This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/qAyU-0nYG9wAgfoifto-4Zm3nK8.roa
File:                     qAyU-0nYG9wAgfoifto-4Zm3nK8.roa (raw, json)
Hash identifier:          3nS5J0eYG688f8sbGinOfwWsPQYDhvOZbvWyPjLCmcs=
Subject key identifier:   A8:0C:94:FB:49:D8:1B:DC:00:81:FA:22:7E:DA:3E:E1:99:B7:9C:AF
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1228
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qAyU-0nYG9wAgfoifto-4Zm3nK8.roa
Signing time:             Tue 03 Feb 2026 03:00:24 +0000
ROA not before:           Tue 03 Feb 2026 03:00:24 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17712
IP address blocks:        203.64.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4648 (0x1228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:00:24 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A80C94FB49D81BDC0081FA227EDA3EE199B79CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:ee:10:53:69:56:5f:cf:7b:48:27:22:35:
                    65:a0:c7:81:0a:f3:90:f2:f3:c3:83:08:95:a6:cb:
                    4c:b6:85:c2:9b:2a:ce:68:ef:30:af:59:39:be:0e:
                    2f:09:c6:a7:6b:b5:23:8f:8e:92:db:39:c1:41:f3:
                    49:7d:64:98:b7:39:d8:f2:7e:82:32:9a:59:e5:12:
                    e5:c6:83:7c:59:82:03:7d:07:b4:49:4b:f0:4a:85:
                    9b:8e:36:4b:6f:fa:87:7f:2c:31:19:15:e0:ff:d7:
                    b2:01:73:c7:d9:65:92:5c:5b:d1:05:8b:0a:b0:b4:
                    7d:90:43:c6:1e:5c:15:d8:7b:f3:54:3b:c5:85:4d:
                    f1:7f:33:90:a7:9a:1c:5e:7b:79:51:39:e1:e7:5c:
                    6d:f0:0b:1c:5f:34:22:a6:2b:64:c8:59:5d:d6:e7:
                    3a:f4:df:3b:53:d9:d3:5a:cf:a6:43:6e:b6:3e:f2:
                    82:e7:7b:fb:93:72:36:a5:05:1b:86:75:d7:99:3f:
                    98:32:fb:9c:11:de:e3:c6:20:3e:21:c2:b1:e3:06:
                    c7:4e:9b:f5:bf:7f:45:ed:1c:3f:a7:ad:49:b6:ff:
                    99:98:5e:91:fe:94:90:40:61:6d:39:2e:77:04:75:
                    a3:1d:e8:8d:5f:80:bd:94:6e:5b:fe:fd:58:1b:90:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0C:94:FB:49:D8:1B:DC:00:81:FA:22:7E:DA:3E:E1:99:B7:9C:AF
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qAyU-0nYG9wAgfoifto-4Zm3nK8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ef:56:e2:03:e8:89:1a:be:4d:10:a3:16:44:d9:dd:e9:ad:
         e4:78:6b:26:4e:5e:e9:46:73:9e:78:ad:ce:7d:41:3c:c1:bf:
         36:46:85:ae:a3:93:c1:70:c6:e8:e9:59:3c:50:84:17:ee:c9:
         3f:78:a9:4c:46:26:23:6b:60:b4:b6:d6:3f:5c:55:5a:03:67:
         4a:bf:b8:6c:0e:02:20:37:c3:3a:9d:d0:d7:e5:fa:e6:49:88:
         77:b2:09:a7:a8:03:6c:65:19:7e:1c:87:42:4c:7e:30:28:b5:
         f4:42:09:12:a1:ff:77:19:e2:65:56:b2:5f:3b:a7:08:26:a3:
         94:8b:d1:fe:a1:d5:b9:33:dc:b7:cb:4c:73:ad:85:73:2d:46:
         8a:43:d3:f5:ea:e0:40:80:ca:48:57:35:4e:c9:a3:88:3e:2d:
         f3:21:10:5d:ef:99:69:e3:64:d7:56:1e:23:8b:4e:8c:02:2a:
         f2:fe:59:a5:65:97:7f:db:ec:6f:be:38:aa:76:34:9b:a2:40:
         c0:5d:73:89:d4:4b:91:9a:50:20:d7:73:86:a4:23:2f:09:5d:
         ea:f5:55:e6:34:37:21:68:11:1d:44:aa:c7:73:2b:d9:14:0f:
         a5:28:92:27:0b:ae:88:7c:de:dd:45:83:53:60:b6:85:30:67:
         26:e5:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:27 2026 by rpki-client