This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/sbfNIJTRyFiTAp82NPWJuTMVIVs.roa
File:                     sbfNIJTRyFiTAp82NPWJuTMVIVs.roa (raw, json)
Hash identifier:          kDvKOviNyYbrb2gNZRrvXNYf+LyFMBj/Jdglgtcro3A=
Subject key identifier:   B1:B7:CD:20:94:D1:C8:58:93:02:9F:36:34:F5:89:B9:33:15:21:5B
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11FB
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/sbfNIJTRyFiTAp82NPWJuTMVIVs.roa
Signing time:             Tue 03 Feb 2026 02:54:55 +0000
ROA not before:           Tue 03 Feb 2026 02:54:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        203.68.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4603 (0x11fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:54:55 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B1B7CD2094D1C85893029F3634F589B93315215B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:5f:85:4d:98:b0:0b:1a:64:dd:18:28:04:
                    5e:b4:f2:b1:32:94:88:ae:73:58:b1:f1:ab:1e:f2:
                    cd:1b:3a:f1:4b:34:2d:22:0f:6c:57:ee:1c:e0:8d:
                    58:f0:aa:48:10:36:37:f5:0d:4b:52:e8:4f:55:68:
                    83:1b:68:7f:e8:4b:39:52:44:df:ba:bf:76:81:06:
                    7e:4d:a7:35:29:ae:a8:c1:71:14:d8:89:78:f7:0e:
                    d1:c5:5e:54:0e:ef:ea:2c:ee:ba:6f:47:47:c5:f3:
                    7b:a1:fc:8e:7c:97:02:5f:71:e0:ad:b5:0e:7c:00:
                    1c:22:4a:57:64:0b:ce:b9:84:f9:4e:fb:34:9d:3d:
                    7b:7e:fe:1b:04:c2:68:9b:c8:c5:a7:c8:a8:62:b8:
                    b9:4d:e5:64:f9:0a:9d:f4:d8:99:2d:72:89:a6:59:
                    15:b9:c7:d3:1b:77:14:ac:22:6e:c9:82:32:58:20:
                    0a:8e:f0:83:c8:3b:f0:0f:d6:60:b0:ef:a9:b6:cd:
                    8b:46:1b:7c:55:3c:c5:be:a2:08:40:04:a0:b5:90:
                    c6:a5:f3:6b:63:04:b5:85:d0:d2:7a:a7:05:32:d1:
                    4b:bc:51:a0:66:83:8c:33:e1:65:34:ec:9f:1c:c9:
                    16:67:da:0c:ab:f6:cc:45:58:95:aa:2d:83:c5:55:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B7:CD:20:94:D1:C8:58:93:02:9F:36:34:F5:89:B9:33:15:21:5B
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/sbfNIJTRyFiTAp82NPWJuTMVIVs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.68.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:30:71:77:65:4b:6c:d8:7e:fb:52:35:b9:66:08:9e:71:
         ef:6a:59:76:c8:36:ad:1f:45:65:0e:a8:54:9f:cd:48:b6:68:
         c0:cb:53:1b:4d:5a:7d:36:f1:17:7c:97:50:08:e3:10:16:10:
         eb:90:0e:91:64:0e:90:d4:11:dd:f2:3a:8f:70:14:25:d0:85:
         13:0d:ea:73:2b:da:1e:ce:21:bd:e1:bf:5c:6d:6a:12:d6:76:
         75:09:cc:e4:32:3c:67:b2:a7:af:b1:3a:22:1c:24:0c:6c:22:
         12:ad:1e:81:5f:33:ea:ca:31:dc:e3:89:74:51:6a:33:1c:09:
         88:9e:48:90:dd:34:e4:f1:dd:70:48:86:14:5c:f3:28:b6:ac:
         4a:31:df:55:52:46:84:e6:01:56:55:67:bc:89:58:67:20:72:
         fd:e7:00:b9:73:fa:e0:91:41:3d:02:be:e4:67:85:e8:91:2e:
         b1:c8:97:6e:d5:f3:b8:fa:5d:dc:a9:8f:18:fd:7f:2a:80:3d:
         de:b5:dc:5d:82:21:21:1c:9e:eb:30:3f:ad:5f:25:0f:4f:21:
         34:d3:52:e8:3f:33:9b:d9:68:fc:23:4d:3c:7d:45:e3:9a:36:
         d0:25:d6:ba:42:f5:32:e3:ce:05:a3:46:ae:e6:f4:9c:8f:3b:
         f3:46:b9:8f
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MjU0NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIxQjdDRDIwOTREMUM4
NTg5MzAyOUYzNjM0RjU4OUI5MzMxNTIxNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKs1+FTZiwCxpk3RgoBF608rEylIiuc1ix8ase8s0bOvFLNC0i
D2xX7hzgjVjwqkgQNjf1DUtS6E9VaIMbaH/oSzlSRN+6v3aBBn5NpzUprqjBcRTY
iXj3DtHFXlQO7+os7rpvR0fF83uh/I58lwJfceCttQ58ABwiSldkC865hPlO+zSd
PXt+/hsEwmibyMWnyKhiuLlN5WT5Cp302JktcommWRW5x9MbdxSsIm7JgjJYIAqO
8IPIO/AP1mCw76m2zYtGG3xVPMW+oghABKC1kMal82tjBLWF0NJ6pwUy0Uu8UaBm
g4wz4WU07J8cyRZn2gyr9sxFWJWqLYPFVRQrAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUsbfNIJTRyFiTAp82NPWJuTMVIVswHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9zYmZOSUpUUnlGaVRBcDgyTlBX
SnVUTVZJVnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0SZ
MA0GCSqGSIb3DQEBCwUAA4IBAQBPsDBxd2VLbNh++1I1uWYInnHvall2yDatH0Vl
DqhUn81ItmjAy1MbTVp9NvEXfJdQCOMQFhDrkA6RZA6Q1BHd8jqPcBQl0IUTDepz
K9oeziG94b9cbWoS1nZ1CczkMjxnsqevsToiHCQMbCISrR6BXzPqyjHc44l0UWoz
HAmInkiQ3TTk8d1wSIYUXPMotqxKMd9VUkaE5gFWVWe8iVhnIHL95wC5c/rgkUE9
Ar7kZ4XokS6xyJdu1fO4+l3cqY8Y/X8qgD3etdxdgiEhHJ7rMD+tXyUPTyE001Lo
PzOb2Wj8I008fUXjmjbQJda6QvUy484Fo0au5vScjzvzRrmP
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:50 2026 by rpki-client