This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/rmntPRZZ1KklMlF-cbnlMd4kjxU.roa
File:                     rmntPRZZ1KklMlF-cbnlMd4kjxU.roa (raw, json)
Hash identifier:          TYyM3N+5VCcq3CisnUJDq1LimmSqQE1MDS+6klLzmqk=
Subject key identifier:   AE:69:ED:3D:16:59:D4:A9:25:32:51:7E:71:B9:E5:31:DE:24:8F:15
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       107E
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rmntPRZZ1KklMlF-cbnlMd4kjxU.roa
Signing time:             Tue 03 Feb 2026 01:50:36 +0000
ROA not before:           Tue 03 Feb 2026 01:50:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        192.192.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4222 (0x107e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 01:50:36 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AE69ED3D1659D4A92532517E71B9E531DE248F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:18:68:00:d8:f7:f0:c6:7e:ef:71:5d:9f:ca:
                    2c:51:cb:5a:33:c0:4b:c9:e6:0e:ed:87:a8:db:b2:
                    39:3d:1b:27:76:f1:81:fa:47:6a:a9:af:dc:4e:9c:
                    85:4e:df:66:e1:e3:76:90:c5:25:7c:ff:25:6e:70:
                    79:f8:9f:f4:d5:a6:22:d5:c8:8e:5b:8a:bb:15:12:
                    8a:e9:e1:59:e0:7b:ca:76:05:e8:8c:48:49:3d:12:
                    bf:29:23:a2:1c:5f:50:84:94:bb:2a:84:a0:06:7a:
                    97:ae:ad:c8:7f:41:be:9e:b1:ea:e7:b6:ed:e3:1b:
                    11:b7:30:71:a4:ed:0b:62:28:64:0f:2c:33:ce:12:
                    5a:63:2a:5c:a7:53:6c:75:ab:0b:d9:ed:0f:b3:c0:
                    e5:13:26:6a:80:20:be:29:f5:f7:9f:cb:d8:a5:24:
                    04:7c:18:b4:f0:49:ac:e2:90:fb:ad:ac:43:6f:b7:
                    38:6d:05:4e:58:d8:78:96:60:6a:9a:84:93:73:1e:
                    1d:ce:c4:de:0e:0a:63:eb:b1:0c:41:f6:a9:1e:f9:
                    c4:d8:22:24:24:4c:9b:e2:10:dc:68:4c:d7:13:f8:
                    ed:4f:82:97:a4:06:57:db:50:7d:a8:c2:09:3b:a7:
                    48:be:b4:a9:54:2e:87:c5:6a:36:3c:91:15:91:b8:
                    92:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:69:ED:3D:16:59:D4:A9:25:32:51:7E:71:B9:E5:31:DE:24:8F:15
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rmntPRZZ1KklMlF-cbnlMd4kjxU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a7:ab:43:9c:b8:5e:d1:4c:3c:83:25:6d:7a:6d:34:0c:c1:
         c6:da:98:ef:f9:c2:cb:ef:67:10:9c:ab:21:33:97:f9:06:e2:
         5c:2a:a9:a1:8b:dd:31:2a:a8:da:db:76:4c:b1:27:8a:93:63:
         db:d1:a4:75:55:b7:78:4f:b6:85:7c:6a:3c:19:fa:40:7c:c0:
         a8:3c:15:8e:7a:20:8c:9e:cd:53:5e:ea:11:2f:a5:c1:6c:6f:
         6b:52:90:3f:b7:5b:ab:3e:9f:b1:c5:0d:bd:b6:a1:7d:2c:82:
         ac:da:23:7b:6e:b2:90:6b:0e:bd:a9:9f:3c:33:55:f7:06:df:
         52:7f:a3:9a:ab:62:5e:91:da:0f:27:3a:a9:8d:af:b6:86:1f:
         dc:0f:f8:31:ca:1a:5e:37:ff:08:66:91:f7:f5:48:21:be:4f:
         05:e3:5e:c3:4e:a4:8b:41:14:c4:bf:1a:3e:5f:25:f6:fb:1e:
         40:f4:05:33:a8:52:86:31:e5:87:7a:b7:c7:f2:1f:e4:54:a6:
         87:66:98:74:a5:2b:1b:fb:75:c3:3a:f4:f5:a2:ea:ad:53:75:
         5e:81:4a:ff:2e:81:ba:e7:56:2a:0a:19:65:f2:01:db:00:55:
         91:ee:31:e5:54:96:2d:c9:c9:52:65:ab:a2:47:55:be:71:2b:
         31:46:00:32
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNjAyMDMw
MTUwMzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFFNjlFRDNEMTY1OUQ0
QTkyNTMyNTE3RTcxQjlFNTMxREUyNDhGMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4GGgA2Pfwxn7vcV2fyixRy1ozwEvJ5g7th6jbsjk9Gyd28YH6
R2qpr9xOnIVO32bh43aQxSV8/yVucHn4n/TVpiLVyI5birsVEorp4Vnge8p2BeiM
SEk9Er8pI6IcX1CElLsqhKAGepeurch/Qb6eserntu3jGxG3MHGk7QtiKGQPLDPO
ElpjKlynU2x1qwvZ7Q+zwOUTJmqAIL4p9fefy9ilJAR8GLTwSazikPutrENvtzht
BU5Y2HiWYGqahJNzHh3OxN4OCmPrsQxB9qke+cTYIiQkTJviENxoTNcT+O1Pgpek
BlfbUH2owgk7p0i+tKlULofFajY8kRWRuJKTAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUrmntPRZZ1KklMlF+cbnlMd4kjxUwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9ybW50UFJaWjFLa2xNbEYtY2Ju
bE1kNGtqeFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAOp6tDnLhe0Uw8gyVtem00DMHG2pjv+cLL72cQ
nKshM5f5BuJcKqmhi90xKqja23ZMsSeKk2Pb0aR1Vbd4T7aFfGo8GfpAfMCoPBWO
eiCMns1TXuoRL6XBbG9rUpA/t1urPp+xxQ29tqF9LIKs2iN7brKQaw69qZ88M1X3
Bt9Sf6Oaq2JekdoPJzqpja+2hh/cD/gxyhpeN/8IZpH39Ughvk8F417DTqSLQRTE
vxo+XyX2+x5A9AUzqFKGMeWHerfH8h/kVKaHZph0pSsb+3XDOvT1ouqtU3VegUr/
LoG651YqChll8gHbAFWR7jHlVJYtyclSZauiR1W+cSsxRgAy
-----END CERTIFICATE-----
Generated at Thu Feb 12 18:38:27 2026 by rpki-client