This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ucAO_5XUETCkCkHixlOB51mDW_c.roa
File:                     ucAO_5XUETCkCkHixlOB51mDW_c.roa (raw, json)
Hash identifier:          XQvmG4YH6CYScCq/htkURcxFWtiG23xJTKIr5rl3LYA=
Subject key identifier:   B9:C0:0E:FF:95:D4:11:30:A4:0A:41:E2:C6:53:81:E7:59:83:5B:F7
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1370
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ucAO_5XUETCkCkHixlOB51mDW_c.roa
Signing time:             Fri 06 Feb 2026 01:09:01 +0000
ROA not before:           Fri 06 Feb 2026 01:09:01 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.72.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4976 (0x1370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:09:01 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B9C00EFF95D41130A40A41E2C65381E759835BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a3:9f:9f:28:fe:59:21:25:21:d5:f1:53:6f:
                    4b:fb:02:a3:1d:2d:fb:d8:b5:6a:0a:f9:a8:cb:da:
                    d7:80:9b:7e:9d:b0:b6:a9:e1:8c:32:22:55:6f:69:
                    28:2b:88:32:56:5a:cd:5f:d8:8e:e4:0a:57:4f:85:
                    e9:71:0d:d8:4f:33:34:bb:fc:2b:11:1d:8a:7b:57:
                    c7:ce:d3:fe:ff:50:15:e3:15:a8:79:fd:4e:69:b6:
                    7d:19:df:ca:d7:91:5d:4a:03:71:13:22:e6:81:36:
                    37:12:be:51:75:a5:b3:66:09:b8:ef:53:ef:b9:18:
                    cc:cb:d5:f1:4f:e8:28:3b:08:df:92:33:43:dc:08:
                    a5:07:9f:96:29:f0:11:0a:01:2e:8f:53:75:8b:f7:
                    d6:85:24:4b:be:14:8e:08:f5:4f:78:29:a5:9a:dd:
                    aa:25:3c:77:14:dc:aa:46:71:4e:5c:f3:da:bf:12:
                    0c:ac:77:25:62:54:8e:70:6a:5a:e9:f6:0e:a9:52:
                    b5:d9:40:72:ac:fb:3e:06:8d:7c:68:47:17:cc:6c:
                    11:f6:4f:af:91:76:77:4f:3e:36:70:d1:34:20:e2:
                    6a:4d:e4:34:6e:27:9e:88:22:b0:0c:17:d8:9e:1e:
                    49:ab:ea:ee:6e:e4:72:fc:33:8c:d8:d4:7b:6b:25:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C0:0E:FF:95:D4:11:30:A4:0A:41:E2:C6:53:81:E7:59:83:5B:F7
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ucAO_5XUETCkCkHixlOB51mDW_c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:10:2f:96:27:26:37:8d:30:1a:70:a5:3c:af:eb:11:79:93:
         8f:4a:9e:d1:36:73:13:79:81:c7:1e:36:12:67:d7:cb:bc:4b:
         00:8a:1a:9e:26:cc:e9:6d:b3:ca:f9:56:0a:75:2f:66:78:cb:
         14:3a:f5:e0:11:9c:51:df:16:16:77:df:f7:d6:2e:3b:b5:7a:
         ee:e4:9b:3c:e8:7e:5e:c5:a9:53:c0:0d:3c:12:ed:be:a4:5e:
         aa:5b:56:ad:11:42:c6:d6:07:59:3c:2a:a8:0a:f2:56:8f:1b:
         93:56:70:62:32:a3:bd:f1:c8:fa:bc:53:9c:2c:df:16:1b:fa:
         e9:0a:4c:ea:c6:0d:a8:75:0e:75:52:32:e6:6b:60:06:75:a9:
         bb:49:40:bf:f1:75:b7:d8:ea:14:65:43:68:08:ad:4b:0c:53:
         11:c2:a6:00:a2:eb:59:2c:57:15:bf:e2:8f:a8:5e:e2:76:47:
         94:cb:61:08:4b:64:5d:63:85:86:fe:61:94:21:7b:15:0e:f3:
         ed:60:ae:61:ab:1f:80:87:6a:62:de:65:3a:37:88:44:d2:07:
         79:33:44:59:82:d8:b6:b1:90:32:cd:5c:b0:f6:a0:87:9e:be:
         c8:ac:9e:89:62:aa:fc:bc:86:0c:1b:74:bc:d1:23:fb:9c:94:
         1a:d3:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:27 2026 by rpki-client