This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/zXkdUbUEJ1zIJsQKqIEdHT1Fh5c.roa
File:                     zXkdUbUEJ1zIJsQKqIEdHT1Fh5c.roa (raw, json)
Hash identifier:          gbfljnaRoJYUaRvdnqQJLzpGPCUcXb5YRvablJSUXY0=
Subject key identifier:   CD:79:1D:51:B5:04:27:5C:C8:26:C4:0A:A8:81:1D:1D:3D:45:87:97
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       12F2
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/zXkdUbUEJ1zIJsQKqIEdHT1Fh5c.roa
Signing time:             Tue 03 Feb 2026 08:59:22 +0000
ROA not before:           Tue 03 Feb 2026 08:59:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18177
IP address blocks:        210.60.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4850 (0x12f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 08:59:22 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CD791D51B504275CC826C40AA8811D1D3D458797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:88:d8:64:8c:a3:68:c9:f2:33:e6:1a:fd:
                    e6:58:28:12:85:65:80:7c:76:8a:7a:a3:11:c0:81:
                    8e:7d:da:1a:a5:1f:66:f6:c9:01:65:6d:04:0d:f5:
                    f9:de:c7:aa:d2:ba:f4:11:94:90:76:1d:f0:2b:ec:
                    5a:f3:68:70:df:07:a2:9a:91:02:f4:f3:66:00:7e:
                    0a:1d:98:81:3b:6d:62:61:b4:2e:1f:80:bf:0a:e5:
                    e2:73:50:77:70:f3:73:45:4a:85:7f:41:6f:2c:cc:
                    51:ca:ab:79:05:53:bd:71:68:ad:32:48:59:75:eb:
                    1a:94:b4:c8:b5:4d:26:52:c4:f7:a3:de:59:6f:87:
                    4e:dd:1f:34:4e:2c:93:37:f8:37:ff:1f:e0:7c:c4:
                    c0:83:cd:15:5b:a7:06:7a:5a:2a:7c:20:7a:17:ac:
                    82:03:92:7b:cc:4d:d1:36:a1:bf:6a:2b:45:1d:62:
                    08:7a:a3:3b:45:43:ec:be:32:e5:2f:e9:17:27:cf:
                    08:f4:f8:86:72:63:5b:ad:ec:aa:38:0f:75:e4:b1:
                    9e:b1:a8:8b:2f:bc:25:97:a6:9f:8a:88:30:ae:6c:
                    b2:50:b0:f8:64:23:8f:6d:92:86:ff:7c:70:e9:ca:
                    34:f9:f9:24:5f:10:b9:1d:21:a9:cc:e5:78:87:38:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:79:1D:51:B5:04:27:5C:C8:26:C4:0A:A8:81:1D:1D:3D:45:87:97
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/zXkdUbUEJ1zIJsQKqIEdHT1Fh5c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:7f:39:c7:26:b8:7d:7f:85:68:f5:2c:8e:1d:45:36:f6:
         8a:4c:8a:42:c9:75:9c:5b:9f:a5:9e:43:2b:0f:f3:6c:de:ad:
         69:eb:f2:d8:47:1d:e5:7c:12:5d:bb:9d:25:49:79:c6:b4:10:
         db:c1:0b:f1:dd:1f:c9:29:8b:13:c2:49:d4:c1:df:02:c2:72:
         4f:b8:45:7e:b6:55:21:e1:30:44:70:07:65:86:3f:e5:7d:f7:
         2e:c9:83:97:4e:9c:b5:3c:ae:c2:a6:fa:47:fb:3a:ff:a5:32:
         bf:8b:92:b8:e9:16:99:2a:fb:e1:f3:59:4c:74:df:cb:1b:5d:
         e1:8c:ce:c4:7b:33:d1:65:e5:29:3a:63:d1:0c:54:94:f2:df:
         3a:76:69:3a:38:94:8b:35:90:57:b7:0d:b0:14:d7:25:4a:16:
         f8:b9:25:4d:3c:da:26:0f:e2:24:b0:3c:4a:5d:22:69:c3:3d:
         26:0a:96:4e:14:ec:a9:00:52:9f:70:33:da:ac:5c:46:fd:72:
         1a:dd:8c:f1:09:93:3c:d2:07:b3:09:20:ec:d2:4b:81:15:ef:
         b1:b7:9f:48:85:95:86:38:ff:79:14:c6:15:ad:fa:14:f2:6f:
         74:92:e2:22:49:67:16:4a:c3:7d:02:25:aa:5d:21:e0:43:83:
         c7:85:a2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:29 2026 by rpki-client