This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/t5ohWVwLK4USiHCnV9IBHMedl-A.roa
File:                     t5ohWVwLK4USiHCnV9IBHMedl-A.roa (raw, json)
Hash identifier:          OknuMdXNst2GZbUe+pWR0UPtg/mLzLKpvbMtwN9Du6U=
Subject key identifier:   B7:9A:21:59:5C:0B:2B:85:12:88:70:A7:57:D2:01:1C:C7:9D:97:E0
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       132A
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/t5ohWVwLK4USiHCnV9IBHMedl-A.roa
Signing time:             Fri 06 Feb 2026 01:02:40 +0000
ROA not before:           Fri 06 Feb 2026 01:02:40 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.64.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4906 (0x132a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:02:40 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B79A21595C0B2B85128870A757D2011CC79D97E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:3c:4d:ec:91:25:a1:c8:43:cd:7e:f4:78:
                    41:1f:3b:9b:d5:4e:61:da:4f:63:8b:39:30:02:f6:
                    69:d4:1c:2c:1d:31:fb:f6:cd:ff:fc:64:b7:41:6f:
                    5e:5e:af:ff:9f:48:c0:9d:f5:5b:b3:ca:fb:e0:8a:
                    0c:3a:07:38:d2:f5:02:10:48:45:8d:e9:dc:76:4d:
                    42:ba:e4:86:ca:35:5d:c7:9c:0a:8d:e0:21:71:47:
                    d1:ec:e0:e7:b7:59:6c:fd:a3:24:30:65:a7:dc:5f:
                    d9:11:e4:3d:6c:95:6d:54:a2:a5:99:10:84:4a:df:
                    79:69:21:96:da:dc:96:71:a7:b5:16:8c:1a:ab:5f:
                    e9:dc:53:03:03:54:19:27:ea:e3:98:5c:c4:76:aa:
                    91:08:0d:71:d6:75:26:31:fb:95:a1:a4:88:59:71:
                    38:87:c3:a7:c0:a0:c9:f1:b9:45:51:82:19:31:0f:
                    6f:89:78:64:20:8e:98:fc:c8:c9:af:2e:f9:e9:42:
                    61:ed:43:5a:e7:fb:07:ab:81:78:b8:23:a1:d8:ab:
                    48:7f:8a:36:bc:71:89:b7:47:35:96:0b:90:4f:58:
                    d7:3b:a2:b3:6d:ac:6b:23:bf:b4:7a:79:62:68:b0:
                    28:f5:06:8b:5d:b6:7d:43:e3:33:64:d7:52:a2:fa:
                    15:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9A:21:59:5C:0B:2B:85:12:88:70:A7:57:D2:01:1C:C7:9D:97:E0
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/t5ohWVwLK4USiHCnV9IBHMedl-A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:3a:8a:15:96:9e:a3:85:4b:ac:b9:21:c5:b2:b8:29:8d:03:
         8f:31:0d:ff:87:1e:5b:58:29:80:0a:5d:25:1e:f6:b6:f7:d1:
         c6:82:b4:f6:cd:b2:66:31:5e:0d:48:a0:be:26:09:2c:82:1a:
         37:b6:92:52:f9:22:6f:4d:73:01:71:62:65:a5:10:ad:4c:9c:
         8d:d4:ba:da:4f:12:a8:ef:4e:a8:72:d8:40:88:5a:91:5b:79:
         bf:41:1c:8f:8b:a4:40:c9:f1:c6:81:91:9c:92:c4:00:bd:c2:
         07:5d:1f:b8:f1:79:30:b5:1b:e6:33:2e:7b:98:69:82:2e:85:
         48:6e:2b:fe:18:63:2f:99:58:48:24:2a:16:96:cf:83:f4:62:
         84:fa:9b:72:49:0d:75:bc:af:6a:87:e2:f4:8e:e2:6e:31:e5:
         76:a7:ec:03:1b:09:fe:ba:38:35:df:2a:06:28:68:2c:37:4d:
         d0:69:3b:6f:24:63:a5:dc:02:81:8b:db:a5:7d:fc:57:68:c4:
         bd:60:f8:78:da:a4:88:1a:94:cc:36:63:7a:de:57:a0:b3:c8:
         03:7c:1a:7c:9a:8f:58:bf:ec:9b:ae:f4:63:bd:ef:3a:af:5a:
         54:91:10:4b:fb:16:c7:7e:2d:d0:3e:89:7e:d8:ec:96:b6:7b:
         00:15:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:59 2026 by rpki-client