This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/uAY1OKGFIqoeiOifYfsYGSqt4vg.roa
File:                     uAY1OKGFIqoeiOifYfsYGSqt4vg.roa (raw, json)
Hash identifier:          bVU8hLCh5pnklx/vJyfPtI7wqi51qOoYQ8rMIllgJ9s=
Subject key identifier:   B8:06:35:38:A1:85:22:AA:1E:88:E8:9F:61:FB:18:19:2A:AD:E2:F8
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1203
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/uAY1OKGFIqoeiOifYfsYGSqt4vg.roa
Signing time:             Tue 03 Feb 2026 02:55:31 +0000
ROA not before:           Tue 03 Feb 2026 02:55:31 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17711
IP address blocks:        203.71.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4611 (0x1203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:55:31 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B8063538A18522AA1E88E89F61FB18192AADE2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:3e:0a:6a:f6:38:be:cf:93:a8:46:12:b1:
                    33:ad:81:fd:88:e4:45:84:8e:45:41:2a:e6:05:bc:
                    a1:08:ce:37:ce:90:9c:aa:42:d5:19:84:d7:32:b7:
                    00:94:af:04:d4:0f:aa:93:ab:05:e6:12:f7:6d:7f:
                    1e:31:00:51:2f:1e:74:f0:d5:6d:24:ef:6d:bf:73:
                    89:8f:b3:32:fa:75:95:25:f8:e7:1c:49:75:75:f7:
                    46:b0:94:d1:e1:58:10:54:5d:61:ec:c6:db:2b:4c:
                    79:e2:2c:1d:d0:53:2c:14:d8:f9:11:39:a1:28:78:
                    28:09:f8:e9:0d:d4:26:90:0e:03:38:cb:d3:5d:dd:
                    1e:68:3f:bb:99:67:99:0c:c9:c3:f1:ac:c4:b0:7b:
                    cf:1a:d1:ad:96:8a:ec:0e:a6:31:4a:91:38:a3:15:
                    8b:dd:2d:74:a7:fa:b3:d3:1a:65:1c:30:a4:ea:4e:
                    f0:6c:dd:72:49:40:a6:10:c7:c2:60:b7:30:15:77:
                    d2:87:ce:fa:a9:20:43:c3:f5:62:52:f1:14:40:59:
                    fd:07:e9:3d:57:ba:2f:52:0e:1b:10:14:6f:a1:a2:
                    62:05:50:fd:e7:b1:8e:8a:77:f3:cd:5c:87:4f:96:
                    23:31:68:f0:68:7e:69:c6:b2:2b:08:49:ec:0e:95:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:06:35:38:A1:85:22:AA:1E:88:E8:9F:61:FB:18:19:2A:AD:E2:F8
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/uAY1OKGFIqoeiOifYfsYGSqt4vg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:b9:30:a4:51:59:6f:c7:66:76:d9:0b:a8:ef:cd:2f:a0:5f:
         d7:e9:bc:b4:ac:36:14:02:6f:a5:30:35:ae:d4:ac:f9:6f:8f:
         92:fb:f3:59:41:25:8e:bb:92:0a:ff:2d:5c:23:84:00:97:27:
         83:c2:aa:7b:b2:7f:ef:ca:8d:71:09:c0:a6:69:c8:31:03:c7:
         94:a5:86:9b:64:2d:62:a0:1f:5f:a0:f4:29:2b:f9:6e:67:4a:
         28:a8:ea:1e:38:88:1f:f4:14:7f:bb:10:2a:3b:1b:ad:20:8d:
         01:2c:00:33:03:8a:f4:2c:a4:f8:db:c0:ec:58:b0:52:19:7b:
         b9:da:55:08:4f:10:c0:50:29:cd:00:86:f0:df:1d:a8:08:ae:
         46:75:f7:69:b0:17:6f:6b:20:3c:f9:bf:c7:5a:ae:65:f3:6f:
         a4:ce:30:02:10:00:c4:be:e1:8d:42:c8:7d:de:26:38:e9:66:
         b5:3b:f8:a2:3a:45:4f:57:9e:d8:fb:3f:20:e7:10:af:f9:44:
         bc:1d:13:ca:8e:28:72:60:6d:72:35:ea:aa:b9:f5:54:b0:c8:
         d8:46:8d:51:94:6a:67:f1:2d:d2:a9:38:d4:5a:16:82:85:2c:
         c1:9b:9f:6c:15:a5:47:34:04:3b:0c:16:8e:93:31:0b:d3:6c:
         a7:d1:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:28 2026 by rpki-client