This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/zQW06HJuH56h2w7QxTChd-1UFYc.roa
File:                     zQW06HJuH56h2w7QxTChd-1UFYc.roa (raw, json)
Hash identifier:          Tya9TeY3QPZ8Cur+J/TzewkF958G7Rm2ChpNcCuJG9g=
Subject key identifier:   CD:05:B4:E8:72:6E:1F:9E:A1:DB:0E:D0:C5:30:A1:77:ED:54:15:87
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1366
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/zQW06HJuH56h2w7QxTChd-1UFYc.roa
Signing time:             Fri 06 Feb 2026 01:08:07 +0000
ROA not before:           Fri 06 Feb 2026 01:08:07 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.72.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4966 (0x1366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:08:07 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CD05B4E8726E1F9EA1DB0ED0C530A177ED541587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:b9:32:cc:d8:da:b4:82:54:55:1c:dd:cc:
                    fc:7a:86:62:b5:0f:7d:c2:45:6c:c2:21:86:09:89:
                    4a:86:d4:ae:57:b7:b0:b0:0c:a0:8b:cf:b1:47:0b:
                    16:44:41:34:64:7c:59:a4:7e:9e:06:81:ef:61:03:
                    7d:af:07:4a:b6:61:c1:e2:22:2a:31:d7:f6:d3:d3:
                    1e:19:91:f3:65:19:1e:77:e6:44:81:b5:9f:06:70:
                    0d:97:41:d9:bc:b0:13:dc:31:48:f8:fe:02:9f:79:
                    8c:9f:e5:b2:a5:99:54:06:25:4a:4d:c7:7f:6e:4f:
                    70:02:49:26:52:5e:71:b9:e5:42:96:da:14:8d:74:
                    9b:b0:c0:15:79:a7:b4:b6:ad:18:ff:3d:ab:db:e3:
                    be:b9:c5:a7:00:49:63:3a:cf:cb:f5:9c:08:dd:2d:
                    04:be:62:92:d4:2e:eb:fe:5c:1b:60:c8:8b:71:d3:
                    12:57:32:ed:5d:f3:6f:a8:b7:bd:3f:e1:53:a3:cd:
                    d0:02:3d:fd:86:30:04:13:74:82:4f:fe:0e:27:21:
                    7d:c3:fe:21:3c:26:68:5b:18:38:97:3b:d9:b0:ce:
                    43:a7:d9:c4:e6:81:95:44:81:b9:cd:1c:9e:d5:05:
                    b7:30:bd:a7:16:57:55:65:78:e2:eb:8b:82:e6:52:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:05:B4:E8:72:6E:1F:9E:A1:DB:0E:D0:C5:30:A1:77:ED:54:15:87
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/zQW06HJuH56h2w7QxTChd-1UFYc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:2f:3e:88:d0:64:75:0c:34:64:ff:64:b3:fd:f2:f4:a9:19:
         05:eb:4d:05:d0:73:9b:df:06:6c:3d:44:7e:ce:22:b8:83:b9:
         bb:a5:58:d4:06:ed:e2:20:bf:6d:3c:be:fd:dd:a7:ea:93:88:
         cb:1f:4c:44:63:91:c9:79:4a:1b:f9:96:27:e2:5a:f8:d2:1b:
         39:11:70:e2:26:6b:2d:e1:a1:32:0e:d7:40:15:00:04:e6:e7:
         e6:7d:c6:72:f3:53:25:cd:55:5d:42:b9:44:98:62:1d:cb:2a:
         42:33:12:1e:94:6d:b7:6b:96:9b:25:d2:21:db:62:4d:c6:80:
         5b:af:ba:64:2c:7e:7d:a7:60:56:0e:2a:52:20:59:e8:78:e7:
         45:0c:a2:d1:4f:89:83:cf:c7:77:13:b9:ca:f1:e1:bb:e2:91:
         f8:7b:e1:fe:7e:81:9e:93:47:68:af:75:27:52:f0:9b:ae:aa:
         f5:1e:bb:6f:1e:ee:fe:4e:d8:32:6b:27:87:02:f8:7c:69:04:
         dd:e1:ef:eb:0b:17:a5:dc:ef:3b:48:ad:18:31:92:20:24:79:
         df:d5:c6:ea:d9:7d:b0:d2:22:4e:cf:a5:86:68:53:bf:2f:af:
         d5:9e:de:75:06:ad:97:d2:e8:f9:18:5e:1b:75:24:76:9a:67:
         76:d7:c2:7f
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICE2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNjAyMDYw
MTA4MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENEMDVCNEU4NzI2RTFG
OUVBMURCMEVEMEM1MzBBMTc3RUQ1NDE1ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYlLkyzNjatIJUVRzdzPx6hmK1D33CRWzCIYYJiUqG1K5Xt7Cw
DKCLz7FHCxZEQTRkfFmkfp4Gge9hA32vB0q2YcHiIiox1/bT0x4ZkfNlGR535kSB
tZ8GcA2XQdm8sBPcMUj4/gKfeYyf5bKlmVQGJUpNx39uT3ACSSZSXnG55UKW2hSN
dJuwwBV5p7S2rRj/Pavb4765xacASWM6z8v1nAjdLQS+YpLULuv+XBtgyItx0xJX
Mu1d82+ot70/4VOjzdACPf2GMAQTdIJP/g4nIX3D/iE8JmhbGDiXO9mwzkOn2cTm
gZVEgbnNHJ7VBbcwvacWV1VleOLri4LmUjLhAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUzQW06HJuH56h2w7QxTChd+1UFYcwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC96UVcwNkhKdUg1NmgydzdReFRD
aGQtMVVGWWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0iy
MA0GCSqGSIb3DQEBCwUAA4IBAQAMLz6I0GR1DDRk/2Sz/fL0qRkF600F0HOb3wZs
PUR+ziK4g7m7pVjUBu3iIL9tPL793afqk4jLH0xEY5HJeUob+ZYn4lr40hs5EXDi
Jmst4aEyDtdAFQAE5ufmfcZy81MlzVVdQrlEmGIdyypCMxIelG23a5abJdIh22JN
xoBbr7pkLH59p2BWDipSIFnoeOdFDKLRT4mDz8d3E7nK8eG74pH4e+H+foGek0do
r3UnUvCbrqr1HrtvHu7+TtgyayeHAvh8aQTd4e/rCxel3O87SK0YMZIgJHnf1cbq
2X2w0iJOz6WGaFO/L6/Vnt51Bq2X0uj5GF4bdSR2mmd218J/
-----END CERTIFICATE-----
Generated at Thu Feb 12 15:45:32 2026 by rpki-client