This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/rF0HrtBsizSlbXh4OiTulczeL4E.roa
File:                     rF0HrtBsizSlbXh4OiTulczeL4E.roa (raw, json)
Hash identifier:          zauwtOGePwgXMsggGUwhN+kGChtss94bfvS1XgR9bV0=
Subject key identifier:   AC:5D:07:AE:D0:6C:8B:34:A5:6D:78:78:3A:24:EE:95:CC:DE:2F:81
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1267
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rF0HrtBsizSlbXh4OiTulczeL4E.roa
Signing time:             Tue 03 Feb 2026 03:37:39 +0000
ROA not before:           Tue 03 Feb 2026 03:37:39 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        203.68.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4711 (0x1267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:37:39 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AC5D07AED06C8B34A56D78783A24EE95CCDE2F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:51:b0:23:3b:7a:91:51:6d:0c:59:4b:a3:
                    76:f7:e4:93:28:57:18:ab:77:ea:bb:1d:8c:2a:23:
                    79:b7:96:c9:20:96:7c:16:aa:a9:d6:08:08:75:8a:
                    f4:8b:5d:79:ec:cd:53:07:71:bd:f4:db:dd:97:ac:
                    f5:41:94:a0:a4:e8:a7:e9:9d:7e:3e:46:f1:14:2f:
                    44:33:63:63:b4:26:05:7d:3f:2c:33:38:05:27:29:
                    1a:bc:10:10:f0:82:cf:03:73:0c:3e:94:cf:54:6a:
                    43:4e:a6:64:ef:83:78:e7:22:4b:8f:44:a2:e0:bd:
                    9f:d5:f5:87:dd:60:60:8f:a9:4f:29:90:e2:c8:f4:
                    14:4c:30:31:58:2e:a8:ba:68:3e:76:88:c4:20:7d:
                    82:e9:44:56:78:97:62:ea:e6:21:82:75:fc:42:d5:
                    c1:08:ed:b3:bd:0b:11:1a:22:3d:e3:bc:a9:1b:87:
                    c4:64:a9:95:9a:39:ff:dd:1e:30:b8:e7:c8:81:12:
                    30:ce:af:2c:0f:37:fd:7a:38:39:bd:15:18:ed:35:
                    ab:aa:3a:69:47:23:d6:bb:2a:bb:af:64:4c:f4:0b:
                    42:d7:4e:79:98:40:3e:50:04:21:f2:8c:18:35:05:
                    e6:cf:27:b9:79:1f:e5:d8:79:27:59:05:a0:ad:48:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:07:AE:D0:6C:8B:34:A5:6D:78:78:3A:24:EE:95:CC:DE:2F:81
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rF0HrtBsizSlbXh4OiTulczeL4E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:27:ce:29:83:f8:2f:82:e4:57:c7:d7:a8:64:b7:37:19:4c:
         c8:00:7f:cd:cf:97:ca:83:e7:7d:50:2e:c5:29:4c:61:6f:35:
         11:e7:bf:3a:e7:7f:ba:b5:72:b0:13:b0:9f:05:8b:9e:d4:d1:
         7b:2f:96:98:fd:5d:07:ef:ed:a4:d6:71:89:b4:6c:72:bb:73:
         23:a4:20:a7:d2:58:9b:82:50:16:8b:7c:da:e9:1b:5d:cc:5a:
         f9:bb:7c:8d:d1:8a:d3:9e:d3:52:72:4e:ea:77:4a:7f:4f:6a:
         18:6d:ad:5e:c7:c2:a5:99:df:b3:07:42:95:33:5e:e3:8a:6a:
         3f:95:57:d0:e9:a8:41:59:ec:d2:a5:69:a1:1e:0c:ed:a9:39:
         c2:52:50:bb:9c:b3:4f:26:a0:16:50:76:a9:4d:e5:2c:a9:a2:
         8c:61:1c:63:0c:9b:54:cb:0f:73:40:fe:88:57:29:08:2a:33:
         30:0f:14:cc:20:5c:76:25:8c:be:11:a7:8b:17:d0:5a:96:00:
         a7:c5:98:fd:97:45:b5:1d:b1:6e:54:0e:ab:dc:f8:f1:50:d8:
         53:a5:b4:07:c1:65:de:d2:d7:08:2c:8e:e0:6d:69:23:30:db:
         82:67:a2:ac:8e:ff:69:55:8f:70:9b:b1:42:ee:31:1b:1b:57:
         71:70:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:30 2026 by rpki-client