This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/xQMQKuang-WMYJmPDS63CQZ_9eI.roa
File:                     xQMQKuang-WMYJmPDS63CQZ_9eI.roa (raw, json)
Hash identifier:          B8AUpADlNa0i3is+9TZ3KHCu7ThhDcIRxkfCVcKbhKI=
Subject key identifier:   C5:03:10:2A:E6:A7:83:E5:8C:60:99:8F:0D:2E:B7:09:06:7F:F5:E2
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       11A5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/xQMQKuang-WMYJmPDS63CQZ_9eI.roa
Signing time:             Tue 03 Feb 2026 02:29:53 +0000
ROA not before:           Tue 03 Feb 2026 02:29:53 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9916
IP address blocks:        120.106.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4517 (0x11a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:29:53 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C503102AE6A783E58C60998F0D2EB709067FF5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:04:70:f6:33:7b:d2:10:16:90:43:b4:8c:
                    cc:bc:5d:02:72:2e:66:69:2d:5e:58:fa:86:06:4d:
                    54:cb:7a:e1:e5:f6:7c:74:83:8c:ec:12:ee:ab:c1:
                    ff:63:bc:cc:d8:38:60:ad:11:a1:a3:cb:88:cb:14:
                    0b:9d:be:52:32:e9:d3:62:b1:54:2e:af:6d:2e:7a:
                    39:65:80:41:4b:12:9f:47:d6:7d:14:9f:a3:0e:1c:
                    b1:4c:61:0c:29:a1:c7:07:a1:93:b9:f4:21:cf:a3:
                    26:a6:40:76:d4:05:cb:79:a6:21:95:75:0a:f7:d2:
                    5a:23:f7:ac:26:69:d3:65:8f:86:19:88:52:df:59:
                    d1:14:d9:a7:33:a9:ac:fc:64:7a:e4:66:7f:16:60:
                    d6:e0:37:cd:4f:f1:72:48:1e:32:94:b5:3b:c2:1f:
                    6b:bb:54:68:a4:7b:16:3f:cd:dd:2e:1c:48:f8:98:
                    1d:13:4f:29:ab:15:b9:30:2a:12:40:4b:cc:54:0d:
                    c8:5a:ff:1a:a6:ed:42:8a:a6:1e:b9:0c:a2:3f:f6:
                    ad:f5:ac:ff:6b:af:7e:1f:5a:b0:c1:b5:fa:ff:75:
                    af:fc:ab:04:91:a6:95:a0:5d:54:27:ff:73:45:33:
                    80:fe:23:19:42:0c:71:96:11:cf:30:24:77:73:92:
                    ec:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:03:10:2A:E6:A7:83:E5:8C:60:99:8F:0D:2E:B7:09:06:7F:F5:E2
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/xQMQKuang-WMYJmPDS63CQZ_9eI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.106.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:f5:8f:f5:e0:48:07:b9:a3:05:ed:b3:9a:e4:f5:44:fd:
         1a:ef:59:95:f9:07:ca:f6:9d:8f:05:ab:e3:06:fb:0b:db:c7:
         d5:71:1b:82:9b:60:ff:49:e5:cf:cf:2d:bc:51:7d:39:49:0c:
         cb:a5:ea:2f:d8:94:fb:4e:9c:25:6d:9f:83:fe:77:63:15:87:
         a8:63:b5:0c:cb:4e:da:17:1c:4f:9c:8b:da:e2:e4:57:bd:39:
         4d:f0:bc:d1:bd:2f:7d:7d:bc:8d:99:07:a8:ee:d1:27:cb:61:
         f8:6e:60:ba:d3:14:e5:bc:c6:58:0c:7c:e5:82:b7:80:1d:87:
         96:d5:a3:5e:72:cb:af:0f:ba:75:24:ca:fc:44:ac:cc:ad:57:
         8d:40:8b:38:c8:72:8d:3d:4e:71:fa:37:3a:c5:fa:a7:d4:0a:
         f3:33:b0:e4:e9:16:0e:af:5c:3b:32:c5:dd:89:e1:8a:c8:a6:
         1d:fa:8d:b1:0c:46:1c:81:4e:36:93:f8:1e:4a:2d:4f:46:d2:
         e7:7f:a5:27:34:17:f6:18:ee:ca:f6:69:a8:48:a4:78:9f:6f:
         ba:5b:92:b9:6c:c7:34:6a:17:d9:70:74:42:b1:81:e1:f1:6a:
         8f:83:25:c8:82:25:9c:49:3c:e5:68:34:15:f8:c8:30:82:63:
         79:c5:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:28 2026 by rpki-client