This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/p651Csd31Vz90hDPNkIH8sTueAs.roa
File:                     p651Csd31Vz90hDPNkIH8sTueAs.roa (raw, json)
Hash identifier:          m6zXyi3qV6Vfkz8yEfgo6hgzmLbh0NvSjjPDsi1pMxc=
Subject key identifier:   A7:AE:75:0A:C7:77:D5:5C:FD:D2:10:CF:36:42:07:F2:C4:EE:78:0B
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       126B
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/p651Csd31Vz90hDPNkIH8sTueAs.roa
Signing time:             Tue 03 Feb 2026 03:38:49 +0000
ROA not before:           Tue 03 Feb 2026 03:38:49 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        203.68.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4715 (0x126b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:38:49 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A7AE750AC777D55CFDD210CF364207F2C4EE780B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:0f:29:fa:ab:69:9a:33:7b:e1:aa:a1:ad:
                    c0:f8:e9:f8:d5:86:2b:f4:f1:2e:6b:51:4d:b3:ac:
                    74:c3:91:4c:e6:d1:b7:78:76:40:0d:f9:ca:e8:5c:
                    d9:b0:23:af:61:ce:c7:66:49:c8:dc:55:7e:db:e6:
                    37:87:3b:f8:2e:4e:2a:5e:2e:45:89:3e:ef:db:77:
                    bf:aa:f1:1f:ef:22:20:09:22:20:0b:ac:87:4d:19:
                    d4:74:3b:2b:4e:59:34:d8:7e:b5:97:aa:7d:15:1f:
                    d4:23:9c:bf:6f:f0:41:13:aa:da:0b:cc:26:19:23:
                    50:ff:be:ce:7d:ba:72:a9:3e:fa:a2:f9:ae:6e:4c:
                    cb:2b:0e:4b:dd:5f:4f:38:97:bf:95:a0:df:ee:ee:
                    54:ec:83:3a:42:c6:52:f3:e3:a5:2a:a8:e0:50:fd:
                    89:4b:f2:d5:5e:52:72:c3:bc:32:98:5a:5e:8f:73:
                    ef:5e:52:37:a5:78:77:f3:67:bb:d3:69:c4:c4:8a:
                    d3:c6:c6:f1:3b:2b:79:86:d1:0a:91:3d:41:62:44:
                    1a:53:80:28:10:3a:9c:65:67:32:4f:d4:f9:19:e4:
                    fa:4f:12:d1:77:18:23:d0:81:44:0d:44:16:3a:3b:
                    97:b2:db:f3:09:1b:f9:f6:06:af:72:72:d1:6d:31:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AE:75:0A:C7:77:D5:5C:FD:D2:10:CF:36:42:07:F2:C4:EE:78:0B
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/p651Csd31Vz90hDPNkIH8sTueAs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:8c:c3:71:f5:2b:5d:0a:35:1c:38:1c:51:60:d4:1d:e0:b4:
         5c:70:f3:f5:5a:48:68:25:52:20:83:43:34:48:08:94:fe:05:
         3e:02:98:67:35:84:8a:10:82:a1:d3:b3:76:2a:75:8c:d3:cb:
         5b:a4:fb:01:d0:13:27:00:e0:b7:c3:a5:c2:05:7e:de:4a:1e:
         54:14:79:ee:e0:8d:b4:d9:06:d8:11:a1:c9:80:9a:f4:d7:f3:
         df:45:54:fe:ee:0d:5c:f4:b2:6c:54:9d:6e:c2:c7:35:3f:24:
         c8:ad:77:03:a7:96:52:60:84:a2:d7:01:58:1b:88:d5:e3:7d:
         b8:a3:16:0b:5f:6f:f7:59:17:c6:30:3f:6d:56:63:c1:31:ab:
         b9:70:21:1b:4d:66:a4:fd:89:c8:d1:ca:a4:bc:28:d8:d7:39:
         45:e2:9c:85:4a:ac:c8:7a:66:01:18:c5:b3:5a:d4:7c:02:8b:
         1b:b7:ee:de:46:f3:81:a7:a4:68:81:50:cb:1f:a6:19:de:cd:
         34:16:f3:c6:77:47:88:9a:ea:05:b3:f8:11:32:77:55:4f:f9:
         ab:62:fa:92:33:0b:0d:01:a8:4b:03:46:60:f5:ef:e1:cd:c5:
         25:bb:51:6c:6e:12:0a:f8:b0:f5:11:62:72:97:b5:d3:4d:c9:
         87:ef:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:30 2026 by rpki-client