This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/oh-9GBAeXYtaV656uw-JYiropL4.roa
File:                     oh-9GBAeXYtaV656uw-JYiropL4.roa (raw, json)
Hash identifier:          8ojMK755TLGMXAEoCV20aMvrKQ5KSv4e1NuUQ71QwyY=
Subject key identifier:   A2:1F:BD:18:10:1E:5D:8B:5A:57:AE:7A:BB:0F:89:62:2A:E8:A4:BE
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       137E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oh-9GBAeXYtaV656uw-JYiropL4.roa
Signing time:             Fri 06 Feb 2026 01:10:07 +0000
ROA not before:           Fri 06 Feb 2026 01:10:07 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.60.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4990 (0x137e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:10:07 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A21FBD18101E5D8B5A57AE7ABB0F89622AE8A4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:f4:16:94:51:d1:31:89:dc:03:c8:b9:e5:
                    f5:b8:a6:92:39:7d:1c:20:a9:6e:ed:5b:18:8b:28:
                    e0:e7:10:3b:c9:18:29:01:b8:1e:01:a9:a9:fd:a0:
                    f8:fb:7b:76:da:40:6f:a5:0c:e7:45:97:b0:18:bb:
                    26:3c:11:f1:d3:7b:52:be:c6:fd:b8:67:91:f0:3c:
                    a7:40:5f:8b:0d:1c:1f:03:8c:a9:6f:4a:16:27:ef:
                    d1:73:f3:5b:f6:0e:6c:18:ef:6a:49:ed:4a:38:1b:
                    f5:69:1b:8d:7b:ab:c2:03:4d:fe:63:2b:5c:46:13:
                    ee:0a:31:65:42:1a:65:61:06:e5:e1:4e:88:2e:5e:
                    91:11:8b:ea:8b:a7:a4:e3:56:d2:62:d2:eb:ce:e2:
                    cb:c2:bf:4e:ec:d9:de:85:22:e4:36:68:cf:f5:cc:
                    fc:dc:b8:67:6d:82:53:a7:22:1e:81:89:4b:6b:2b:
                    33:14:d2:91:7e:02:fe:39:42:e1:d0:e6:aa:3c:6e:
                    c4:d5:3a:df:76:fe:87:f8:6c:2e:14:d8:9f:8c:6b:
                    ef:9b:8d:30:8a:5f:ab:1f:1f:d2:37:fc:f0:18:91:
                    8a:3b:bf:fb:7c:3f:de:0f:c4:b3:b6:cc:c5:c6:cb:
                    bd:9c:bf:39:de:44:88:d9:46:37:31:b3:80:9b:7f:
                    07:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1F:BD:18:10:1E:5D:8B:5A:57:AE:7A:BB:0F:89:62:2A:E8:A4:BE
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oh-9GBAeXYtaV656uw-JYiropL4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:5e:d6:22:cf:a0:1a:90:be:d6:e3:68:56:48:7e:e4:fe:28:
         cd:52:21:b7:d6:f2:31:2f:e4:d6:1e:18:8b:7a:7d:c6:3e:e3:
         57:63:8a:10:72:b5:41:95:45:2e:db:03:e5:52:d7:d4:60:be:
         59:62:8a:aa:1f:4b:7a:9b:46:9c:dc:6a:e7:4b:89:c1:ee:4a:
         86:49:6c:d3:14:2d:d4:72:28:d0:b0:f9:6f:5c:71:08:ae:09:
         d8:1c:ec:1b:17:c4:64:83:53:ae:a1:4d:65:e5:4e:d2:dd:9f:
         70:6c:5b:91:54:b5:f8:35:e5:ec:21:0d:cd:50:9f:7b:8b:8a:
         da:03:33:81:93:d9:9a:ba:af:e2:93:41:d9:61:a8:53:a5:6f:
         1b:2b:33:60:15:6b:5a:75:75:f3:fe:67:1e:b4:f4:13:14:02:
         0a:ad:2e:bd:fd:90:ea:39:07:b3:00:e6:51:e3:fb:c5:f0:3d:
         6c:6a:68:aa:37:eb:c7:2e:f4:59:0f:0c:94:dd:16:67:e4:34:
         8d:12:c8:69:f2:62:17:a4:9f:54:06:c8:4b:95:d2:39:44:ff:
         8e:40:a7:24:3b:39:f0:65:90:d9:e0:8c:fc:b0:54:3b:18:6f:
         b7:f6:f9:dc:39:e8:ec:3d:0e:29:75:72:d4:7f:4e:58:35:80:
         61:30:bd:48
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICE34wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDYw
MTEwMDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEyMUZCRDE4MTAxRTVE
OEI1QTU3QUU3QUJCMEY4OTYyMkFFOEE0QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDINvQWlFHRMYncA8i55fW4ppI5fRwgqW7tWxiLKODnEDvJGCkB
uB4Bqan9oPj7e3baQG+lDOdFl7AYuyY8EfHTe1K+xv24Z5HwPKdAX4sNHB8DjKlv
ShYn79Fz81v2DmwY72pJ7Uo4G/VpG417q8IDTf5jK1xGE+4KMWVCGmVhBuXhTogu
XpERi+qLp6TjVtJi0uvO4svCv07s2d6FIuQ2aM/1zPzcuGdtglOnIh6BiUtrKzMU
0pF+Av45QuHQ5qo8bsTVOt92/of4bC4U2J+Ma++bjTCKX6sfH9I3/PAYkYo7v/t8
P94PxLO2zMXGy72cvzneRIjZRjcxs4CbfwcVAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUoh+9GBAeXYtaV656uw+JYiropL4wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9vaC05R0JBZVhZdGFWNjU2dXct
Sllpcm9wTDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0jyO
MA0GCSqGSIb3DQEBCwUAA4IBAQAlXtYiz6AakL7W42hWSH7k/ijNUiG31vIxL+TW
HhiLen3GPuNXY4oQcrVBlUUu2wPlUtfUYL5ZYoqqH0t6m0ac3GrnS4nB7kqGSWzT
FC3UcijQsPlvXHEIrgnYHOwbF8Rkg1OuoU1l5U7S3Z9wbFuRVLX4NeXsIQ3NUJ97
i4raAzOBk9mauq/ik0HZYahTpW8bKzNgFWtadXXz/mcetPQTFAIKrS69/ZDqOQez
AOZR4/vF8D1samiqN+vHLvRZDwyU3RZn5DSNEshp8mIXpJ9UBshLldI5RP+OQKck
OznwZZDZ4Iz8sFQ7GG+39vncOejsPQ4pdXLUf05YNYBhML1I
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:28 2026 by rpki-client