This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/up1oSU9zrFz_-Nc2_J0EjtvBKLQ.roa
File:                     up1oSU9zrFz_-Nc2_J0EjtvBKLQ.roa (raw, json)
Hash identifier:          ABRsW2CumIB8KvYqZwrVpdN41N9HpVMQymeNvzbvDz0=
Subject key identifier:   BA:9D:68:49:4F:73:AC:5C:FF:F8:D7:36:FC:9D:04:8E:DB:C1:28:B4
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       139C
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/up1oSU9zrFz_-Nc2_J0EjtvBKLQ.roa
Signing time:             Fri 06 Feb 2026 01:12:41 +0000
ROA not before:           Fri 06 Feb 2026 01:12:41 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        210.70.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5020 (0x139c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:12:41 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BA9D68494F73AC5CFFF8D736FC9D048EDBC128B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:69:61:8e:cd:d8:be:8f:d9:1f:d2:9e:3f:
                    68:ce:51:a5:ce:df:55:07:d4:bf:e7:23:93:9d:58:
                    c8:dc:3b:ca:be:62:d2:d5:0e:a3:3e:fc:08:14:38:
                    b6:65:6d:06:0d:3a:66:e8:1d:f8:f2:8e:72:d3:c5:
                    37:23:89:ae:0c:55:95:09:e1:bd:ce:50:3f:99:1c:
                    4c:2e:ee:d2:43:45:fb:94:f7:a0:b0:47:56:1a:63:
                    89:67:f1:7b:6f:cd:ac:c6:06:d7:6a:2d:c9:8b:a6:
                    84:ff:0f:99:36:38:eb:cb:fb:c6:dd:21:1f:19:ae:
                    47:91:e1:85:8f:92:c9:b9:99:f2:21:82:f3:2c:2d:
                    f6:ba:25:6c:6c:fe:1b:94:c9:b4:97:e4:0b:2d:e5:
                    f4:33:cd:db:00:d5:0e:ba:95:02:e4:8e:f3:b6:9f:
                    ad:bd:5f:e4:25:db:56:fe:b0:26:44:9b:c4:64:7a:
                    93:af:49:e6:a5:59:83:49:85:b3:7b:f9:17:60:9a:
                    79:12:fe:1a:47:75:51:5f:42:3c:e4:4f:5c:a1:14:
                    0b:9b:37:12:4a:37:f8:1f:a7:7d:06:af:74:95:f0:
                    05:ac:9b:2d:d6:a5:cb:82:fe:fd:25:7f:6a:33:87:
                    f1:c5:63:59:f0:3e:5d:69:77:b8:fe:4e:6f:d6:d3:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9D:68:49:4F:73:AC:5C:FF:F8:D7:36:FC:9D:04:8E:DB:C1:28:B4
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/up1oSU9zrFz_-Nc2_J0EjtvBKLQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ce:66:af:62:b8:94:2f:5e:48:5c:e2:dc:66:f4:e8:2c:7d:
         e2:f0:56:50:e5:91:1b:ee:e6:7a:98:3c:5b:69:0e:dd:63:d3:
         ca:df:f1:b4:9d:1e:62:3c:b8:00:0c:25:5d:c8:98:d1:5d:3a:
         69:4d:f6:3d:87:a7:aa:b0:97:2f:08:11:3c:e9:06:6a:61:cb:
         e4:5f:44:ee:12:2a:37:35:cd:3e:d8:0d:09:36:c4:ed:bb:b5:
         c0:5a:8c:fb:f6:72:f7:ed:ea:94:52:4b:1b:9c:47:f8:a6:e3:
         a0:30:8d:b5:1f:9d:61:f0:f7:3c:17:8e:8d:ca:db:50:78:09:
         96:a5:b9:e9:2c:ad:0e:6e:8f:25:74:b6:4b:e7:a7:a7:bc:12:
         83:5e:91:2c:f7:6d:21:ae:99:e9:b8:94:4c:6e:f6:8d:df:6a:
         55:5f:3e:44:03:4f:92:a6:b3:90:07:ed:d6:6c:6e:9c:fc:a0:
         28:30:9d:76:29:8f:9a:be:e6:6d:7b:b5:b0:d0:d2:15:58:0f:
         92:09:49:e3:a2:a5:93:0a:07:7e:ef:b6:3e:c1:a3:f0:d0:b0:
         29:6d:9d:cb:3c:82:c5:52:35:8a:c7:06:91:2b:3c:6a:dc:8d:
         de:77:b3:ff:c9:de:64:e8:e1:0d:60:37:4b:a3:85:2d:9c:f2:
         f1:c2:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:25 2026 by rpki-client