This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/uUqNZ1iXnHQYU1g65Nc56XIQH70.roa
File:                     uUqNZ1iXnHQYU1g65Nc56XIQH70.roa (raw, json)
Hash identifier:          yVQEiT5gJOl6wnJyV9f0UjRCLO/Tg96QGDAMWB8+S4k=
Subject key identifier:   B9:4A:8D:67:58:97:9C:74:18:53:58:3A:E4:D7:39:E9:72:10:1F:BD
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1364
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/uUqNZ1iXnHQYU1g65Nc56XIQH70.roa
Signing time:             Fri 06 Feb 2026 01:07:58 +0000
ROA not before:           Fri 06 Feb 2026 01:07:58 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.72.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4964 (0x1364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:07:58 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B94A8D6758979C741853583AE4D739E972101FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:97:27:74:ed:16:fb:46:e4:be:7e:38:62:
                    0f:7f:cd:8a:17:94:58:e9:ff:21:1f:6a:32:e7:ab:
                    80:9b:c9:a1:ad:20:d1:66:51:8d:e6:3e:89:56:f7:
                    2e:e2:7c:60:89:a2:71:e6:01:f6:2b:bc:1f:e8:5c:
                    fd:d0:f1:05:87:f9:77:5f:5a:84:65:03:23:86:97:
                    ce:fb:f2:88:5e:7d:7c:7b:10:d1:07:97:a1:37:ce:
                    31:e8:15:72:ab:93:52:6d:6d:be:8c:40:9b:0b:d8:
                    e9:0e:41:74:f1:9c:ab:51:57:62:09:18:0e:31:75:
                    d9:92:4c:67:b6:35:ac:4c:a6:60:9b:ea:3c:2a:ca:
                    af:1e:26:e2:c5:ff:9a:ab:2c:b2:a8:b4:3b:1f:60:
                    4e:aa:c2:2e:3a:eb:d0:ae:a9:cc:79:9b:bf:b1:b3:
                    ea:c3:8a:2a:e7:68:c5:3e:22:8a:e9:98:32:0e:a7:
                    54:1f:d2:73:0c:6e:34:93:82:f9:3a:10:bd:6d:70:
                    5e:9b:e5:69:20:16:1d:4c:17:f3:05:cb:64:48:42:
                    7c:60:85:e8:da:c6:3b:20:c3:b8:22:e1:d1:9e:c9:
                    11:2b:d8:6a:68:e9:72:cd:0f:b0:a1:2a:eb:d8:09:
                    ff:aa:3c:1b:6a:80:02:53:60:2b:be:ff:e8:41:40:
                    ba:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4A:8D:67:58:97:9C:74:18:53:58:3A:E4:D7:39:E9:72:10:1F:BD
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/uUqNZ1iXnHQYU1g65Nc56XIQH70.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:f9:a0:3f:68:a2:e5:18:65:6d:b4:7f:42:50:52:20:11:9c:
         d8:15:8a:a4:ed:ad:e9:95:d3:54:63:97:e7:33:c1:47:99:f2:
         c5:73:f0:76:81:cc:8c:c6:92:13:84:3e:5f:8d:c4:5a:78:cf:
         cb:af:4a:6a:36:df:bc:04:6c:dc:3e:08:c3:fa:d7:29:1f:66:
         34:7b:d5:6c:b2:24:9e:7a:af:81:b8:52:01:57:41:dc:b1:d9:
         77:75:0e:be:b3:b6:0d:72:19:fd:70:1b:75:e8:b6:de:e9:ab:
         07:16:cb:c8:06:cb:54:f6:53:ba:65:23:f7:0a:94:3c:28:3a:
         94:d6:eb:54:fc:b5:e2:61:6f:98:40:e9:77:14:f3:4d:c2:59:
         80:5a:74:9e:3e:14:22:78:03:ca:a6:61:55:3f:23:09:ca:2a:
         8d:d9:d4:d6:57:46:6a:94:5b:a2:c7:3d:b2:6f:81:39:4c:d4:
         fd:e5:45:a5:ac:07:e0:04:42:11:14:ea:2c:96:b4:b9:75:94:
         91:dc:0d:32:2e:3e:4d:ed:0c:37:7f:1a:d7:e9:ba:e5:be:8c:
         dc:0f:87:59:ab:a3:ab:03:3d:af:9a:b8:01:93:c1:32:6f:2c:
         be:84:45:04:82:f4:97:1e:36:8f:61:d8:c8:73:64:f9:05:b8:
         5e:1e:38:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:25 2026 by rpki-client