This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/tMW3yX32CyVbdR8NpeL5GcLKLRA.roa
File:                     tMW3yX32CyVbdR8NpeL5GcLKLRA.roa (raw, json)
Hash identifier:          oQtrDBLt1b9s3EFlM43abOFUvGiFAKuLtsLtAThklnc=
Subject key identifier:   B4:C5:B7:C9:7D:F6:0B:25:5B:75:1F:0D:A5:E2:F9:19:C2:CA:2D:10
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       136E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tMW3yX32CyVbdR8NpeL5GcLKLRA.roa
Signing time:             Fri 06 Feb 2026 01:08:50 +0000
ROA not before:           Fri 06 Feb 2026 01:08:50 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.72.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4974 (0x136e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:08:50 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B4C5B7C97DF60B255B751F0DA5E2F919C2CA2D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:13:87:94:77:41:1d:3e:89:1f:1c:19:8a:
                    5c:8a:2e:a6:55:45:e6:24:55:84:2d:2c:00:6c:b5:
                    80:3c:6b:6c:0e:13:1d:6b:a7:b0:c7:0a:50:21:72:
                    59:92:3a:66:38:72:46:bc:e8:7b:6a:45:a0:48:aa:
                    61:cb:5c:1c:88:ee:44:cc:04:ca:52:c5:33:69:59:
                    de:4b:f4:8d:90:3d:9f:22:36:9d:e8:48:64:5f:4d:
                    01:33:3a:d1:5b:7d:36:81:d3:16:25:69:8c:2c:0e:
                    d4:c9:3a:5c:84:40:51:ce:d8:56:4a:29:0c:b4:81:
                    47:c2:00:3e:50:8c:49:f0:a4:c9:b8:99:17:60:46:
                    cb:45:c7:39:2f:14:cb:3c:86:03:4b:52:e7:34:42:
                    db:37:7c:f0:48:28:39:25:03:97:1a:5e:df:64:3e:
                    97:65:c0:dd:7e:f7:12:99:58:4f:d4:18:85:49:17:
                    9c:14:3b:dd:64:73:3b:58:83:85:17:1f:9b:ee:39:
                    86:c7:d3:2b:ce:cd:52:2c:c5:22:65:8b:d9:b2:bd:
                    63:f3:5a:94:e1:f5:de:76:55:dc:21:1b:4a:8f:5c:
                    bd:72:9f:ad:48:1b:3f:cd:e2:6f:cd:c6:bd:d9:d9:
                    34:99:75:38:87:a4:9a:73:6a:bd:fc:27:41:69:47:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C5:B7:C9:7D:F6:0B:25:5B:75:1F:0D:A5:E2:F9:19:C2:CA:2D:10
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tMW3yX32CyVbdR8NpeL5GcLKLRA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:49:75:e1:99:51:9c:ed:0d:cd:27:80:52:90:2a:fe:13:
         f3:10:60:17:15:83:62:f9:14:97:6c:32:67:42:4c:4e:95:ab:
         3b:cd:5f:25:0e:5d:97:e8:b8:2a:e6:14:02:59:77:30:55:4e:
         38:1c:bf:62:13:9a:a6:80:79:df:8b:b5:92:20:63:aa:1f:d9:
         ca:58:12:1a:83:e0:51:fd:2c:ee:0b:33:d4:92:a9:59:89:dc:
         69:00:d1:49:1f:09:40:2a:9b:5c:33:ba:4f:1e:7c:22:b7:53:
         79:53:b1:25:81:59:54:4a:1a:3a:ad:c0:69:41:4a:b3:01:79:
         0e:d1:27:ea:e1:67:80:e7:d1:67:1e:2d:07:de:8b:d2:1c:aa:
         c9:56:dd:ce:ed:bf:69:4a:55:b9:18:43:ed:4d:c3:02:8a:4f:
         09:57:98:81:fc:18:24:88:6c:13:30:33:07:12:84:33:09:0f:
         42:bb:35:14:d1:f7:56:c1:d3:0d:f6:c2:4c:ce:5a:fe:4b:69:
         ee:b3:0e:cd:0d:0f:2b:1e:bc:74:d4:0d:1e:fb:f2:bc:d0:e7:
         86:29:ad:dc:85:ea:0b:c9:33:1f:7c:89:0d:b7:e1:53:b9:d6:
         ac:2b:24:b1:83:bb:23:86:31:ba:9e:e9:72:08:be:d4:f9:d7:
         16:ad:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:49 2026 by rpki-client