This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/wIHlfja2X_iy4r50tpwELVDQOs0.roa
File:                     wIHlfja2X_iy4r50tpwELVDQOs0.roa (raw, json)
Hash identifier:          rlitUf3sWmRp5ZPeCwrvPMBzc5TfQcI9hjP9uGPdVYI=
Subject key identifier:   C0:81:E5:7E:36:B6:5F:F8:B2:E2:BE:74:B6:9C:04:2D:50:D0:3A:CD
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       10E4
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wIHlfja2X_iy4r50tpwELVDQOs0.roa
Signing time:             Tue 03 Feb 2026 02:31:57 +0000
ROA not before:           Tue 03 Feb 2026 02:31:57 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        140.133.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 19:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4324 (0x10e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Feb  3 02:31:57 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C081E57E36B65FF8B2E2BE74B69C042D50D03ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:12:59:d4:27:73:e8:e2:67:57:38:6e:25:
                    d7:98:d6:2c:92:c2:07:68:e0:d5:d7:13:a6:b4:fc:
                    20:73:0f:3c:21:09:7b:b8:62:35:2c:d5:31:19:86:
                    c6:0f:d0:bc:eb:67:c2:a6:f0:db:4c:3b:86:d1:ee:
                    c2:81:bc:37:17:3f:e2:a7:72:83:30:04:cb:de:0c:
                    6c:19:4e:52:35:6f:1e:89:b9:11:e2:f9:5c:d7:f8:
                    55:1a:4c:9c:da:d2:eb:6d:ee:0c:95:ee:16:c1:0b:
                    99:44:0b:cc:83:98:2a:19:df:a1:80:a1:53:e9:a6:
                    9f:ad:b7:fc:c5:6d:da:22:87:f7:9b:10:ef:95:11:
                    8f:35:72:fb:2d:e6:df:a4:fa:98:41:6e:e0:9d:0d:
                    8d:4c:0f:3a:4f:77:fa:9c:ba:4f:c6:88:ef:10:01:
                    8a:7d:98:d1:64:c1:cb:b1:eb:64:d8:9d:3e:68:a9:
                    d3:df:be:e4:a9:d2:f5:71:51:c4:58:20:c9:6e:35:
                    48:e9:17:b4:9a:4b:68:5e:62:48:cf:11:eb:c6:e2:
                    a4:88:35:9f:62:d6:99:16:1a:d8:7b:66:ec:d9:90:
                    0c:4f:26:a5:d8:1b:ee:d3:f3:5e:7a:60:c7:a5:e4:
                    a7:56:3f:e0:3c:a8:24:27:34:de:ac:cf:f0:dd:30:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:81:E5:7E:36:B6:5F:F8:B2:E2:BE:74:B6:9C:04:2D:50:D0:3A:CD
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wIHlfja2X_iy4r50tpwELVDQOs0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.133.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:b2:81:3a:4b:bf:c4:d6:e9:93:be:4a:a1:16:01:03:55:65:
         fe:b4:3e:7e:29:54:2e:b2:cc:58:72:3f:13:c0:29:25:68:c9:
         4b:95:5b:ae:0f:7c:0a:b4:97:fd:9a:2e:73:23:d1:85:24:85:
         06:6b:e7:61:21:9b:4c:a0:ba:cd:12:9c:6d:eb:1b:37:00:30:
         67:23:af:2b:72:44:43:46:4f:3a:a1:74:cb:6b:b5:10:99:91:
         b5:4b:e0:42:58:7a:df:18:f5:b9:4c:c6:16:41:63:d0:00:94:
         86:09:77:4c:46:2e:fd:ba:d2:45:30:84:d4:39:90:40:d2:9f:
         ac:e1:70:5a:dc:8b:ec:41:8a:1e:42:a8:c4:2a:fe:3f:c5:d9:
         a2:55:e1:d6:ec:6c:fb:c4:ed:9c:13:c3:13:23:e3:37:3f:88:
         e5:45:4a:1b:c7:fb:93:5c:ac:a2:14:c3:51:09:dc:22:e4:b9:
         77:52:14:4d:46:04:04:fd:5f:8c:95:fb:13:08:5c:93:06:24:
         d0:83:6b:b7:94:c6:db:aa:f3:81:98:66:78:22:f4:f4:1b:32:
         74:65:d2:b7:81:b9:94:80:b0:e6:4d:07:cb:57:19:19:c7:46:
         d4:5e:93:df:92:9f:97:fb:dc:bc:06:f4:56:57:dd:08:55:48:
         25:44:f2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 18:39:29 2026 by rpki-client