This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/qbYnAxL0WykcDS9fgkZFlacy3KI.roa
File:                     qbYnAxL0WykcDS9fgkZFlacy3KI.roa (raw, json)
Hash identifier:          DB2SigI7uWloQtGIZP0fcCB5boU0IIy4bzoRj37nB/Q=
Subject key identifier:   A9:B6:27:03:12:F4:5B:29:1C:0D:2F:5F:82:46:45:95:A7:32:DC:A2
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1342
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qbYnAxL0WykcDS9fgkZFlacy3KI.roa
Signing time:             Fri 06 Feb 2026 01:04:51 +0000
ROA not before:           Fri 06 Feb 2026 01:04:51 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.68.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4930 (0x1342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:04:51 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A9B6270312F45B291C0D2F5F82464595A732DCA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:52:1b:ca:47:9a:55:bd:9d:30:cd:a8:94:
                    77:55:be:bf:36:44:23:3c:03:8d:b9:64:a2:3a:6a:
                    d0:ba:b0:2f:af:f7:81:4e:33:dc:e3:87:ab:6d:2b:
                    7d:60:bf:0a:8c:ec:f1:f8:e1:63:9a:1a:ee:7a:56:
                    f5:ad:15:f3:ef:94:e0:2a:56:27:d5:aa:51:d0:6b:
                    78:48:f9:5b:83:2d:d0:ac:95:dd:59:5d:cc:c1:3e:
                    45:5e:a0:17:68:ad:6e:9d:d9:7f:6f:0b:42:1b:7f:
                    ce:40:47:69:2d:76:a2:49:02:71:50:f3:52:f4:41:
                    91:d4:f8:89:b0:3c:ec:e4:da:f6:18:18:8c:d6:fd:
                    21:4d:b8:fc:cd:fa:c4:22:1c:8c:fd:21:69:7d:76:
                    26:a6:a0:27:20:b9:de:90:d3:4b:5f:77:57:22:36:
                    a4:54:92:36:88:9d:63:d2:30:20:8b:6f:4a:b1:ec:
                    88:c5:19:64:dd:31:d6:85:9c:73:49:e1:8f:e7:a3:
                    4f:ef:23:32:11:2f:22:e7:a3:32:8c:1d:b3:84:7d:
                    29:de:b7:64:65:36:30:0c:c6:9b:77:c2:dd:13:84:
                    45:f6:17:77:c5:89:55:20:a8:90:1b:63:ce:f2:d0:
                    74:09:97:a1:f2:64:57:8c:89:68:4f:cc:1d:18:fe:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:27:03:12:F4:5B:29:1C:0D:2F:5F:82:46:45:95:A7:32:DC:A2
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qbYnAxL0WykcDS9fgkZFlacy3KI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:01:f1:36:91:85:f5:b8:70:76:66:cf:1c:48:d8:bb:7e:8b:
         5d:b7:93:c8:0b:e0:77:33:b2:32:49:e3:bd:9b:53:ac:06:7d:
         fa:1a:66:2b:5e:54:9b:fd:45:a2:cd:5a:bb:82:f3:b6:99:d6:
         79:58:99:4a:4f:9f:fe:5e:61:e0:f2:48:ac:94:e4:be:8f:2a:
         5d:da:d0:42:99:12:a9:cd:6f:68:16:b5:84:82:66:0f:02:1f:
         78:82:ad:30:e2:a9:65:89:81:3a:26:99:96:f2:27:04:34:dd:
         48:5c:5f:a9:5b:f6:9b:fd:69:81:ee:f1:b6:bb:d1:06:2c:a1:
         bb:f7:56:5a:af:3f:b7:df:ed:b7:8f:b6:66:8b:c6:50:ea:5b:
         14:ac:05:2b:fb:f1:c9:b1:38:87:80:8c:e9:78:a2:f1:c7:7a:
         0f:53:4b:37:8b:1b:fc:36:54:1c:97:81:7d:e4:e0:e5:5e:07:
         2e:62:28:13:db:fc:c3:8c:cd:89:54:db:ed:8a:27:ff:d5:1b:
         6f:6b:b7:db:98:3b:f7:d3:4a:af:cc:10:b1:3c:63:8d:fa:76:
         1e:3a:59:75:b6:69:b1:9d:6b:16:22:85:47:fa:7a:0b:d4:a0:
         43:e8:e8:88:d2:9f:af:a7:5b:2f:9d:17:cf:92:41:20:9c:3b:
         e4:e3:16:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:49 2026 by rpki-client