This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/mcDteEVQSRVBo9oddca3HwGmpYU.roa
File:                     mcDteEVQSRVBo9oddca3HwGmpYU.roa (raw, json)
Hash identifier:          Wq2+MH4SJbclR0jHx6xF8xzKvjRaX/GRbxsClONxM2o=
Subject key identifier:   99:C0:ED:78:45:50:49:15:41:A3:DA:1D:75:C6:B7:1F:01:A6:A5:85
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12BC
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mcDteEVQSRVBo9oddca3HwGmpYU.roa
Signing time:             Tue 03 Feb 2026 08:53:23 +0000
ROA not before:           Tue 03 Feb 2026 08:53:23 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.71.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4796 (0x12bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:53:23 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=99C0ED784550491541A3DA1D75C6B71F01A6A585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:b0:0b:e9:47:51:7b:c7:6c:6e:16:9b:95:37:
                    8e:94:ae:f4:ef:fa:95:91:d1:f8:08:4a:ab:88:75:
                    28:77:36:8c:8e:c4:f8:fd:4b:e1:0f:b5:d2:38:41:
                    36:75:5e:8e:8f:68:53:a9:da:86:ed:f7:ce:6c:c1:
                    be:c5:53:e8:01:dd:66:06:d4:d2:22:33:d4:a6:10:
                    28:ce:92:32:d6:42:ad:17:eb:16:59:30:36:f7:6f:
                    5e:08:82:86:cb:87:51:66:bb:7e:c8:96:15:c1:b5:
                    09:42:49:dc:9c:a1:2f:73:ba:18:c8:dc:f0:37:f9:
                    4e:4a:ce:4b:d4:e6:ba:dc:81:98:12:b4:2b:b6:15:
                    b2:d9:3c:33:40:5c:f2:b5:db:e3:bc:0d:91:b8:db:
                    f8:f0:0e:f4:11:b4:6d:f7:6f:23:66:9d:94:18:bb:
                    ad:9e:3a:2d:c8:17:48:d8:66:1a:7d:38:8c:53:bc:
                    f0:a8:60:25:6e:ee:5e:99:36:c4:aa:66:a6:3e:5b:
                    4b:01:6e:29:6b:f7:fa:c2:e6:71:a7:c7:9b:60:b3:
                    f0:a7:39:79:6b:ca:82:a9:f7:4e:b1:12:34:e1:d9:
                    d5:5c:39:7f:7d:a5:a9:71:d0:5e:13:28:8e:f6:40:
                    e8:f9:f5:1d:f1:75:d8:1a:84:b1:d0:30:f0:fc:5c:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C0:ED:78:45:50:49:15:41:A3:DA:1D:75:C6:B7:1F:01:A6:A5:85
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mcDteEVQSRVBo9oddca3HwGmpYU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:cd:de:b3:ef:44:5f:17:cd:8f:36:a7:71:41:57:05:71:cb:
         38:0d:8c:50:f0:95:52:78:74:23:72:5b:33:15:b3:80:fc:88:
         4d:9b:d3:28:f7:f1:32:e4:02:6f:df:4f:09:5f:4a:f4:eb:d3:
         00:4a:cf:b0:1e:f9:27:e0:8d:a5:9c:67:00:94:93:99:e4:75:
         da:9c:67:68:4d:fc:f3:46:30:1e:78:8f:d2:99:79:d4:af:14:
         a5:47:1e:e9:4c:d8:1c:c2:c5:db:55:0e:f8:f7:d7:2f:35:38:
         c1:71:25:45:4f:fc:25:0a:11:98:f9:99:fa:04:4e:f6:dd:32:
         6f:a4:62:f8:1d:53:91:cd:43:3c:1b:6b:97:cc:f3:ac:89:87:
         42:f7:4e:01:03:c7:5d:72:f8:20:53:00:ba:3c:4a:59:11:d6:
         19:30:7f:23:f1:ca:c1:0b:93:5c:2d:84:15:66:56:0f:d3:79:
         5a:f2:09:18:c0:bd:c4:ea:d2:82:16:55:fe:03:26:dd:a0:8f:
         43:0b:b1:bf:24:68:fd:7b:a1:a1:08:92:1f:33:14:e1:42:36:
         f7:cd:15:6c:c2:50:67:7c:3a:ff:9a:69:46:5d:76:df:5f:d7:
         e4:1a:22:1c:6e:20:2b:48:57:d3:d6:d9:db:75:74:e4:87:94:
         f0:35:f0:b0
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICErwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
ODUzMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk5QzBFRDc4NDU1MDQ5
MTU0MUEzREExRDc1QzZCNzFGMDFBNkE1ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD+sAvpR1F7x2xuFpuVN46UrvTv+pWR0fgISquIdSh3NoyOxPj9
S+EPtdI4QTZ1Xo6PaFOp2obt985swb7FU+gB3WYG1NIiM9SmECjOkjLWQq0X6xZZ
MDb3b14IgobLh1Fmu37IlhXBtQlCSdycoS9zuhjI3PA3+U5KzkvU5rrcgZgStCu2
FbLZPDNAXPK12+O8DZG42/jwDvQRtG33byNmnZQYu62eOi3IF0jYZhp9OIxTvPCo
YCVu7l6ZNsSqZqY+W0sBbilr9/rC5nGnx5tgs/CnOXlryoKp906xEjTh2dVcOX99
palx0F4TKI72QOj59R3xddgahLHQMPD8XFWXAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUmcDteEVQSRVBo9oddca3HwGmpYUwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9tY0R0ZUVWUVNSVkJvOW9kZGNh
M0h3R21wWVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCy0dw
MA0GCSqGSIb3DQEBCwUAA4IBAQBRzd6z70RfF82PNqdxQVcFccs4DYxQ8JVSeHQj
clszFbOA/IhNm9Mo9/Ey5AJv308JX0r069MASs+wHvkn4I2lnGcAlJOZ5HXanGdo
TfzzRjAeeI/SmXnUrxSlRx7pTNgcwsXbVQ7499cvNTjBcSVFT/wlChGY+Zn6BE72
3TJvpGL4HVORzUM8G2uXzPOsiYdC904BA8ddcvggUwC6PEpZEdYZMH8j8crBC5Nc
LYQVZlYP03la8gkYwL3E6tKCFlX+AybdoI9DC7G/JGj9e6GhCJIfMxThQjb3zRVs
wlBnfDr/mmlGXXbfX9fkGiIcbiArSFfT1tnbdXTkh5TwNfCw
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:55 2026 by rpki-client