This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/vcu3007bcx8zf_5wKiZuvyrziPk.roa
File:                     vcu3007bcx8zf_5wKiZuvyrziPk.roa (raw, json)
Hash identifier:          tNK8fhqxg1dgpZ9s4ntnDuw/UZ3XHbH/QGD5qKmujPc=
Subject key identifier:   BD:CB:B7:D3:4E:DB:73:1F:33:7F:FE:70:2A:26:6E:BF:2A:F3:88:F9
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       1148
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/vcu3007bcx8zf_5wKiZuvyrziPk.roa
Signing time:             Tue 03 Feb 2026 03:19:27 +0000
ROA not before:           Tue 03 Feb 2026 03:19:27 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        192.192.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4424 (0x1148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 03:19:27 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BDCBB7D34EDB731F337FFE702A266EBF2AF388F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:af:1f:2c:51:75:ab:d5:dd:33:b8:bd:51:
                    f3:e9:17:d2:fa:72:e5:86:aa:4c:d7:1c:ce:12:b0:
                    7c:0c:e5:92:5e:c9:e7:c1:2c:b4:0f:96:1f:60:7f:
                    ef:7c:fd:63:8f:58:b7:6a:46:e9:1d:71:3e:86:78:
                    46:dd:4d:eb:38:02:7f:9a:6c:d0:fd:29:dd:b6:a0:
                    98:e0:88:3d:d4:7f:95:b5:ec:5f:40:02:3c:03:4c:
                    fa:73:16:c0:49:bf:04:62:e0:58:da:a2:17:08:c6:
                    bc:42:fd:f3:13:09:3c:83:17:2d:e5:56:58:22:67:
                    d2:44:ea:25:f5:57:5c:37:b8:7e:74:2e:0e:d5:8f:
                    a6:84:d6:91:ce:32:c4:6b:85:63:4d:42:fa:1f:94:
                    99:e6:c3:b4:03:19:ee:07:9c:7b:99:72:92:fe:a3:
                    45:ca:2d:69:2a:54:1a:44:79:89:b1:ad:05:9b:82:
                    57:d4:fa:61:43:a6:84:b4:4e:c2:9d:8d:b8:5e:57:
                    d7:51:02:06:6c:bc:aa:5f:3d:07:03:97:d3:bc:31:
                    5d:07:c0:a0:39:4f:7e:53:8b:54:59:3c:55:f8:fd:
                    ed:2f:cb:1f:05:3e:51:3a:16:f9:5c:29:b7:ed:5b:
                    e2:2a:e2:36:7d:78:9f:56:30:92:9f:63:85:21:ad:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CB:B7:D3:4E:DB:73:1F:33:7F:FE:70:2A:26:6E:BF:2A:F3:88:F9
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/vcu3007bcx8zf_5wKiZuvyrziPk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:75:40:7a:8f:01:43:9c:9e:0e:57:55:78:2b:ab:21:17:
         38:72:2a:f7:28:0a:66:e2:f2:7f:0f:94:29:17:38:6b:31:4d:
         42:1c:66:0f:b9:39:1e:2c:4f:92:a5:90:db:6e:c2:b3:19:61:
         52:f7:ca:90:08:6b:2c:11:77:40:67:d5:58:d3:23:5e:b2:a3:
         be:66:bf:6c:fa:56:7f:e2:45:a8:a1:2c:fb:94:f4:82:9e:11:
         42:a9:ac:7d:16:c6:16:01:ed:9b:b7:e2:e1:93:bd:0a:c1:4e:
         75:57:f8:27:9b:4c:9a:d3:f3:4c:42:01:5a:02:ad:a9:e9:15:
         f9:e9:81:37:bc:a6:c5:31:68:18:07:10:be:4b:0d:f3:41:29:
         9b:17:f8:43:ff:bd:5d:63:e5:28:90:c2:f8:d7:fb:6a:fa:c1:
         d4:6d:47:f5:47:a6:93:71:51:2c:cf:5e:ff:8d:e3:6a:fa:7f:
         09:81:28:41:a0:05:c4:62:20:4d:4e:b1:8a:63:28:18:4e:c3:
         b9:89:18:c0:99:84:52:06:c8:bc:f8:f3:42:34:b8:b0:23:a0:
         84:83:d0:81:11:06:1d:5c:6f:93:d1:b9:17:40:56:ef:a6:0b:
         fe:eb:df:d8:1d:bc:ca:00:5e:16:e3:dc:cc:55:c7:1b:0f:d0:
         eb:59:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:42:57 2026 by rpki-client