This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/tm5JqMQx7PzRy6fcnERntUqF68s.roa
File:                     tm5JqMQx7PzRy6fcnERntUqF68s.roa (raw, json)
Hash identifier:          x34un9Jabrp00GNKuihwGIV5DxUbtAggZD/rLs/sp7U=
Subject key identifier:   B6:6E:49:A8:C4:31:EC:FC:D1:CB:A7:DC:9C:44:67:B5:4A:85:EB:CB
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12EA
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tm5JqMQx7PzRy6fcnERntUqF68s.roa
Signing time:             Tue 03 Feb 2026 08:58:28 +0000
ROA not before:           Tue 03 Feb 2026 08:58:28 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.60.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4842 (0x12ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:58:28 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B66E49A8C431ECFCD1CBA7DC9C4467B54A85EBCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:af:85:be:40:9e:ff:c3:c0:ca:d3:ad:94:ba:
                    0d:7e:36:71:5b:e6:a7:b9:13:be:1d:cc:f7:40:e8:
                    c0:d9:08:a6:96:60:4e:45:31:b5:89:6a:08:8b:a1:
                    a4:8d:a9:37:6a:2a:fd:f6:ba:cb:d6:38:3b:53:c2:
                    ce:a6:fb:40:aa:0a:e5:00:29:f7:72:49:a5:f4:a3:
                    a6:10:e0:42:44:e6:75:57:f8:f4:84:9d:57:88:56:
                    a7:68:f8:a0:b9:2a:cf:8d:16:c9:02:b3:a4:4f:42:
                    3e:f1:1e:8a:89:65:71:ac:9f:98:74:13:3a:f8:c1:
                    89:2b:e8:5e:c1:a7:20:b0:76:ce:cd:23:94:a9:80:
                    bd:16:dd:e0:70:01:d0:1f:10:94:7a:9a:03:3c:1a:
                    94:2d:e0:cc:0e:08:09:a5:27:ff:ab:a3:fb:1d:32:
                    a5:3e:c4:99:ff:61:6d:27:19:b5:fe:bb:4d:6e:ef:
                    fe:25:d2:7a:86:79:68:f6:18:75:16:f0:0f:4e:3b:
                    9a:df:ef:cd:8c:db:9d:83:8e:e7:3b:8f:15:3d:69:
                    7e:fd:ee:22:04:17:b4:25:74:02:33:d1:10:67:a8:
                    59:b8:fd:4b:a7:bc:a9:9d:ab:ca:93:ed:5a:8b:a7:
                    4c:46:29:e5:db:db:16:56:31:3d:49:da:9c:cb:26:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6E:49:A8:C4:31:EC:FC:D1:CB:A7:DC:9C:44:67:B5:4A:85:EB:CB
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tm5JqMQx7PzRy6fcnERntUqF68s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:19:7f:6b:cb:18:07:23:54:ab:6d:0e:4e:51:48:80:0b:6e:
         bc:7f:24:f1:8f:74:ee:47:a7:32:f6:f3:7d:a7:bd:e0:59:69:
         12:66:f3:9f:78:8f:99:af:df:67:4d:11:d3:ac:fb:c6:d1:7f:
         ef:27:7a:40:08:fb:a2:b9:40:c5:14:d7:a8:e3:03:26:6d:40:
         df:b6:15:32:f7:e9:a6:ac:73:40:c9:52:d8:ce:39:b6:6c:7b:
         f3:e2:23:e9:53:15:6b:0e:2c:a1:c9:84:2d:c8:27:60:90:d9:
         e6:3e:11:4a:ef:b2:87:82:ec:35:b7:94:a7:7e:30:6b:f9:6d:
         0b:a9:d3:60:98:93:cf:b8:43:71:89:5b:18:34:23:ef:c9:10:
         de:ab:f0:27:d8:8c:ac:f3:a8:80:d0:09:00:05:4c:84:66:03:
         50:1f:95:6c:d7:28:72:47:ef:9c:7d:70:99:e4:58:92:ee:4b:
         c7:88:38:6d:ff:b2:f9:32:0c:5e:3d:57:87:e7:0d:ec:55:5d:
         ac:e6:19:23:ea:86:24:ee:a3:87:d5:a8:c6:a9:59:45:80:ae:
         b9:3f:18:97:f4:66:2e:fb:90:a6:3c:68:cd:1c:cb:18:3c:0a:
         60:4f:b2:ee:5a:6e:02:9a:87:b5:1a:be:56:46:57:5a:46:2a:
         57:bf:dd:54
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEuowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
ODU4MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI2NkU0OUE4QzQzMUVD
RkNEMUNCQTdEQzlDNDQ2N0I1NEE4NUVCQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwr4W+QJ7/w8DK062Uug1+NnFb5qe5E74dzPdA6MDZCKaWYE5F
MbWJagiLoaSNqTdqKv32usvWODtTws6m+0CqCuUAKfdySaX0o6YQ4EJE5nVX+PSE
nVeIVqdo+KC5Ks+NFskCs6RPQj7xHoqJZXGsn5h0Ezr4wYkr6F7BpyCwds7NI5Sp
gL0W3eBwAdAfEJR6mgM8GpQt4MwOCAmlJ/+ro/sdMqU+xJn/YW0nGbX+u01u7/4l
0nqGeWj2GHUW8A9OO5rf782M252Djuc7jxU9aX797iIEF7QldAIz0RBnqFm4/Uun
vKmdq8qT7VqLp0xGKeXb2xZWMT1J2pzLJsWZAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUtm5JqMQx7PzRy6fcnERntUqF68swHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC90bTVKcU1ReDdQelJ5NmZjbkVS
bnRVcUY2OHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0jyI
MA0GCSqGSIb3DQEBCwUAA4IBAQAPGX9ryxgHI1SrbQ5OUUiAC268fyTxj3TuR6cy
9vN9p73gWWkSZvOfeI+Zr99nTRHTrPvG0X/vJ3pACPuiuUDFFNeo4wMmbUDfthUy
9+mmrHNAyVLYzjm2bHvz4iPpUxVrDiyhyYQtyCdgkNnmPhFK77KHguw1t5SnfjBr
+W0LqdNgmJPPuENxiVsYNCPvyRDeq/An2Iys86iA0AkABUyEZgNQH5Vs1yhyR++c
fXCZ5FiS7kvHiDht/7L5MgxePVeH5w3sVV2s5hkj6oYk7qOH1ajGqVlFgK65PxiX
9GYu+5CmPGjNHMsYPApgT7LuWm4Cmoe1Gr5WRldaRipXv91U
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:32 2026 by rpki-client