This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/mXj24XnWeZWf-Jnls6qbpqcTNZ8.roa
File:                     mXj24XnWeZWf-Jnls6qbpqcTNZ8.roa (raw, json)
Hash identifier:          AGZoR24Zk3NUiZH6BkNvRyfEE0hb09QKAqbqAmZLpzU=
Subject key identifier:   99:78:F6:E1:79:D6:79:95:9F:F8:99:E5:B3:AA:9B:A6:A7:13:35:9F
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11CF
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mXj24XnWeZWf-Jnls6qbpqcTNZ8.roa
Signing time:             Tue 03 Feb 2026 02:35:52 +0000
ROA not before:           Tue 03 Feb 2026 02:35:52 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        163.25.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4559 (0x11cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:35:52 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9978F6E179D679959FF899E5B3AA9BA6A713359F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:97:d9:48:e8:12:66:b9:d0:70:ce:ab:fa:
                    0b:63:cc:53:1a:49:9d:d6:ab:75:fa:8f:6d:9a:ad:
                    f0:a0:64:b0:75:76:42:7a:04:b3:c2:d8:5b:e2:13:
                    e6:55:2c:3f:17:8f:d8:4f:23:76:85:60:55:19:e8:
                    69:e7:26:03:5a:09:71:8e:76:06:0a:a6:4e:a3:2f:
                    e3:42:ed:92:35:6e:15:be:b0:05:9d:8c:98:ff:00:
                    93:65:a8:59:2d:e5:59:22:f8:d2:7c:08:96:8d:ee:
                    f4:6a:12:82:66:82:d9:d7:d0:b8:bb:18:f7:af:3d:
                    fd:56:e0:29:b9:41:59:66:99:5f:e8:7e:37:9a:9f:
                    d2:94:32:24:12:d0:1c:20:70:28:d7:75:16:d7:bb:
                    69:d2:f1:ad:d4:17:16:c2:0d:79:5f:5e:f7:b5:0c:
                    63:2d:0f:b6:e2:ee:0e:df:33:bc:80:b5:b9:07:0b:
                    8d:5f:49:02:0d:8c:c6:02:67:48:0f:19:b8:fe:d5:
                    13:a2:f5:78:ed:4e:97:25:cd:9d:29:96:e9:6f:f2:
                    84:63:30:0e:89:dc:5c:28:1e:5a:50:c5:8f:21:d0:
                    c5:5a:b9:bc:e5:92:aa:31:bf:8c:b1:a6:ff:67:d7:
                    2b:64:db:04:2a:61:4b:55:11:e2:c0:7b:12:2d:dc:
                    6b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:78:F6:E1:79:D6:79:95:9F:F8:99:E5:B3:AA:9B:A6:A7:13:35:9F
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mXj24XnWeZWf-Jnls6qbpqcTNZ8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.25.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ad:96:6d:b9:bb:a4:79:79:08:cb:fe:81:c2:fd:b7:91:0d:ee:
         52:12:9d:8a:4c:65:70:63:6b:0f:67:fb:30:1c:77:51:cb:ec:
         72:c8:07:66:59:5a:e2:bb:b1:ec:d6:16:17:c5:e5:1f:19:cf:
         a7:ab:73:1c:b0:47:5a:1c:87:3e:82:62:fc:c3:fd:ca:6d:28:
         a8:8a:d4:25:0f:6d:e3:26:bb:8b:3e:fa:0e:00:32:7f:32:e2:
         e5:a0:75:dd:84:55:ab:57:7a:3d:b0:8b:7f:37:9c:e4:5b:03:
         3d:5b:b0:52:96:66:93:3a:3e:2a:ad:b1:70:95:63:0d:93:b7:
         51:70:27:87:c5:7a:d8:7a:32:7f:a2:94:97:31:e4:f4:6b:f6:
         ac:f2:24:3b:04:ce:6d:ae:59:66:d9:c6:89:cf:84:3f:fe:4c:
         81:c4:1e:3f:a3:0d:e7:85:72:9f:4a:4b:24:17:8b:26:56:46:
         bd:86:77:0c:fb:5e:48:ce:cf:27:7d:43:a4:1f:8b:be:bf:8c:
         b3:f0:8c:8c:50:0b:2e:23:6d:e8:ce:36:db:65:1d:8c:48:3a:
         39:a1:45:12:7f:f2:4d:01:1e:0f:52:8b:d4:d4:ba:4a:db:77:
         df:1a:f2:ec:a0:43:d9:46:7e:53:28:65:af:6e:8d:31:22:a5:
         3e:1b:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:29 2026 by rpki-client