This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/rJigqbJauTB5Sna0m1hI44jtpmY.roa
File:                     rJigqbJauTB5Sna0m1hI44jtpmY.roa (raw, json)
Hash identifier:          GIjE3Spa4Taw+Z7CsC5upo7FhSVgKivg4b8PXCiIwOQ=
Subject key identifier:   AC:98:A0:A9:B2:5A:B9:30:79:4A:76:B4:9B:58:48:E3:88:ED:A6:66
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       129A
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rJigqbJauTB5Sna0m1hI44jtpmY.roa
Signing time:             Tue 03 Feb 2026 08:47:55 +0000
ROA not before:           Tue 03 Feb 2026 08:47:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        203.64.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4762 (0x129a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:47:55 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AC98A0A9B25AB930794A76B49B5848E388EDA666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:09:3e:84:69:dc:29:d2:c2:75:8c:0f:c8:
                    c4:a1:9b:c0:90:22:5f:cc:94:1a:06:3b:98:54:1c:
                    39:b9:77:da:c6:a0:94:c3:fa:39:38:34:e1:e0:f6:
                    5b:a2:9c:d3:50:25:ec:5c:a5:8e:b4:09:1d:23:07:
                    7f:a8:03:28:ca:48:89:11:cc:ae:b2:9f:e6:0e:a2:
                    09:ad:ed:15:a3:3f:cd:c0:20:70:d2:7e:2e:77:31:
                    17:e1:a6:2d:43:59:ce:91:7e:fa:36:92:9d:76:9c:
                    12:ca:2b:1d:96:b7:95:06:da:10:c1:f9:d7:5a:aa:
                    3a:43:44:e2:e1:c4:59:15:69:33:84:c6:8d:13:91:
                    3a:f1:7f:fe:11:08:c6:35:ae:13:8e:ce:06:fd:34:
                    74:2f:5d:d7:13:a5:b7:7a:47:cd:59:a4:10:d0:1a:
                    bf:9f:d8:57:4d:2a:15:59:dd:da:75:5b:b1:75:a9:
                    28:76:62:77:cd:d6:34:70:f5:bd:f8:b7:1e:e4:d0:
                    93:6d:cc:80:98:59:a8:67:df:b7:1c:35:49:bb:72:
                    87:bb:41:e8:39:21:d2:db:74:e6:c5:e1:d9:41:26:
                    b0:96:e1:c9:21:89:4a:15:6a:e9:45:98:6d:84:60:
                    ba:c2:38:54:6d:e5:15:d6:92:27:10:68:25:2b:b2:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:98:A0:A9:B2:5A:B9:30:79:4A:76:B4:9B:58:48:E3:88:ED:A6:66
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rJigqbJauTB5Sna0m1hI44jtpmY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:36:f7:db:31:73:cf:6d:17:1e:a3:6f:20:7d:bf:b8:9c:91:
         c2:47:f9:e8:29:06:cb:2b:40:1f:cb:9e:2f:19:0c:92:b3:2e:
         98:b3:98:0c:fa:2e:fb:ab:6f:8b:2e:09:cf:28:bf:04:f2:3a:
         68:6c:37:a1:f6:f1:2d:ae:07:b6:ce:cb:89:b1:fd:62:b0:e2:
         83:75:c3:f1:d6:a0:e7:6d:b8:32:49:72:e5:35:38:6e:c7:af:
         87:f3:a2:98:7f:f0:87:cd:96:4c:9c:6e:7a:58:85:a7:f7:9a:
         95:34:89:6f:47:d1:63:89:24:86:2d:2f:7c:75:15:4a:40:34:
         c6:74:04:59:08:3e:eb:3e:85:2c:7a:1a:ae:36:92:1a:00:b6:
         0a:0b:94:ba:f1:97:15:b6:74:71:e0:d2:83:16:fb:9c:4a:1f:
         7d:94:e3:7d:29:6f:54:05:58:8f:1b:53:b9:9b:91:e4:ce:06:
         d4:dd:fe:67:f9:e8:67:64:60:7d:ee:98:b5:f5:87:5d:d3:5a:
         2f:2d:e2:d9:e5:8e:3d:c8:c8:e3:42:62:35:c6:ec:80:3d:00:
         ad:79:dc:14:67:6d:d8:4a:a8:aa:a4:65:b6:05:96:72:8c:22:
         35:fb:46:c1:1e:28:33:0c:ef:a6:c0:e0:bc:ce:ac:48:d3:0f:
         ae:36:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:26 2026 by rpki-client