This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/w_arfek3HzKWJtDLk0Tv5kRGnls.roa
File:                     w_arfek3HzKWJtDLk0Tv5kRGnls.roa (raw, json)
Hash identifier:          32uwXDD/XkOEwMWFOIBoDhTdBsnOO+z3UaBNEstIFZs=
Subject key identifier:   C3:F6:AB:7D:E9:37:1F:32:96:26:D0:CB:93:44:EF:E6:44:46:9E:5B
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1253
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/w_arfek3HzKWJtDLk0Tv5kRGnls.roa
Signing time:             Tue 03 Feb 2026 03:20:15 +0000
ROA not before:           Tue 03 Feb 2026 03:20:15 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        203.64.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4691 (0x1253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:20:15 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C3F6AB7DE9371F329626D0CB9344EFE644469E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:ca:e5:97:17:8e:22:7d:d6:67:7c:46:5c:
                    49:4b:01:1f:07:20:79:aa:82:d8:d8:ed:df:62:cc:
                    d2:ea:ac:15:b6:cb:52:26:30:07:87:3a:bd:93:96:
                    ea:ba:24:10:50:17:14:45:d5:cb:a0:ac:19:4e:53:
                    88:e0:2e:29:30:29:0c:93:f4:81:cb:8b:a9:80:a4:
                    a8:bf:e7:62:39:29:71:b9:41:67:7c:49:b7:34:a7:
                    fe:24:5d:17:d0:34:1f:97:79:ca:0f:c7:12:e7:9f:
                    9a:c7:df:46:3b:f7:03:4f:6d:ff:ce:9b:c7:c6:69:
                    63:cf:bc:4c:1b:b5:bd:85:c3:4a:aa:6e:46:a2:fe:
                    35:a7:ec:56:64:44:e3:6b:ac:c6:6e:28:d5:f0:2a:
                    f1:27:0a:5a:70:f8:97:58:25:f6:3d:93:40:43:a0:
                    b1:ff:4d:34:de:33:a4:a3:ef:d3:59:da:59:24:95:
                    25:34:09:a5:f2:20:20:3d:9d:d5:33:40:99:ad:ba:
                    99:0d:ae:63:93:eb:f0:55:db:46:c2:d5:80:ff:cc:
                    96:c3:e3:1c:0e:da:87:d3:52:be:07:05:1a:5f:30:
                    ce:75:58:41:1e:aa:aa:f4:fc:9b:ae:60:76:88:15:
                    19:22:b2:5a:d8:c3:f4:16:c3:9b:19:16:9c:ba:e0:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F6:AB:7D:E9:37:1F:32:96:26:D0:CB:93:44:EF:E6:44:46:9E:5B
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/w_arfek3HzKWJtDLk0Tv5kRGnls.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:28:cc:ec:a6:00:8f:0d:1e:7d:43:41:f8:af:ad:76:6e:ee:
         73:c1:60:3d:e7:d3:4a:b7:fa:1c:d5:94:5b:6c:9e:51:ce:e9:
         ec:e6:59:90:cb:e6:7e:6e:55:21:77:a0:85:ab:d5:01:c5:49:
         c3:c3:ae:97:aa:5a:a3:7e:f0:b7:9a:9f:07:14:6f:b1:a7:fa:
         00:f3:64:44:b9:33:63:a2:d4:32:c0:80:36:dc:74:e0:16:dc:
         be:a6:cc:84:ea:7b:18:6d:4d:51:15:51:8d:3e:96:1c:75:b5:
         1e:aa:92:e3:16:e9:27:4a:d4:e7:87:9c:ea:87:a6:0a:8b:48:
         9d:7f:cc:61:6c:b5:ff:a0:6e:58:5c:59:b3:93:7b:4c:9a:4d:
         94:73:1c:67:a2:ed:95:67:ea:95:e7:9e:fd:4c:98:fc:76:ad:
         82:20:ee:9b:e9:4f:dc:9c:cd:91:16:9e:cc:96:c1:9b:8f:fe:
         99:73:af:84:18:e2:eb:1d:36:4a:91:c6:c3:db:ba:f1:ec:7b:
         64:55:dc:62:4c:5f:82:e0:71:7f:50:c2:dd:4a:8e:32:d0:02:
         06:e6:36:dd:81:dc:3c:93:f1:3b:f2:67:1e:bb:fa:4e:29:e3:
         c3:38:df:09:2f:95:ce:7c:79:7d:b4:6e:a9:a8:c1:41:ae:f1:
         8d:af:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:23 2026 by rpki-client