This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/wPgYPiDr5PacOzMcxjUrLag7rDc.roa
File:                     wPgYPiDr5PacOzMcxjUrLag7rDc.roa (raw, json)
Hash identifier:          pfHB76KO9hvVf6IFcVhHKiZqk6rqqvt794vMshu0eVM=
Subject key identifier:   C0:F8:18:3E:20:EB:E4:F6:9C:3B:33:1C:C6:35:2B:2D:A8:3B:AC:37
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1368
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wPgYPiDr5PacOzMcxjUrLag7rDc.roa
Signing time:             Fri 06 Feb 2026 01:08:18 +0000
ROA not before:           Fri 06 Feb 2026 01:08:18 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.72.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4968 (0x1368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:08:18 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C0F8183E20EBE4F69C3B331CC6352B2DA83BAC37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:76:d7:de:95:ab:bb:3c:66:46:91:b7:58:
                    46:60:9c:9c:09:fa:1f:4c:40:f0:12:55:02:cc:15:
                    f3:2b:6b:c1:3b:1d:fe:93:69:3b:d8:37:ff:90:60:
                    7e:c0:c4:df:ba:da:73:8c:a2:79:58:f9:f6:ce:41:
                    9d:b9:d9:08:da:16:f4:38:cb:2a:33:fc:cb:44:18:
                    73:a3:94:e8:ee:ad:2f:31:9f:1f:3e:fd:ef:94:0a:
                    8d:a0:6b:ff:95:54:6f:63:1f:64:09:22:fe:1c:ca:
                    fa:b1:3d:37:0f:f8:88:da:b6:be:18:fb:d8:11:59:
                    53:4b:1c:43:d5:2b:49:2f:50:89:51:83:10:a1:1a:
                    40:7c:ef:3b:59:67:e6:71:cd:d9:64:a8:98:9e:3f:
                    e8:b3:a5:0f:d7:46:df:b4:c9:8e:b4:a8:46:c3:60:
                    0c:26:8f:9b:ff:cb:e0:27:fd:e3:20:1d:4b:7e:cf:
                    56:cb:a6:d5:17:90:54:5b:c3:6c:ee:e9:78:8a:c2:
                    25:b6:fb:3b:41:af:9b:b5:5e:08:98:ba:53:e2:b4:
                    80:1f:24:7e:f3:4e:97:8b:fe:e1:3a:6f:94:fa:ed:
                    f6:c6:5e:e2:27:a2:dd:98:e7:c1:6d:3d:a4:c3:1a:
                    cc:11:98:96:ae:a5:e4:84:4f:e4:55:9b:ee:ab:69:
                    57:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F8:18:3E:20:EB:E4:F6:9C:3B:33:1C:C6:35:2B:2D:A8:3B:AC:37
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wPgYPiDr5PacOzMcxjUrLag7rDc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:b0:9c:63:25:0e:73:54:cb:11:74:b7:fb:53:7f:b1:e9:12:
         0a:f3:32:15:23:29:e1:dd:3f:f9:20:13:da:13:ac:7a:84:51:
         21:0d:e8:2a:b9:d0:49:aa:d0:35:3f:84:9c:d9:8a:ed:fa:9c:
         7a:f2:62:9d:c2:72:b6:29:7f:21:dd:b5:03:a5:5d:b8:c2:ef:
         d2:8c:9c:3f:ae:cf:44:dc:85:70:f8:16:22:71:d7:9d:5c:6f:
         48:4c:2f:0b:a0:95:63:26:11:93:91:a9:99:e2:1d:8c:11:4a:
         28:b5:aa:29:f0:b1:80:70:89:7a:3f:a4:15:37:98:59:39:ab:
         c4:4e:e1:a1:12:ca:b8:53:e7:c5:0a:48:ee:7a:d5:fe:64:98:
         c2:c1:81:f0:94:3a:0f:6e:0c:5d:fa:f8:8b:11:c7:b2:94:e2:
         eb:f7:36:4c:e1:b6:95:db:c6:35:ef:56:60:62:82:7b:29:d7:
         b1:c8:62:74:b1:5d:0e:ed:67:f2:63:8d:70:7a:f9:cc:b0:04:
         c2:8a:15:f2:3f:2d:aa:83:fb:3c:8a:6e:e9:d3:57:22:08:6c:
         c7:f2:a0:ba:ac:f5:a1:46:31:94:7a:c4:32:f4:0e:7c:33:23:
         38:a9:e7:33:49:45:dc:8b:a0:d3:40:27:4b:02:a1:f5:9f:58:
         47:d2:73:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:51 2026 by rpki-client