This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/z4-6tbw7Le4H1na3PRniZRZYv4E.roa
File:                     z4-6tbw7Le4H1na3PRniZRZYv4E.roa (raw, json)
Hash identifier:          4/U4Bo5643JdhEUsqgxFgX2D+cqEWczbAy8BHq/8dHc=
Subject key identifier:   CF:8F:BA:B5:BC:3B:2D:EE:07:D6:76:B7:3D:19:E2:65:16:58:BF:81
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       125B
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/z4-6tbw7Le4H1na3PRniZRZYv4E.roa
Signing time:             Tue 03 Feb 2026 03:20:57 +0000
ROA not before:           Tue 03 Feb 2026 03:20:57 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17713
IP address blocks:        203.64.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4699 (0x125b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 03:20:57 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CF8FBAB5BC3B2DEE07D676B73D19E2651658BF81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:08:ac:46:aa:82:8e:00:6e:aa:3e:1a:fb:
                    a9:b8:66:32:bd:a0:e4:a4:8a:fb:bb:7a:52:1c:7a:
                    f6:75:01:b5:0f:d4:65:71:b3:98:b2:67:7f:0a:c3:
                    98:0a:3f:9a:e0:cd:f7:4a:78:51:d5:80:d4:cf:6a:
                    a4:d5:89:03:9c:ed:42:a2:c4:a4:dd:42:88:81:d7:
                    0e:50:23:81:d9:15:df:0b:76:aa:03:f3:f7:18:21:
                    2a:ba:fb:bd:a1:52:a1:d4:86:d2:72:aa:7f:1e:88:
                    a6:66:e6:50:08:11:aa:cd:fe:55:1e:d5:52:50:7e:
                    6b:b6:ae:9d:f8:4f:73:7d:d2:3a:a2:bf:bc:99:f6:
                    d0:71:f9:10:ef:4f:51:fa:9d:16:7e:c7:e9:df:b2:
                    cf:30:97:fb:75:67:2d:2a:8d:39:e0:5f:a0:e7:90:
                    56:da:db:58:7c:77:36:5c:61:94:65:ae:d7:d8:d7:
                    a0:21:22:dc:a8:28:60:04:eb:15:87:a2:06:e1:74:
                    91:78:0f:91:da:a0:86:13:c3:41:5f:4d:af:48:a2:
                    b2:e1:98:0a:46:51:ef:23:ec:9d:a1:52:ea:1c:fe:
                    94:2c:64:77:0a:d3:66:67:2c:40:f4:6d:c4:68:14:
                    c9:ec:b6:25:17:17:23:56:de:b2:51:1e:03:28:3d:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8F:BA:B5:BC:3B:2D:EE:07:D6:76:B7:3D:19:E2:65:16:58:BF:81
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/z4-6tbw7Le4H1na3PRniZRZYv4E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:b6:d7:f8:43:74:c4:30:3f:34:d2:ce:40:88:78:d6:6c:
         ed:54:99:8d:35:4b:29:87:f0:e3:5a:ab:a5:20:e2:bb:cb:bc:
         db:fb:dc:bd:e8:82:76:b7:e0:e7:57:a6:b9:d4:54:61:cb:11:
         ad:c7:c3:b2:60:4e:92:b2:97:5d:20:a0:58:95:9d:f6:31:33:
         d3:da:3d:86:1f:1c:9e:b8:3c:61:96:46:c5:b7:0b:a6:3c:79:
         55:ac:9b:80:f5:d8:84:f1:b2:9b:f8:7b:31:f4:39:fe:12:2a:
         8d:9e:b3:f4:7f:e1:c7:31:1c:8a:b0:be:cf:af:0e:ba:20:27:
         0d:0b:48:d3:b6:d7:e5:db:5e:82:c1:a6:9e:c0:b9:45:03:fd:
         7e:24:43:3f:91:b5:3e:dc:87:25:a3:3c:79:42:ac:ca:8b:15:
         7c:14:90:c0:7c:6a:95:6f:49:3c:c5:25:54:1a:c0:e5:63:f6:
         e3:49:4f:00:3f:c7:43:af:53:bc:5b:c8:84:01:63:8d:b3:05:
         47:1d:d1:65:91:b4:c7:f8:09:0e:85:23:d2:29:35:7c:2e:93:
         f4:84:ca:fd:09:53:31:c3:cc:6f:e9:d9:13:5e:f7:1f:31:27:
         09:d9:40:52:a7:5f:ac:d9:37:55:93:c4:a3:ef:23:c9:64:17:
         ce:c6:6d:4f
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICElswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDMw
MzIwNTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENGOEZCQUI1QkMzQjJE
RUUwN0Q2NzZCNzNEMTlFMjY1MTY1OEJGODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDncwisRqqCjgBuqj4a+6m4ZjK9oOSkivu7elIcevZ1AbUP1GVx
s5iyZ38Kw5gKP5rgzfdKeFHVgNTPaqTViQOc7UKixKTdQoiB1w5QI4HZFd8LdqoD
8/cYISq6+72hUqHUhtJyqn8eiKZm5lAIEarN/lUe1VJQfmu2rp34T3N90jqiv7yZ
9tBx+RDvT1H6nRZ+x+nfss8wl/t1Zy0qjTngX6DnkFba21h8dzZcYZRlrtfY16Ah
ItyoKGAE6xWHogbhdJF4D5HaoIYTw0FfTa9IorLhmApGUe8j7J2hUuoc/pQsZHcK
02ZnLED0bcRoFMnstiUXFyNW3rJRHgMoPRfHAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUz4+6tbw7Le4H1na3PRniZRZYv4EwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC96NC02dGJ3N0xlNEgxbmEzUFJu
aVpSWll2NEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDy0B4
MA0GCSqGSIb3DQEBCwUAA4IBAQCPhrbX+EN0xDA/NNLOQIh41mztVJmNNUsph/Dj
WqulIOK7y7zb+9y96IJ2t+DnV6a51FRhyxGtx8OyYE6SspddIKBYlZ32MTPT2j2G
HxyeuDxhlkbFtwumPHlVrJuA9diE8bKb+Hsx9Dn+EiqNnrP0f+HHMRyKsL7Prw66
ICcNC0jTttfl216CwaaewLlFA/1+JEM/kbU+3Iclozx5QqzKixV8FJDAfGqVb0k8
xSVUGsDlY/bjSU8AP8dDr1O8W8iEAWONswVHHdFlkbTH+AkOhSPSKTV8LpP0hMr9
CVMxw8xv6dkTXvcfMScJ2UBSp1+s2TdVk8Sj7yPJZBfOxm1P
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:54 2026 by rpki-client