This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/wbRWj_R3c2OxmaGuiAv-UX2DX28.roa
File:                     wbRWj_R3c2OxmaGuiAv-UX2DX28.roa (raw, json)
Hash identifier:          UKU48Q7PHjsq3IWetHsrqy3AUvr0PxHCr2pYa2MQFxs=
Subject key identifier:   C1:B4:56:8F:F4:77:73:63:B1:99:A1:AE:88:0B:FE:51:7D:83:5F:6F
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12F6
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wbRWj_R3c2OxmaGuiAv-UX2DX28.roa
Signing time:             Tue 03 Feb 2026 08:59:50 +0000
ROA not before:           Tue 03 Feb 2026 08:59:50 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.70.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4854 (0x12f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:59:50 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C1B4568FF4777363B199A1AE880BFE517D835F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:8b:b0:4e:8f:8e:c7:6c:71:43:0b:7b:6a:
                    2f:95:cf:29:98:f6:be:32:14:63:2f:27:47:ad:c4:
                    6f:d3:4d:18:34:16:3a:b5:6e:e9:54:18:7d:3f:ee:
                    a1:a3:d5:e8:72:8a:ab:b7:8f:a0:f5:71:95:9b:e5:
                    13:cc:54:bd:7a:63:37:e4:23:c1:69:35:c1:59:e5:
                    4f:6a:9c:59:50:42:92:4f:f5:82:3a:78:2b:2c:a2:
                    e9:f0:94:25:f2:17:c2:36:c2:66:f7:22:16:30:d3:
                    48:8f:bc:73:99:3d:9d:17:63:2d:c7:33:02:cf:1c:
                    cc:26:51:40:23:03:b6:60:1c:7b:a2:26:48:ad:58:
                    c2:1a:09:13:67:2d:5f:ae:13:f5:0b:9f:96:3a:5e:
                    74:ec:ab:0a:3d:6c:e8:90:72:c9:af:18:a8:70:d2:
                    d1:1e:c8:da:0e:38:50:56:e6:1e:b2:2e:5d:0b:c8:
                    c4:54:81:08:ff:c4:2b:28:93:49:14:1a:db:ef:6b:
                    23:44:58:61:a0:f1:34:72:23:71:f5:df:ce:9b:bc:
                    80:ac:aa:fd:ae:ed:80:db:e7:49:d8:96:1f:01:f1:
                    31:61:9e:e8:8b:83:68:a0:fa:d3:93:81:35:0f:e9:
                    ab:ad:6f:72:5a:9f:19:db:e9:90:4b:55:b8:23:8b:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:56:8F:F4:77:73:63:B1:99:A1:AE:88:0B:FE:51:7D:83:5F:6F
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wbRWj_R3c2OxmaGuiAv-UX2DX28.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.70.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b1:c0:69:b7:38:c9:68:97:d9:ca:84:b3:be:01:43:9e:90:
         35:20:8d:79:fc:1e:79:4a:5e:ba:e7:67:9e:21:6d:e8:09:f5:
         ea:df:8c:bc:0b:b1:8b:a5:fd:cd:cd:62:8e:c1:87:75:61:f0:
         5d:53:cd:9b:51:d0:da:99:e2:fb:a6:17:3c:fb:2b:7b:79:70:
         8c:5c:68:83:64:be:de:42:f7:4e:3e:b2:21:31:3c:f9:61:db:
         98:1d:c1:a1:0e:03:64:27:68:f0:2d:df:e0:64:74:99:87:b8:
         bd:2f:cb:ec:df:4e:dc:1e:48:30:47:bc:ff:cf:cb:26:f9:43:
         9f:66:3b:4d:d8:fe:03:b0:65:b4:37:cf:c9:64:32:ca:c9:22:
         20:d4:14:0f:dc:61:49:9e:6c:d3:a7:7b:35:5d:d5:d0:02:87:
         dc:06:1c:41:75:83:82:dc:48:dc:5a:4d:61:62:5d:95:30:1a:
         5d:62:f1:9f:62:c8:2c:21:9a:f2:80:5e:83:fa:26:4b:9c:73:
         b5:d5:40:f5:0e:62:62:1c:a8:21:8b:59:86:d4:b2:68:03:5d:
         61:dd:71:2b:9f:35:c7:d5:17:c1:ff:09:24:56:ee:f6:02:d6:
         62:1a:31:57:34:02:d2:4e:a7:fd:3b:78:a1:4d:46:5f:43:5e:
         9b:c0:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:54 2026 by rpki-client