This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/z6hm0F_Y1PDU1P42fGLId1A2RPo.roa
File:                     z6hm0F_Y1PDU1P42fGLId1A2RPo.roa (raw, json)
Hash identifier:          gTLywL+yQDApm2BwX2NUlR1FBvaBcnERdF3p8wfhBS8=
Subject key identifier:   CF:A8:66:D0:5F:D8:D4:F0:D4:D4:FE:36:7C:62:C8:77:50:36:44:FA
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1151
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/z6hm0F_Y1PDU1P42fGLId1A2RPo.roa
Signing time:             Tue 03 Feb 2026 02:19:27 +0000
ROA not before:           Tue 03 Feb 2026 02:19:27 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        203.71.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4433 (0x1151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 02:19:27 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CFA866D05FD8D4F0D4D4FE367C62C877503644FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:72:ab:d9:12:22:53:cd:e1:1c:71:5d:bc:
                    5b:79:11:58:2a:27:7a:83:45:bd:29:e7:b2:31:2e:
                    1d:e4:b5:0f:fa:d2:b3:d2:08:93:7e:20:b0:29:21:
                    96:57:51:f2:31:88:d0:39:59:f4:58:6d:10:94:e5:
                    67:50:fc:0c:7e:2d:c9:5f:a1:65:23:2b:16:bd:bb:
                    8b:07:c2:e3:e8:7e:0c:9b:78:c4:fa:91:3a:9c:04:
                    27:85:13:16:75:2c:56:94:58:c8:46:5a:4f:89:2a:
                    87:b3:3c:e0:6e:52:68:56:d0:a7:82:d9:4d:d0:a4:
                    0d:b0:2b:b9:0b:d9:41:34:eb:f0:39:1f:d9:2b:ee:
                    84:ba:5b:1e:88:d9:cc:13:e1:a0:96:ae:84:a2:67:
                    c2:1c:67:fc:b4:c7:2f:28:f4:df:c2:be:61:33:1a:
                    84:44:b7:57:65:f1:3c:23:8e:c5:da:1a:db:cf:95:
                    e2:c4:ec:03:52:ed:9a:97:bb:08:15:7c:59:50:be:
                    57:68:e2:6b:10:15:d8:83:ce:58:5d:a7:1a:01:56:
                    c6:14:ef:25:8f:3c:5d:3f:2d:b2:ab:18:27:fa:52:
                    2e:1c:ef:4b:9e:0e:d0:49:c8:66:6c:ee:84:7c:63:
                    30:cc:e9:d2:01:80:f3:98:1f:ab:fe:bf:24:8a:99:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A8:66:D0:5F:D8:D4:F0:D4:D4:FE:36:7C:62:C8:77:50:36:44:FA
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/z6hm0F_Y1PDU1P42fGLId1A2RPo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.71.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:d3:e1:7c:17:21:e0:c7:6c:b5:54:21:43:32:2a:07:7f:
         a7:8b:2f:e3:c6:b3:83:f3:cd:0b:7a:b7:d6:94:08:86:c3:d4:
         7d:de:36:55:5a:dd:59:01:ee:48:b0:cf:6b:de:9b:73:4c:1f:
         f4:62:c6:41:7d:bf:20:f6:87:8c:43:d8:99:61:fc:72:7f:db:
         9f:3c:66:44:78:36:7e:bf:09:c3:f9:3b:bd:36:56:71:43:7b:
         f4:43:46:0c:fa:0c:5b:70:ba:7f:1b:69:b5:dd:b1:2d:0e:10:
         b7:33:73:1d:b3:2a:79:14:c5:52:a1:40:6f:3e:15:37:9e:de:
         19:d1:35:e8:bb:2e:2f:4f:60:05:ab:4f:9f:33:b9:5a:eb:ae:
         25:9a:4c:65:d9:73:d5:d2:5b:11:1e:ef:be:14:5f:86:ca:1c:
         6e:c8:ec:49:2d:9f:28:b0:16:03:a1:71:90:3b:d8:cd:2b:30:
         61:e2:ba:d0:8a:e2:15:b8:4b:de:d4:7d:91:87:db:50:fc:c1:
         c9:ed:5f:29:d5:15:90:66:21:94:54:b4:ca:9d:67:46:a9:35:
         fc:77:a9:f7:c2:e8:6e:cc:eb:64:8d:0d:35:e9:77:64:28:c4:
         36:5e:22:65:cd:33:bc:d4:64:65:08:d2:2b:30:50:eb:17:33:
         36:fd:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:55 2026 by rpki-client