This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ragwP_IFeHeUwVBN9AxsJ8-BCao.roa
File:                     ragwP_IFeHeUwVBN9AxsJ8-BCao.roa (raw, json)
Hash identifier:          I7W7P0N6WAc3CSJDmf8jEX4QCli8Wl4amq9g8Mv2M7k=
Subject key identifier:   AD:A8:30:3F:F2:05:78:77:94:C1:50:4D:F4:0C:6C:27:CF:81:09:AA
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1176
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ragwP_IFeHeUwVBN9AxsJ8-BCao.roa
Signing time:             Tue 03 Feb 2026 08:45:08 +0000
ROA not before:           Tue 03 Feb 2026 08:45:08 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        192.192.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4470 (0x1176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 08:45:08 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=ADA8303FF205787794C1504DF40C6C27CF8109AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:65:6d:17:51:b0:a0:7d:fa:65:89:2e:53:
                    14:41:76:0e:20:ca:a0:1c:4c:01:77:bf:7a:06:86:
                    8e:48:7d:df:ef:a3:20:c4:9a:e7:11:4c:25:4c:9c:
                    b9:3f:e2:24:3a:a2:ba:f2:5d:84:c5:2a:d2:bb:19:
                    a1:4a:76:2d:38:73:6e:5b:d5:88:2e:92:e8:4f:87:
                    ae:bd:42:49:70:09:80:84:f0:82:02:02:f8:6e:10:
                    f3:43:e1:7b:22:0e:b6:e6:e4:a5:3f:6f:a0:01:e6:
                    b4:f2:b7:8c:0d:f8:71:2f:d8:24:4b:d2:95:b4:ae:
                    ff:45:15:99:36:2a:62:9b:c6:d0:0c:55:82:cb:98:
                    8a:86:85:f8:7e:f3:40:6e:3d:a7:d7:ea:70:22:1e:
                    f7:af:39:f7:ed:c4:57:c5:7a:b5:00:7f:e0:33:b6:
                    20:bd:ad:e5:70:a7:26:2c:d9:fb:8e:a8:5c:96:a4:
                    a6:ae:c6:81:2a:b1:90:55:6d:f6:c5:e0:63:3c:e5:
                    e5:7f:da:d6:d2:ac:d2:a5:41:7a:e5:fa:b9:3a:f0:
                    98:95:6c:64:c2:f1:ec:19:b6:ab:f0:23:9c:05:d8:
                    a0:0a:b6:7a:d0:4c:6b:ce:7b:97:de:a7:d3:1d:d1:
                    39:1b:28:ed:6e:ba:54:46:59:56:a6:8b:12:00:e7:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A8:30:3F:F2:05:78:77:94:C1:50:4D:F4:0C:6C:27:CF:81:09:AA
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ragwP_IFeHeUwVBN9AxsJ8-BCao.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:5b:0b:24:a9:37:a7:24:59:7c:ee:5a:6d:91:bc:3e:85:bb:
         f9:62:cd:89:f9:e4:d3:52:7f:d0:30:20:a7:5a:17:aa:e9:ae:
         02:c1:a3:d8:45:ff:b6:cc:96:4e:20:14:33:10:33:8a:c6:09:
         e8:a1:75:71:85:82:56:ab:16:63:c0:04:d9:35:24:72:f4:90:
         3c:a2:19:cf:95:36:7b:7a:f9:3c:d9:34:36:be:8b:d9:89:0e:
         e8:71:6c:da:f6:fc:0d:a3:67:c7:1f:42:8f:b1:ff:13:35:a6:
         c7:47:9d:a7:0e:ef:2f:93:c1:8c:58:b9:0a:f0:15:74:9c:db:
         2d:a9:91:8d:94:1d:03:e4:a9:06:f6:32:02:da:e9:5c:4e:9b:
         17:79:ba:24:ba:8a:01:59:27:8c:fd:61:77:6e:29:10:6b:ac:
         c5:6d:2b:52:44:16:0d:ef:14:2b:59:40:82:6c:ff:cc:05:20:
         8a:86:06:1e:81:3b:e3:bf:2f:c5:5e:ca:8f:0c:57:2a:d6:e7:
         73:d3:a4:83:a8:d2:9f:e4:7e:00:30:2a:60:a2:2a:e7:3d:db:
         0a:d3:af:9f:2d:b3:66:91:0a:46:c1:3d:b4:02:25:8c:e5:49:
         80:d9:69:c4:ac:6a:47:7b:28:88:aa:72:33:54:e1:bf:bc:9c:
         99:a7:d2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:48 2026 by rpki-client