This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/pGa_03sf_Ce_7_TzsfA2T7wvZqo.roa
File:                     pGa_03sf_Ce_7_TzsfA2T7wvZqo.roa (raw, json)
Hash identifier:          Yq6HOlDLwkLRVlLTj9KzmD0mbVaKBOOSJV2A3zsua4I=
Subject key identifier:   A4:66:BF:D3:7B:1F:FC:27:BF:EF:F4:F3:B1:F0:36:4F:BC:2F:66:AA
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1384
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/pGa_03sf_Ce_7_TzsfA2T7wvZqo.roa
Signing time:             Fri 06 Feb 2026 01:10:35 +0000
ROA not before:           Fri 06 Feb 2026 01:10:35 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.60.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4996 (0x1384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:10:35 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A466BFD37B1FFC27BFEFF4F3B1F0364FBC2F66AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:45:e5:c7:0f:ca:68:a7:01:2f:51:f8:48:
                    54:07:d8:4a:a8:06:b2:c1:c3:25:45:2a:ed:94:e9:
                    b0:3e:f8:20:e7:14:0f:e6:07:13:58:1f:f8:8c:15:
                    55:f1:ba:20:4f:66:49:81:bb:05:58:81:42:14:a4:
                    70:91:bf:bc:ca:a2:2f:55:5f:dd:8e:a3:c1:c5:84:
                    45:23:88:77:5e:ea:6a:e3:ec:0e:fb:b6:de:a9:12:
                    25:5a:be:2b:05:1c:b9:88:67:0a:c3:6e:12:b8:98:
                    54:e4:0d:04:45:c4:03:b9:7b:cc:bc:c0:ab:83:23:
                    de:c4:5b:a9:aa:2f:d1:f6:d3:3c:43:51:33:e1:f2:
                    aa:7a:c0:e4:44:df:49:d4:d6:83:63:43:65:c4:fd:
                    b5:49:1a:79:0c:10:9f:6f:6b:a8:3d:41:9f:d1:87:
                    5e:4b:9c:15:3f:c1:53:42:92:22:82:7c:1d:a2:b2:
                    9c:40:df:9c:37:cb:77:aa:d3:6c:ac:6f:1f:04:2f:
                    c4:6b:a3:7e:01:bd:58:78:e9:5d:1a:d4:5d:4c:38:
                    33:4f:81:73:60:de:00:aa:64:fe:5d:f9:ef:94:63:
                    94:0f:f0:e7:32:21:22:77:3d:70:9c:39:cc:6f:b1:
                    ff:00:f5:e5:26:a5:f5:00:23:98:4f:2f:84:7f:cd:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:66:BF:D3:7B:1F:FC:27:BF:EF:F4:F3:B1:F0:36:4F:BC:2F:66:AA
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/pGa_03sf_Ce_7_TzsfA2T7wvZqo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:ec:e7:c9:c1:f9:19:0d:3d:15:d1:65:98:09:36:30:0b:0d:
         15:f7:a4:d6:11:6f:04:39:f1:e7:01:05:3a:86:c4:f1:d0:f2:
         a3:5a:26:c2:07:7f:94:2d:02:7d:d8:e6:fa:e4:32:22:64:7f:
         b0:9b:18:5c:34:cd:37:97:d9:a5:c9:25:18:37:e5:ac:32:97:
         2d:26:94:2f:a6:75:37:b1:d4:cd:a7:5c:09:d0:ce:a4:a9:00:
         14:30:34:43:5c:46:34:18:63:bf:c7:aa:f3:78:8a:7a:23:40:
         2a:66:53:f5:de:fa:ec:08:e9:0c:07:a3:7c:e3:57:5d:53:d4:
         d6:89:05:df:d7:72:58:74:c5:3a:f1:4e:8d:8c:a3:51:a6:aa:
         35:42:8f:0c:2a:26:c8:da:27:67:6e:df:98:9f:84:59:39:94:
         66:eb:ea:e6:6a:ce:f0:76:e0:fc:f4:b4:3d:27:51:be:c1:5f:
         38:8a:9b:e4:f6:5e:a4:4d:ef:0a:bb:c7:7f:7e:0c:da:2d:ad:
         4b:c7:32:b5:49:85:86:ad:dd:33:47:e4:a0:b5:49:cf:1f:38:
         ce:13:c7:7a:d5:50:df:87:31:62:92:5e:40:81:c7:06:38:c6:
         31:42:c2:f7:95:be:9b:46:0f:73:f0:b0:d5:32:bf:9c:ba:e3:
         1a:75:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:23 2026 by rpki-client