:3b:09:e4:4d:
         b0:bc:1e:80:90:f0:99:61:20:95:e4:87:41:2d:41:f2:6a:07:
         7e:a8:d2:f5:16:50:46:c6:c4:f7:6a:e5:34:cf:1c:dc:41:f8:
         ba:56:92:c1:07:7a:4a:0a:f3:0d:ec:9a:10:f8:d7:b3:cc:56:
         99:ad:a7:2d:bc:cc:ab:63:54:ba:29:33:82:46:6b:96:d0:3a:
         43:4c:fe:00:69:2b:36:e0:f1:46:6f:92:41:9f:7d:08:72:1a:
         ee:1a:92:35:0c:df:e6:84:fc:d0:21:ed:a7:4d:22:de:44:22:
         40:e1:60:80:f5:fc:86:90:3a:6d:f0:e7:c2:e4:69:6c:5c:cb:
         8b:ae:94:c0:a8:5a:df:f1:7b:6b:5c:6b:2d:c5:b0:f8:48:a5:
         20:9b:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:38:28 2026 by rpki-client