This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/vlMR3v3bQDUpwWNfB-wDMx_yYO4.roa
File:                     vlMR3v3bQDUpwWNfB-wDMx_yYO4.roa (raw, json)
Hash identifier:          BEpJfNAKOqQY2Sg7o8CCyAlJwYhXyMfEpiVMyVzlIkw=
Subject key identifier:   BE:53:11:DE:FD:DB:40:35:29:C1:63:5F:07:EC:03:33:1F:F2:60:EE
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11D3
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/vlMR3v3bQDUpwWNfB-wDMx_yYO4.roa
Signing time:             Tue 03 Feb 2026 02:41:03 +0000
ROA not before:           Tue 03 Feb 2026 02:41:03 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        203.64.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4563 (0x11d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:41:03 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BE5311DEFDDB403529C1635F07EC03331FF260EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:e0:6a:24:51:29:77:d7:71:c3:a5:dd:0f:
                    e0:22:c2:a4:a6:12:4f:0a:84:0a:b0:05:cb:ec:0e:
                    34:21:69:25:47:9c:4d:45:56:e8:14:13:c3:32:91:
                    cd:93:7b:2f:f8:25:4b:4c:0f:05:d0:be:b4:0a:cc:
                    b2:a8:57:6e:fa:7f:e1:99:70:e5:55:2c:5e:38:e8:
                    34:5a:c1:e2:bc:e3:e5:61:43:5a:d9:30:ed:8d:a6:
                    68:a9:bb:a4:bb:8b:29:8b:2e:24:f0:db:80:05:13:
                    39:3d:df:f0:05:de:e5:f0:e6:96:fa:55:ee:ad:64:
                    19:5a:dc:13:36:97:2b:b3:1f:4d:b0:81:40:7f:1e:
                    08:96:6d:fe:ec:34:21:24:27:2e:3f:20:27:c6:23:
                    fe:e2:64:37:18:d1:01:7a:fe:36:65:80:c5:9a:f9:
                    32:40:e3:6c:49:34:2f:0f:98:79:42:d6:67:dc:4a:
                    35:c2:03:f8:3d:a1:93:7b:6c:eb:02:85:22:f5:4c:
                    a6:b6:00:7f:68:09:9b:a0:7c:bc:21:51:e1:0f:09:
                    eb:45:1b:6d:75:61:67:e1:b3:c1:13:ac:c3:00:45:
                    b7:33:35:9d:8c:8d:b8:eb:c6:73:06:3e:00:27:bc:
                    e8:e2:f0:10:76:19:c0:98:66:04:9f:9b:dc:1c:c1:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:53:11:DE:FD:DB:40:35:29:C1:63:5F:07:EC:03:33:1F:F2:60:EE
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/vlMR3v3bQDUpwWNfB-wDMx_yYO4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c1:bf:50:f1:9b:c0:fd:b0:a9:45:c1:39:40:76:6a:c6:3a:
         7e:5b:88:5b:6d:60:c7:9c:a5:8d:90:33:5e:e9:9e:4c:20:9d:
         ab:bf:61:e0:c5:21:92:de:5f:3d:42:31:11:65:91:48:6d:c3:
         c1:5c:7a:a6:bd:6e:23:ac:ac:60:3d:ee:05:d2:01:06:8e:83:
         64:51:d2:66:36:eb:9c:dd:6c:d2:34:49:53:63:4a:38:9b:17:
         dc:77:5f:09:3c:08:32:d7:f8:85:78:8e:ab:1a:93:0f:27:84:
         c2:c4:df:66:f4:ef:00:48:2f:76:51:c0:d5:fa:23:b2:50:78:
         f9:3b:35:83:9c:c7:3e:60:44:23:dd:59:3e:3f:84:06:a8:6d:
         c0:ad:79:83:9b:89:53:83:bb:1f:5e:d2:1b:d9:aa:10:75:7a:
         9c:b2:eb:31:1d:b0:08:9a:81:bb:df:c3:3a:f1:64:d5:5d:b1:
         ce:22:ba:dc:39:44:9b:8b:0f:29:3c:b9:1b:91:16:f4:9c:ee:
         40:36:61:57:79:59:35:a1:7c:09:1c:53:1e:26:62:c1:43:09:
         68:58:0b:5a:63:17:62:00:05:17:80:96:ab:76:ea:db:3a:47:
         4f:d6:7b:1b:85:86:4a:29:eb:dc:16:88:b6:e6:68:07:f1:a6:
         d4:50:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:27 2026 by rpki-client