This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/rHwHm1YI6_C2EHTK08X-z7LbGLw.roa
File:                     rHwHm1YI6_C2EHTK08X-z7LbGLw.roa (raw, json)
Hash identifier:          ts5FBl1TPpXBTW8Fc5MpofxM1Yhx1t88N58rbD1e3Dk=
Subject key identifier:   AC:7C:07:9B:56:08:EB:F0:B6:10:74:CA:D3:C5:FE:CF:B2:DB:18:BC
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1184
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rHwHm1YI6_C2EHTK08X-z7LbGLw.roa
Signing time:             Tue 03 Feb 2026 02:26:26 +0000
ROA not before:           Tue 03 Feb 2026 02:26:26 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        210.240.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4484 (0x1184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:26:26 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AC7C079B5608EBF0B61074CAD3C5FECFB2DB18BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d6:86:7c:a6:b0:b6:95:28:19:af:13:01:39:
                    9a:27:a5:51:f9:6c:bb:af:a9:45:b0:09:9d:9d:69:
                    31:24:a1:65:b4:5e:5d:bf:68:73:ba:26:83:a2:6e:
                    b7:63:08:a7:ec:87:8a:76:40:8c:7a:e3:63:30:c8:
                    bc:3c:1f:02:07:6c:37:5a:77:de:58:21:a2:57:ab:
                    c4:9a:c2:ee:72:1b:65:d6:71:01:dc:81:1d:d7:f4:
                    ad:56:a2:c2:6b:6d:2e:93:a0:f1:7c:df:39:0a:5d:
                    74:53:f8:77:7c:3a:45:ce:9c:dc:47:95:6c:da:01:
                    b3:42:16:db:e0:1b:f1:4d:2a:71:43:f1:48:b0:95:
                    02:ef:e6:37:bd:3b:de:58:71:54:ba:a6:93:e7:62:
                    91:b0:20:89:4d:a1:ce:7c:21:a0:12:df:cc:5c:26:
                    26:fb:ef:89:c0:d3:d8:b1:18:06:e2:9c:b8:f5:66:
                    19:39:0b:ee:2c:d6:10:bf:64:ee:8f:be:b3:e2:ef:
                    cb:fb:c6:d2:e4:a8:5c:e8:a7:a6:7d:63:5a:0d:7c:
                    64:c0:0b:d3:05:a0:01:f9:0b:0e:f3:8c:b5:7b:d3:
                    ff:0c:6b:94:6d:18:db:bc:e5:7d:8c:65:d2:1c:5a:
                    79:8c:a9:03:64:04:50:dd:80:ab:07:ed:a5:4b:6d:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7C:07:9B:56:08:EB:F0:B6:10:74:CA:D3:C5:FE:CF:B2:DB:18:BC
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rHwHm1YI6_C2EHTK08X-z7LbGLw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.240.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:e6:2c:f1:4a:5a:58:dc:f8:45:0d:df:01:88:ab:68:25:40:
         cb:db:c3:03:39:a4:e7:0f:79:49:c1:19:79:2a:48:f2:b6:27:
         e6:5b:c7:cf:ed:e2:a4:cf:9f:39:5c:41:eb:73:ad:93:92:38:
         2a:df:2a:55:98:cc:3c:38:20:5e:32:70:41:01:ec:f0:06:32:
         15:85:b8:c9:55:3c:b4:04:6a:df:86:59:b7:86:58:62:3c:94:
         d9:4a:27:37:7d:89:40:ce:b7:0e:5d:0c:dd:14:9b:fa:2e:56:
         6a:2c:f6:b4:77:8e:44:d9:b4:2e:25:7f:56:e0:0f:8f:68:aa:
         19:9b:87:02:2f:74:3b:10:36:d4:6b:72:25:94:ce:59:db:65:
         45:52:85:34:db:69:ee:02:d4:c3:50:85:b9:28:d0:98:a2:62:
         b0:67:a8:0f:53:f8:62:aa:e7:e6:06:72:9c:d0:8a:95:e5:5b:
         8b:b4:62:07:1b:68:26:22:52:f4:85:25:2e:98:48:c2:a2:85:
         6b:26:e7:cb:06:3c:e5:98:aa:35:1a:63:e9:a7:39:cb:f0:92:
         6b:5f:92:b5:5a:c5:95:6c:37:d0:ea:05:16:46:02:41:41:1c:
         4b:8a:45:fb:0a:a9:33:0e:8c:e5:d2:86:cb:2a:07:4c:66:f9:
         c8:e4:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:31 2026 by rpki-client