This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/skHvXUqhwIWHq0sdZCV3oOqPV6o.roa
File:                     skHvXUqhwIWHq0sdZCV3oOqPV6o.roa (raw, json)
Hash identifier:          0+HCJc5RD/JvGEZIbFFf4I2suCvFpbMYG6O7OMAlqkg=
Subject key identifier:   B2:41:EF:5D:4A:A1:C0:85:87:AB:4B:1D:64:25:77:A0:EA:8F:57:AA
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1085
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/skHvXUqhwIWHq0sdZCV3oOqPV6o.roa
Signing time:             Tue 03 Feb 2026 01:51:48 +0000
ROA not before:           Tue 03 Feb 2026 01:51:48 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        192.192.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4229 (0x1085)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 01:51:48 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B241EF5D4AA1C08587AB4B1D642577A0EA8F57AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b8:8e:cb:2b:b2:4b:85:02:35:1d:a8:32:21:
                    6e:cd:13:f4:68:3c:0c:8e:9b:b8:63:eb:00:26:76:
                    72:ff:41:07:a9:81:2d:63:06:a6:bf:e8:b8:01:42:
                    b6:44:0e:4e:1e:7f:76:51:7e:16:a4:24:65:57:ec:
                    43:01:00:c7:15:d6:a3:23:23:a5:77:48:63:32:07:
                    49:e9:1a:93:9d:26:2b:f1:c0:23:a8:6a:0d:a7:cc:
                    be:a3:39:22:02:08:eb:6d:ad:8e:be:cf:31:22:1b:
                    90:60:d8:d1:a4:d2:d3:6d:73:63:81:37:1b:9b:43:
                    b2:f6:fa:7d:42:85:93:36:22:64:14:04:da:79:c9:
                    ff:2f:81:0e:20:3f:92:01:ac:62:07:4e:a9:4a:d4:
                    f8:34:76:72:3e:b6:d1:b8:19:64:19:f7:34:a2:88:
                    3c:d3:81:ee:f4:ce:af:57:45:3f:c7:82:6d:6f:ff:
                    c8:28:2e:c5:f2:66:35:a6:9c:e9:e9:27:8d:e5:de:
                    2f:96:69:b2:71:89:75:fb:7d:c9:27:3f:ff:13:56:
                    d9:7b:2c:7c:e6:12:07:ba:3c:74:8f:cf:f7:2b:8c:
                    16:c1:ce:58:06:d0:1e:7c:15:c6:19:90:5d:a8:9d:
                    76:8d:ce:57:95:b9:21:70:56:29:3c:88:aa:7e:dd:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:41:EF:5D:4A:A1:C0:85:87:AB:4B:1D:64:25:77:A0:EA:8F:57:AA
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/skHvXUqhwIWHq0sdZCV3oOqPV6o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:96:06:09:a5:17:ec:91:fb:42:2f:e4:42:ff:bf:09:76:d8:
         3d:76:da:8d:6d:3e:aa:36:34:37:bf:82:c5:7f:81:72:14:38:
         41:71:e7:ac:a9:0d:a4:d8:9a:b1:cb:ea:d6:58:f9:3c:c7:17:
         44:b6:c6:95:18:c8:01:10:3c:b7:5b:0e:39:a6:91:51:ae:86:
         8c:b1:cf:b6:bc:83:80:5f:f6:aa:3d:96:3d:f5:c9:ea:b6:c9:
         f4:87:6e:22:93:bc:3a:69:6b:14:47:ac:fc:38:cd:94:49:05:
         88:63:e4:b5:26:30:97:b2:8d:c3:9e:2d:25:f0:63:f2:4d:e6:
         bb:f3:3f:6d:76:7b:eb:0a:f6:21:03:6d:73:dd:f6:2c:fe:d9:
         7f:62:a2:34:63:30:cc:61:07:cb:f6:b0:1d:7a:a5:22:b9:fc:
         c4:36:2d:25:b8:04:31:8b:be:4d:83:a5:b9:b4:80:c5:4d:c8:
         62:ed:ce:17:b3:0b:ae:20:44:41:d8:fa:57:de:11:a9:87:b7:
         6e:ad:e6:bf:0f:ef:97:1e:be:d5:52:5a:c2:20:b4:fe:9a:b8:
         ab:57:03:7c:6f:d5:d2:d9:24:66:38:6c:d0:73:36:bd:c7:7c:
         46:93:e2:4e:8e:dd:6e:91:3a:74:a8:92:92:54:47:6f:0d:d7:
         a5:30:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:42:57 2026 by rpki-client