This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/vsnW37NVwwP0rtppanq0xgTEBQo.roa
File:                     vsnW37NVwwP0rtppanq0xgTEBQo.roa (raw, json)
Hash identifier:          xLMaCh9++Qxj2BHp5ew9TDGhaAwaA2w3aTZgXng+ZpM=
Subject key identifier:   BE:C9:D6:DF:B3:55:C3:03:F4:AE:DA:69:6A:7A:B4:C6:04:C4:05:0A
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12F4
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/vsnW37NVwwP0rtppanq0xgTEBQo.roa
Signing time:             Tue 03 Feb 2026 08:59:36 +0000
ROA not before:           Tue 03 Feb 2026 08:59:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.70.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4852 (0x12f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:59:36 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BEC9D6DFB355C303F4AEDA696A7AB4C604C4050A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:83:48:fd:00:99:c1:7e:f8:6b:05:9a:94:
                    f0:41:57:28:e7:8a:96:ce:fa:6c:08:6e:7f:0c:4c:
                    d2:3d:33:8c:a1:22:fa:fa:11:a7:6f:40:07:cc:6c:
                    84:ba:3b:3b:67:e7:7a:08:cf:12:b0:de:0e:c4:78:
                    2c:79:75:e8:77:4b:53:7f:2d:be:95:c0:b0:e2:9b:
                    fb:7d:a7:f1:51:63:8f:35:59:66:19:28:1e:dc:0f:
                    ff:5d:7a:5f:68:bc:f9:c4:58:52:c4:8f:f6:60:e9:
                    5e:03:06:b5:7c:34:32:92:c1:81:9a:73:a8:eb:bc:
                    75:01:90:96:23:63:86:df:f1:c3:23:3e:06:1a:a1:
                    21:af:1a:a3:77:ee:06:cc:37:4e:80:ce:59:b5:8b:
                    29:c9:d6:29:6b:78:e1:b9:1e:fc:7b:49:c6:c4:81:
                    22:77:cb:1c:c5:44:c5:10:8f:54:60:98:af:95:57:
                    32:5c:86:28:34:7f:c4:04:30:e0:e4:8c:f9:d9:7a:
                    44:80:7d:00:96:58:f6:8f:d5:a2:d4:0e:77:d6:7c:
                    74:7d:b0:b5:68:4c:27:f1:73:7b:0d:78:82:ae:56:
                    d2:fe:69:bb:bd:cf:c1:f5:c3:4f:dd:e7:2e:64:9b:
                    d4:a9:90:e8:b4:4d:2f:b8:b6:7a:16:4f:52:11:22:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C9:D6:DF:B3:55:C3:03:F4:AE:DA:69:6A:7A:B4:C6:04:C4:05:0A
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/vsnW37NVwwP0rtppanq0xgTEBQo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:e1:4e:56:bf:9e:5e:3e:cc:8b:64:43:e4:4b:93:20:e0:
         9f:63:c7:67:4d:0c:6a:d4:f2:ff:51:c0:1e:84:22:a7:5b:90:
         24:b7:c5:51:a5:46:bd:d5:7b:57:ae:44:63:5d:f3:e4:9d:40:
         09:a1:6c:27:4f:89:8e:2c:ab:4e:d6:83:fe:96:77:e8:53:95:
         e0:b6:df:41:34:48:1a:eb:17:e3:5e:d5:d8:0c:3f:c1:73:88:
         63:b1:09:ee:76:df:ff:f4:5d:0e:19:cf:5a:3a:ed:62:6f:78:
         59:66:ac:93:3c:c8:45:21:a2:4e:96:af:16:14:24:37:df:93:
         a5:1e:a4:24:d9:a5:90:ee:28:51:4a:96:27:2d:d1:a3:a1:15:
         7a:64:13:44:60:1c:95:a8:26:8d:8b:dd:a8:93:de:50:7c:38:
         0b:95:55:d9:21:5f:cf:9d:aa:ea:9f:91:7f:e0:27:ff:96:03:
         b1:cc:25:1e:20:c6:8f:32:ba:ae:d3:0a:6d:cf:e1:56:d3:36:
         cf:33:fc:24:62:6c:e8:56:94:d0:35:17:bf:23:57:70:52:2f:
         6c:d3:36:13:7e:1b:13:07:22:2e:0d:fb:98:00:0d:8a:79:69:
         2c:93:5d:5c:7c:d2:ad:7a:8b:93:8c:cf:2f:f8:ef:88:c8:f6:
         61:c2:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:54 2026 by rpki-client