This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/qo5YUxNFOMVrOsJgI7yXBj3XnWo.roa
File:                     qo5YUxNFOMVrOsJgI7yXBj3XnWo.roa (raw, json)
Hash identifier:          dqYhaF04vMvYny6/9/UAkcQGQF0U5H8gIOFFzqL7cZk=
Subject key identifier:   AA:8E:58:53:13:45:38:C5:6B:3A:C2:60:23:BC:97:06:3D:D7:9D:6A
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1246
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qo5YUxNFOMVrOsJgI7yXBj3XnWo.roa
Signing time:             Tue 03 Feb 2026 03:03:13 +0000
ROA not before:           Tue 03 Feb 2026 03:03:13 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17712
IP address blocks:        210.70.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4678 (0x1246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:03:13 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AA8E5853134538C56B3AC26023BC97063DD79D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:00:78:4d:2f:e1:c0:15:1a:9b:ed:49:47:fd:
                    dd:00:12:b8:6e:ce:a2:17:24:e1:c6:a1:71:24:27:
                    fc:78:9d:29:a4:06:db:bd:d0:66:b3:1b:40:ae:29:
                    6a:d3:d1:5d:f6:be:25:a9:92:09:f5:a9:32:2e:cc:
                    bb:48:4e:01:42:af:e6:36:1d:e0:5c:be:4a:e4:46:
                    1c:4a:fb:45:76:b7:08:3f:63:a9:35:a7:1c:04:bd:
                    55:4b:a9:12:2f:1e:4f:80:b0:33:66:cb:63:e9:23:
                    78:15:f6:c4:3c:21:00:ec:79:5a:95:d8:5e:70:38:
                    44:f0:f5:2c:ff:8e:af:a8:22:60:f0:b6:52:87:ca:
                    05:7e:4e:a7:be:be:b5:b8:c2:da:e0:2b:c7:2f:ec:
                    09:dd:d1:65:55:45:4b:7b:4e:be:8b:96:e7:c8:3b:
                    a7:bb:3f:19:c4:1d:6d:3c:83:25:14:02:91:ca:f1:
                    71:7e:56:d6:d1:e6:72:b7:15:d0:35:2b:b0:71:21:
                    c6:13:7b:32:b6:59:14:d7:75:51:ac:21:b4:c4:07:
                    f4:ed:f6:22:38:5d:72:4b:a1:01:04:f1:19:9c:f6:
                    a0:1b:4a:d0:74:81:c0:02:36:38:a9:94:9d:89:3c:
                    16:88:5a:69:93:0d:63:44:9f:a2:db:52:20:15:78:
                    a8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8E:58:53:13:45:38:C5:6B:3A:C2:60:23:BC:97:06:3D:D7:9D:6A
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qo5YUxNFOMVrOsJgI7yXBj3XnWo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:bf:64:e6:80:85:bb:6d:6a:66:89:22:ff:02:2f:3d:65:cb:
         59:4e:9d:b1:d6:ad:5d:4a:41:a7:67:6d:c3:60:e9:a1:1c:72:
         3d:f9:dc:a4:93:8b:4f:8b:5e:c3:2a:6c:fa:ab:22:e9:d3:74:
         dc:24:6b:01:e9:26:68:da:26:e4:24:4d:c8:35:ed:6a:1b:bd:
         17:28:75:33:54:e3:6e:d9:d0:e0:d4:9d:f1:5f:e8:0c:ea:48:
         b8:dd:08:31:27:b2:e1:ad:e7:99:aa:2c:32:8d:9e:1c:4f:7e:
         b2:50:c1:04:c2:61:d3:3a:5c:0c:4e:39:6a:04:70:fc:44:5c:
         c2:fb:12:7d:11:10:d4:ac:4a:60:b8:e7:79:6c:b6:ea:a2:d7:
         58:47:8e:8c:73:ae:89:3a:d0:26:81:17:ed:ab:b8:f3:3a:87:
         e8:b4:a7:0f:c2:5f:c4:a1:c1:21:7e:60:40:85:90:b5:2b:93:
         58:78:5a:d4:b2:9e:55:4c:e3:22:62:c2:2c:d9:bd:0b:7d:b1:
         08:65:af:ac:c8:ee:bf:0c:24:60:f2:be:12:5d:08:af:16:68:
         ce:14:0b:69:86:79:a2:fb:93:ef:ae:e7:2d:41:e8:95:cc:a5:
         04:e9:f2:e0:44:73:a8:cc:f7:70:e6:a6:93:0d:3e:ee:c8:59:
         f7:db:82:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:26 2026 by rpki-client