This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/yMIkABBcJAzbwyjSWJ64B_BqU7g.roa
File:                     yMIkABBcJAzbwyjSWJ64B_BqU7g.roa (raw, json)
Hash identifier:          o0bMkSr7ndwiFSd2V7gcJdkdcEsWQg/NgVjefMBvH0s=
Subject key identifier:   C8:C2:24:00:10:5C:24:0C:DB:C3:28:D2:58:9E:B8:07:F0:6A:53:B8
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1316
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/yMIkABBcJAzbwyjSWJ64B_BqU7g.roa
Signing time:             Tue 03 Feb 2026 09:03:42 +0000
ROA not before:           Tue 03 Feb 2026 09:03:42 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.71.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4886 (0x1316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 09:03:42 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C8C22400105C240CDBC328D2589EB807F06A53B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:c3:f0:f1:80:7e:22:5f:e0:6c:9a:3f:a6:
                    87:61:cd:c5:83:3e:20:38:34:56:90:68:6d:ba:2e:
                    52:7b:e7:90:ab:65:02:6e:57:37:15:8e:ff:b9:91:
                    3d:5a:44:b2:83:43:7b:5c:bb:41:49:79:1c:8f:59:
                    a3:f7:85:f2:83:62:cf:af:e3:7d:7f:f1:c7:8f:0e:
                    48:e1:e8:ee:94:05:90:f3:c6:f5:f6:c7:80:33:e4:
                    d4:b7:5d:ec:4d:57:ff:45:a4:31:1d:54:33:a2:90:
                    28:89:fc:07:e6:bc:a3:c3:b1:e0:c9:12:3a:87:fe:
                    d5:1c:41:27:8c:da:e4:7a:75:31:2d:3e:17:8d:de:
                    07:11:d6:20:60:45:66:15:bb:2d:5d:5c:93:b9:8e:
                    12:ae:b0:19:d0:13:fe:48:e2:ac:aa:16:2c:32:5a:
                    c2:d2:b7:35:ee:e3:d5:b2:0b:4e:84:4d:29:a8:b5:
                    e3:e8:ad:63:90:0d:92:28:31:f6:81:7c:5f:0b:4c:
                    ca:0c:3e:a1:d0:cf:d9:21:63:f1:2e:8e:8e:d7:dc:
                    b9:27:ab:f7:06:04:b4:3a:85:a4:a3:3f:1f:87:69:
                    60:c9:b6:70:73:14:03:04:57:cc:63:1c:0d:6f:67:
                    bb:55:08:e3:38:c5:5c:b0:cd:c1:9b:71:74:c7:bf:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C2:24:00:10:5C:24:0C:DB:C3:28:D2:58:9E:B8:07:F0:6A:53:B8
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/yMIkABBcJAzbwyjSWJ64B_BqU7g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.71.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:33:47:b0:46:87:56:ed:08:29:06:86:a7:42:c0:23:3b:
         81:94:9a:32:f8:2b:f7:5b:b3:38:78:cd:96:d4:2f:3e:d7:97:
         ef:65:36:0b:03:53:88:e0:a6:f8:13:0a:23:40:82:ba:ab:0c:
         98:fe:d9:54:43:74:31:25:9f:ea:ea:73:69:29:b2:2c:bd:47:
         32:66:3e:42:8e:86:3b:b6:76:a7:f9:33:25:97:d1:6c:88:e7:
         c3:e9:eb:26:8c:b1:a0:c5:ca:47:d7:b5:1e:23:7c:c8:32:8b:
         55:a5:35:f0:01:80:38:90:09:cc:f2:6e:bd:a4:9e:ef:95:39:
         28:ed:3b:e8:51:79:fe:d7:ac:36:ff:a7:a1:fe:94:65:64:71:
         e4:33:f7:44:29:02:81:8b:1b:b4:ba:9a:b9:6e:92:e4:aa:9e:
         6e:69:52:45:e4:ed:7f:ba:6e:6f:b9:1a:20:d5:cb:51:61:9b:
         8e:92:41:a6:4f:5f:dc:16:01:63:af:50:51:02:c7:cc:26:90:
         3d:21:7e:c1:fb:1b:a0:2b:57:e5:6c:b5:50:a4:84:f0:73:ed:
         b2:ac:9a:df:28:ca:9a:fd:92:a6:9b:83:e5:3e:ce:36:e1:00:
         21:a5:c5:ae:9e:ba:bf:96:fa:eb:50:86:96:f5:72:03:88:d8:
         7f:04:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:29 2026 by rpki-client