This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/sFELnmjn__vqnesjetd9MZbjb0M.roa
File:                     sFELnmjn__vqnesjetd9MZbjb0M.roa (raw, json)
Hash identifier:          lM2C7lLYsSVKOoYu2AIzG4HEY+0RDdJDJ107yiv/jRc=
Subject key identifier:   B0:51:0B:9E:68:E7:FF:FB:EA:9D:EB:23:7A:D7:7D:31:96:E3:6F:43
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11E5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/sFELnmjn__vqnesjetd9MZbjb0M.roa
Signing time:             Tue 03 Feb 2026 02:42:20 +0000
ROA not before:           Tue 03 Feb 2026 02:42:20 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        210.60.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4581 (0x11e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:42:20 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B0510B9E68E7FFFBEA9DEB237AD77D3196E36F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:5c:f8:61:e3:b4:af:de:9b:51:32:9f:77:
                    3a:27:58:8a:e3:c6:81:dc:fc:fc:dc:dc:b1:28:af:
                    2a:0a:4f:fc:36:af:52:9c:47:45:f9:17:03:db:a0:
                    32:08:04:28:85:b9:40:2e:92:b1:83:4b:7c:24:b5:
                    d9:e7:82:47:a9:18:cb:be:44:57:52:f0:15:cf:18:
                    1c:c6:dd:fa:7f:b2:d5:5a:37:d1:9b:48:91:54:d1:
                    2f:61:d2:b8:e4:8d:73:b7:8e:62:5d:5e:e8:94:35:
                    f3:e1:4c:94:be:f5:3b:df:b8:04:08:1c:4b:00:6a:
                    b3:45:ad:f2:79:94:01:93:3a:7d:31:2a:17:a6:f1:
                    e6:9e:23:d5:23:4d:4c:d8:59:8a:66:22:9e:b5:0d:
                    79:eb:ea:10:31:ef:9f:43:b8:b0:fb:e6:7f:40:8f:
                    11:14:4b:09:6e:ad:81:61:9b:d8:34:99:ab:22:9a:
                    c6:f3:ad:1c:42:d9:d8:14:58:78:10:1c:e7:8c:fc:
                    a1:57:a7:9b:b8:0b:65:c8:99:ee:5c:1b:5a:61:fb:
                    06:ba:70:c2:25:d3:2e:76:94:71:55:2f:57:2e:6a:
                    ee:f9:2f:2d:f1:f9:e0:c0:ff:ad:0d:ca:0d:61:16:
                    33:c0:c9:6b:69:ac:7e:9f:8f:3d:29:90:99:6c:f3:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:51:0B:9E:68:E7:FF:FB:EA:9D:EB:23:7A:D7:7D:31:96:E3:6F:43
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/sFELnmjn__vqnesjetd9MZbjb0M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:ac:66:b0:2d:74:db:0f:5f:4a:8c:f4:c4:6e:01:a5:6d:
         87:35:8c:09:85:4f:82:5a:88:c0:7c:c3:58:ad:ea:b2:14:e7:
         11:60:a9:66:53:d4:ba:3c:52:e1:f6:a5:81:05:c1:e7:59:fa:
         c5:da:79:ba:9d:c9:e1:ea:44:94:77:be:0b:25:14:8c:3d:65:
         f4:9a:b0:62:2a:4d:2d:eb:03:86:c8:5a:59:d0:81:60:86:52:
         a9:59:c3:a3:a6:70:e0:fd:ea:91:bd:b1:0d:af:c8:44:80:ac:
         a2:47:e6:75:55:3d:25:98:d5:70:fe:a6:b3:bc:8b:bc:19:d1:
         d0:0f:10:58:cb:33:bc:5b:53:0a:07:0f:31:00:6b:25:89:18:
         01:03:7b:74:ea:c0:d8:f3:c7:c4:c2:84:5c:9b:c9:b1:3b:7b:
         36:b1:4a:1f:df:34:19:f9:c5:5a:0b:ab:82:04:56:94:d0:1c:
         69:b6:87:57:0f:02:24:13:ea:28:d0:45:2d:92:fe:7a:cd:fa:
         b1:b2:ab:ed:14:ef:e4:aa:97:b2:2b:36:ee:ad:be:af:06:b8:
         27:c8:05:32:ad:5f:a6:6f:f9:84:be:48:79:26:e4:27:d3:af:
         38:ff:c2:30:d8:39:95:0d:76:29:fb:fa:e7:19:52:33:11:f5:
         20:ff:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:24 2026 by rpki-client