This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/sWsprIOJY_QzwMkwjAqBaZOq2PM.roa
File:                     sWsprIOJY_QzwMkwjAqBaZOq2PM.roa (raw, json)
Hash identifier:          rm/CnlMxhSrLpvSAits/doKTOF4ooIE06QpeveTide0=
Subject key identifier:   B1:6B:29:AC:83:89:63:F4:33:C0:C9:30:8C:0A:81:69:93:AA:D8:F3
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       121F
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/sWsprIOJY_QzwMkwjAqBaZOq2PM.roa
Signing time:             Tue 03 Feb 2026 02:57:36 +0000
ROA not before:           Tue 03 Feb 2026 02:57:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        210.240.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4639 (0x121f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:57:36 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B16B29AC838963F433C0C9308C0A816993AAD8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c5:be:b2:a0:b5:ae:df:e1:42:4e:81:36:28:
                    11:a8:ed:1e:9e:82:be:8d:f0:1d:3f:25:ce:5d:95:
                    60:fa:2a:f0:96:4b:54:48:91:3e:e0:f0:c6:d5:fe:
                    79:d4:ce:93:cf:82:5e:1c:de:8e:39:e6:6f:c6:af:
                    cd:a7:7a:15:8e:97:af:8c:68:c7:09:49:03:ca:ce:
                    66:24:b5:a5:85:ff:ed:aa:9d:39:79:53:63:f7:ef:
                    a6:a5:12:53:37:b9:d6:8d:c2:75:38:fc:f1:87:03:
                    b5:7f:df:6e:69:92:87:13:3b:c7:e8:e9:b9:40:6a:
                    07:30:8a:0c:17:aa:6a:bb:5d:97:cf:91:55:d1:6b:
                    4b:dc:1e:71:09:7f:8b:d6:f2:f5:d6:fa:79:c0:16:
                    d6:1b:b6:d7:66:74:8f:a4:a0:7b:0f:78:73:9f:59:
                    2a:5f:25:5a:5d:fa:78:2b:36:f4:62:bb:a7:10:38:
                    53:fc:97:58:90:dd:2a:06:e7:f3:5f:f9:94:16:14:
                    48:4d:00:29:db:30:c5:5e:3c:c3:d8:17:5a:88:09:
                    fe:f5:ce:21:f5:a0:90:ad:52:ba:98:22:4f:da:3a:
                    43:05:ff:71:32:04:23:77:72:0a:c7:fd:9c:e4:49:
                    36:ce:40:68:f7:fa:f0:09:76:5a:8c:a2:c1:7a:21:
                    23:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6B:29:AC:83:89:63:F4:33:C0:C9:30:8C:0A:81:69:93:AA:D8:F3
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/sWsprIOJY_QzwMkwjAqBaZOq2PM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.240.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:53:6a:bc:13:0d:fb:96:a8:7e:14:ba:b3:45:ca:98:ba:
         31:c0:b5:fb:e7:b0:6a:56:fc:6e:19:e9:39:6c:a0:c4:a5:03:
         4f:7f:f6:4e:b8:c3:5c:a3:1b:65:14:b4:b1:d4:44:71:3f:9d:
         2d:e1:73:ee:aa:d2:cf:99:ef:44:eb:e6:43:f5:f1:41:93:5b:
         a5:fe:6a:9a:ea:c3:fd:65:10:d9:70:b3:eb:7e:b9:94:f3:c0:
         b1:6c:96:d3:b5:7a:f8:68:21:d0:fe:10:e2:8a:52:45:0b:99:
         c9:6f:bb:05:42:07:62:cb:38:20:b9:93:2d:7e:07:48:48:54:
         fc:f1:79:bb:68:27:f0:ad:5c:e7:39:93:b3:30:5b:63:ab:5a:
         50:c1:d9:6c:aa:4b:d0:d8:b0:ea:37:64:a1:ba:14:a9:b9:30:
         c5:48:fe:73:a9:10:e0:6e:71:af:6a:9d:74:1c:5e:07:f3:d4:
         b6:0d:42:97:df:0a:93:e8:b2:6b:be:b6:49:4f:36:ea:8b:eb:
         b1:1d:90:fc:1a:9b:f7:44:07:0e:0c:d3:52:1f:63:d2:f0:e4:
         40:60:f9:a4:bd:67:da:79:62:9a:89:13:ad:76:ba:e9:70:e2:
         6c:a9:34:3a:c8:9b:96:0e:72:15:00:9e:cd:f8:a7:ac:30:04:
         79:72:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:55 2026 by rpki-client