This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/OjYdwlZj1vjPVRkkDBJzUxLsn2I.roa
File:                     OjYdwlZj1vjPVRkkDBJzUxLsn2I.roa (raw, json)
Hash identifier:          YcUKYysyknHGTNecry3cWOkJO/HaYJ0JlGz85EQIAXA=
Subject key identifier:   3A:36:1D:C2:56:63:D6:F8:CF:55:19:24:0C:12:73:53:12:EC:9F:62
Certificate issuer:       /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial:       030D
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/OjYdwlZj1vjPVRkkDBJzUxLsn2I.roa
Signing time:             Fri 06 Feb 2026 06:40:29 +0000
ROA not before:           Fri 06 Feb 2026 06:40:29 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131613
IP address blocks:        202.160.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 08:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
        Validity
            Not Before: Feb  6 06:40:29 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3A361DC25663D6F8CF5519240C12735312EC9F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:95:67:4c:cc:82:d3:6b:40:bd:bc:e7:7a:
                    8e:c0:cd:cc:a8:1e:6a:0f:ea:6d:c5:c3:88:75:65:
                    e7:bf:f5:cd:28:23:83:eb:3d:f4:49:6f:10:ff:90:
                    d8:f5:a0:87:37:d6:0a:43:7c:b5:70:4d:54:33:20:
                    0c:7b:1d:3b:2c:23:e5:72:1e:08:ad:4c:97:3d:6f:
                    46:51:88:a6:d3:cf:c8:90:cd:58:10:9d:2a:c5:f5:
                    d8:27:2c:7a:ab:e5:ee:2b:fc:ea:6c:59:09:6c:b9:
                    f9:07:7a:d2:95:f0:74:7b:ef:22:a6:1e:ea:98:32:
                    9c:b1:b4:ed:77:03:49:77:31:5c:f9:90:58:8f:40:
                    1e:75:2c:4a:b8:aa:a4:b1:27:c6:f3:fc:e9:2b:7b:
                    3a:7e:15:aa:58:07:25:29:56:36:33:ee:0a:2e:6c:
                    c7:58:70:f5:1a:8c:68:e0:1a:df:c1:fd:ea:c6:66:
                    64:fb:de:5c:89:0c:d4:18:17:f0:77:0c:cd:a0:74:
                    15:27:81:6b:29:bf:1e:27:99:77:58:21:22:d3:76:
                    84:bf:0e:89:d2:dc:2b:51:d1:c6:65:71:b1:01:4f:
                    02:3e:88:c2:33:12:ac:38:4c:2f:b7:a4:ef:58:94:
                    f3:0d:8b:83:b0:4c:aa:3d:58:24:f2:0d:c1:1e:7b:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:36:1D:C2:56:63:D6:F8:CF:55:19:24:0C:12:73:53:12:EC:9F:62
            X509v3 Authority Key Identifier:
                keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/OjYdwlZj1vjPVRkkDBJzUxLsn2I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:18:c3:0a:94:27:32:73:40:8f:d3:21:4e:d8:84:b8:64:d9:
         8d:8d:77:08:a8:81:68:29:eb:de:9a:13:be:eb:cf:e7:df:22:
         d6:64:68:51:15:47:ba:ec:f3:56:05:c6:25:9e:c2:b4:d8:07:
         ba:e3:f1:20:f1:ef:c8:f4:b4:e6:36:8a:a2:0f:66:19:fc:8b:
         0e:bd:38:d4:36:34:9a:8b:c6:78:45:18:04:d6:2a:52:19:25:
         3b:5c:bf:3f:9e:32:c4:ef:ba:c4:b7:93:0f:59:b7:c2:38:34:
         b8:28:ad:d2:82:cf:50:2f:47:c0:1d:b5:4f:ab:4d:ad:24:b7:
         90:c0:54:7d:c9:94:6d:68:7f:d2:49:e7:52:fd:f3:71:db:ac:
         81:6a:09:0d:cb:ee:cc:62:67:95:cc:0a:03:92:b0:63:a9:5c:
         97:cb:60:48:21:34:bf:4c:fe:a6:a4:47:37:e7:ae:63:c1:31:
         9c:4f:d6:e6:7d:a7:b3:68:9d:58:64:ae:47:bc:d4:d3:32:70:
         06:9c:4e:68:91:37:12:57:71:da:a6:92:52:b6:fd:63:a5:df:
         a0:24:98:64:b4:22:5a:a5:b7:68:9a:6b:a9:9c:5e:5e:4d:63:
         8d:c8:a8:83:f1:32:a4:c3:f8:a7:f5:58:80:d3:b2:d4:47:22:
         d5:91:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:01 2026 by rpki-client