This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/pLOrclr7utbIXdQB-oLlheEk6pA.roa
File:                     pLOrclr7utbIXdQB-oLlheEk6pA.roa (raw, json)
Hash identifier:          /fvLIHuL8C1HZBg4XrACulH2ULmz8z7fprCz5iA0Pr4=
Subject key identifier:   A4:B3:AB:72:5A:FB:BA:D6:C8:5D:D4:01:FA:82:E5:85:E1:24:EA:90
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12F8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/pLOrclr7utbIXdQB-oLlheEk6pA.roa
Signing time:             Tue 03 Feb 2026 09:00:03 +0000
ROA not before:           Tue 03 Feb 2026 09:00:03 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.70.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4856 (0x12f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 09:00:03 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A4B3AB725AFBBAD6C85DD401FA82E585E124EA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c1:69:c9:90:7d:ef:03:5a:9f:4e:f2:28:9a:
                    32:0e:e1:73:0d:fc:f9:81:49:74:c7:29:5b:63:1f:
                    12:78:d6:ec:60:c7:be:f7:73:ae:3a:3c:7a:42:df:
                    84:19:45:42:52:2a:b5:ed:7c:0e:15:41:0b:84:00:
                    a9:d6:d3:15:78:e6:46:0e:a1:1a:23:1d:12:06:30:
                    3c:d5:1a:0a:76:fa:7d:22:99:5f:14:a3:22:39:14:
                    9d:d4:5f:42:08:5f:dc:c0:10:32:2a:1e:9e:78:32:
                    4d:ca:81:f4:c7:58:8f:7e:16:d7:e7:42:d1:d8:46:
                    23:a0:76:7b:c0:0b:c3:a8:a9:5a:39:57:70:a8:81:
                    4f:6a:9f:c8:70:4b:51:f7:b5:b7:08:0f:77:23:e9:
                    99:d5:44:c0:ae:70:3e:5f:26:85:d4:d7:2e:53:dc:
                    cc:e4:e3:66:7d:23:0f:5b:f0:68:61:37:43:5a:79:
                    ed:e1:07:91:5b:14:ca:18:f5:9f:82:73:fc:d2:02:
                    da:b0:bc:c3:0a:2a:25:11:8b:a9:a3:4f:19:09:ca:
                    82:c5:87:f7:57:94:86:9d:13:ad:d1:6b:c2:d2:63:
                    0f:8e:dd:d9:0c:b8:74:d8:84:f1:34:d6:18:22:6b:
                    2a:1a:f2:68:9b:c6:ac:ec:a6:52:8c:50:34:ea:94:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B3:AB:72:5A:FB:BA:D6:C8:5D:D4:01:FA:82:E5:85:E1:24:EA:90
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/pLOrclr7utbIXdQB-oLlheEk6pA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:62:63:0c:ed:9c:89:2a:4e:11:d3:8a:2f:c1:53:09:3d:94:
         83:94:d5:4f:e4:95:27:e3:4e:cb:b4:fa:55:bf:92:04:7c:47:
         7e:ff:18:ff:c7:16:36:dc:5a:ad:b8:7c:16:06:95:b7:a8:d3:
         8c:eb:c4:63:c5:b2:3a:fb:c9:08:1e:6e:26:cb:27:48:c9:00:
         8d:ee:bf:4a:53:80:b2:b0:f4:41:cd:9f:b0:6a:28:75:ba:33:
         3d:d7:66:7c:a2:fd:2a:96:f9:0c:99:e0:cd:8b:de:71:90:40:
         f5:d2:b2:05:9e:1e:ba:79:73:57:56:06:29:6d:49:de:de:b4:
         f6:aa:de:6a:1f:9f:e2:b3:07:7e:2b:06:62:ba:fd:a0:e0:5c:
         74:20:ef:56:d1:04:f3:e3:b9:34:2e:3f:19:6a:fe:c5:86:4d:
         de:63:d7:57:0f:61:eb:65:78:ad:88:4e:08:e2:e0:93:57:99:
         14:78:74:06:28:2f:3f:c6:18:a3:a1:87:ba:cf:5f:ff:21:f7:
         e5:da:6a:0c:3c:a4:e9:91:3f:ff:2b:83:d7:91:f0:7a:2b:cb:
         d4:64:9d:6f:63:b5:77:05:11:74:e9:64:71:3d:30:51:9f:29:
         5b:ff:c9:66:f8:9b:21:35:c9:0b:57:f5:53:4e:99:3e:ea:19:
         ce:aa:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:45 2026 by rpki-client