This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/va6eX2NfZ97wYE6fN1KfxdFTl8c.roa
File:                     va6eX2NfZ97wYE6fN1KfxdFTl8c.roa (raw, json)
Hash identifier:          fZQF2r33yHaTHxY+vjx1FaDYOMkWwHVuxJGXZY1RZpU=
Subject key identifier:   BD:AE:9E:5F:63:5F:67:DE:F0:60:4E:9F:37:52:9F:C5:D1:53:97:C7
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1140
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/va6eX2NfZ97wYE6fN1KfxdFTl8c.roa
Signing time:             Tue 03 Feb 2026 03:14:08 +0000
ROA not before:           Tue 03 Feb 2026 03:14:08 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        192.83.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4416 (0x1140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 03:14:08 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BDAE9E5F635F67DEF0604E9F37529FC5D15397C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:da:1d:19:9c:d2:71:6f:44:a2:eb:57:5c:59:
                    fe:1c:e5:b7:7f:f4:71:b7:df:3d:0b:89:58:ec:2a:
                    a0:e7:25:7c:8e:06:35:43:fb:82:ea:83:b5:c9:ba:
                    1c:ff:7e:d6:ea:68:ff:b8:34:7f:46:ea:5d:e9:c1:
                    45:ed:0c:6a:13:df:f0:d4:20:39:0f:9d:d5:04:d1:
                    6d:69:bd:79:9a:bb:f4:2b:66:56:ee:26:9d:01:6c:
                    94:b6:48:bb:bf:a6:53:4d:b1:60:5b:24:eb:5c:be:
                    ee:b7:e5:fe:1c:0c:71:97:ff:54:ac:3f:ee:b3:94:
                    ee:d0:87:38:aa:96:0d:76:df:71:59:8d:0c:d8:08:
                    5e:14:db:e6:20:f7:74:02:7b:7a:3a:03:c7:a0:ff:
                    a3:62:18:86:ad:bf:b4:79:c2:50:f5:6c:57:3c:d6:
                    c9:78:e2:e6:de:fd:e5:82:58:95:8a:df:8c:47:83:
                    47:d0:b1:80:f4:ac:c4:58:9e:a9:33:74:48:d9:eb:
                    5a:78:95:9f:69:c6:5e:93:c7:8f:6c:47:b4:20:83:
                    ed:37:ee:f8:07:35:1d:38:ab:8b:68:1d:76:3b:f2:
                    9f:23:bc:db:35:29:53:7b:68:8e:25:1f:e6:f6:08:
                    c8:96:28:7c:89:4a:28:60:d9:b9:4c:58:e3:f3:0a:
                    d7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AE:9E:5F:63:5F:67:DE:F0:60:4E:9F:37:52:9F:C5:D1:53:97:C7
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/va6eX2NfZ97wYE6fN1KfxdFTl8c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:69:a6:99:a3:12:69:98:4a:15:b7:11:ce:fa:fd:06:89:
         34:1a:8c:a1:cf:9c:81:b4:3e:e3:cb:ec:02:34:0d:3e:b6:ea:
         95:8d:cc:f8:3f:47:18:8c:a4:45:e9:b4:1e:44:61:e5:1c:be:
         87:ad:48:05:7e:d0:e1:31:b4:fa:8f:e7:40:b6:dd:02:8e:2b:
         6e:53:52:2b:59:b6:af:11:f6:1f:e9:fb:03:42:f5:b6:d9:8b:
         ad:da:7d:73:25:1a:7d:f6:41:0f:44:6f:ef:a9:d4:e8:7a:77:
         25:0a:2a:31:ef:7e:11:48:f0:24:dc:1f:8b:0b:32:86:ce:82:
         fe:b9:e7:19:93:cc:ae:9d:d6:c2:97:34:37:9b:fc:21:24:e2:
         27:14:84:7b:6e:2b:dd:76:c3:f0:78:0d:50:80:26:ab:39:3b:
         86:da:e3:03:be:c5:95:22:74:f9:43:b3:01:43:6c:26:d9:2f:
         83:68:11:c0:11:43:0b:5a:1f:b2:5c:03:bf:93:37:3c:b8:9b:
         41:2d:93:96:ae:70:9c:14:12:07:7a:84:06:35:72:56:4f:e1:
         a6:72:75:7e:da:19:ef:a7:6d:e1:39:93:23:71:95:78:f8:86:
         c5:25:14:e4:7f:ca:79:bf:7d:12:0c:f7:3a:97:27:b5:0a:e0:
         82:92:e4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:37:46 2026 by rpki-client