Route Origin Authorization
$ rpki-client -vvvf rpkica.twnic.tw/rpki/FET/0/AS4780.roa
File: AS4780.roa (raw, json)
Hash identifier: QQJXQiGkHNjYSpuZL3zRgm7fZG1sJGhbPjTUg8rFYY4=
Subject key identifier: 65:15:35:0C:8D:43:2D:90:1B:34:38:22:D5:05:4B:74:C2:F6:1A:5A
Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Certificate serial: 112B4768F48E368F683DE3033581A4A57214EADE
Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS4780.roa
Signing time: Fri 18 Sep 2026 09:04:02 +0000
ROA not before: Fri 18 Sep 2026 08:59:02 +0000
ROA not after: Fri 17 Sep 2027 09:04:02 +0000
asID: 4780
IP address blocks: 60.244.0.0/22 maxlen: 24
60.244.64.0/18 maxlen: 24
124.219.0.0/17 maxlen: 24
203.79.199.0/24 maxlen: 24
203.79.200.0/24 maxlen: 24
203.79.208.0/22 maxlen: 24
203.207.44.0/22 maxlen: 24
210.58.128.0/19 maxlen: 24
210.63.192.0/19 maxlen: 24
210.63.232.0/21 maxlen: 24
210.85.0.0/22 maxlen: 24
210.85.16.0/20 maxlen: 24
210.85.48.0/20 maxlen: 24
210.200.0.0/19 maxlen: 24
210.200.85.0/24 maxlen: 24
210.202.0.0/19 maxlen: 24
210.202.32.0/20 maxlen: 24
210.202.48.0/21 maxlen: 24
210.202.64.0/19 maxlen: 24
210.202.192.0/18 maxlen: 24
211.76.104.0/23 maxlen: 24
219.91.0.0/17 maxlen: 24
222.156.254.0/24 maxlen: 24
222.157.64.0/19 maxlen: 24
2404:0:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2b:47:68:f4:8e:36:8f:68:3d:e3:03:35:81:a4:a5:72:14:ea:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Validity
Not Before: Sep 18 08:59:02 2026 GMT
Not After : Sep 17 09:04:02 2027 GMT
Subject: CN=6515350C8D432D901B343822D5054B74C2F61A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:b9:89:52:87:36:da:d1:cc:33:f0:ec:2e:
fe:29:d0:4e:8e:db:6f:2c:52:8e:13:72:1d:31:f7:
26:01:61:4c:5e:3a:a5:9e:51:57:02:0a:a8:b3:3b:
f7:b2:78:0f:bb:69:3d:5d:e8:dc:2a:93:6a:01:bd:
a5:e9:cf:0b:62:c7:fb:db:8d:df:fe:a8:36:9c:e6:
8f:cf:b5:ce:c9:d8:f0:99:f9:a4:a4:48:c3:fc:77:
51:b4:de:6a:bc:5b:1f:83:bc:7a:d5:6b:2f:f7:8a:
5d:39:d4:74:91:77:69:0e:34:38:09:24:50:85:d9:
04:4a:ed:bc:28:75:3f:46:be:48:2b:55:f8:b9:d5:
58:71:6b:29:c7:6c:ca:3a:b7:12:0d:b9:c1:1e:7d:
73:af:f5:b1:db:6e:15:31:33:a8:e1:09:24:ef:ca:
3e:49:46:85:8f:2d:92:f4:9b:87:03:9d:4f:6a:02:
6f:1d:39:d6:2b:a9:d8:de:81:c8:80:a0:cc:15:a7:
6c:10:a2:0e:d1:3e:a4:1d:51:e1:bc:82:7a:7c:87:
16:e0:64:19:e2:e0:2d:65:3f:c9:dc:29:db:4f:71:
99:7b:f3:b1:49:3c:7e:ae:e9:d6:81:46:4e:fc:d3:
c9:46:c2:fa:e6:64:f8:83:69:1b:96:7a:be:86:ce:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:35:0C:8D:43:2D:90:1B:34:38:22:D5:05:4B:74:C2:F6:1A:5A
X509v3 Authority Key Identifier:
keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS4780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/22
60.244.64.0/18
124.219.0.0/17
203.79.199.0-203.79.200.255
203.79.208.0/22
203.207.44.0/22
210.58.128.0/19
210.63.192.0/19
210.63.232.0/21
210.85.0.0/22
210.85.16.0/20
210.85.48.0/20
210.200.0.0/19
210.200.85.0/24
210.202.0.0-210.202.55.255
210.202.64.0/19
210.202.192.0/18
211.76.104.0/23
219.91.0.0/17
222.156.254.0/24
222.157.64.0/19
IPv6:
2404:0:5000::/36
Signature Algorithm: sha256WithRSAEncryption
a2:fc:01:d5:49:0f:3a:48:d6:67:1a:25:fc:8a:52:b4:11:3a:
b8:7e:d7:44:44:c2:5e:94:4a:53:f0:14:6f:de:47:0f:f9:9c:
e4:c4:d4:0a:45:2c:2a:4c:c9:13:0f:ff:b8:c7:84:da:ee:36:
3a:66:7e:5e:df:e0:45:69:c8:29:71:bb:f0:a8:89:23:36:19:
4a:1f:18:53:cb:1b:0f:48:36:53:fb:c6:f9:75:a3:88:24:6e:
97:cf:db:c0:1a:b3:26:de:30:58:51:c4:27:56:cb:21:d7:88:
de:f2:bd:42:9c:e6:fc:24:f3:3b:9c:2c:2e:40:29:eb:a5:f2:
95:65:17:48:4b:bc:6b:89:b8:4b:20:0f:cd:c6:70:0c:31:cd:
be:2d:9b:51:a7:2b:4c:f7:9a:b6:28:64:21:e8:cd:e3:e7:5e:
d9:dc:17:ad:02:4b:e4:2a:04:84:34:a0:45:4e:08:fd:ae:04:
e8:3d:11:c6:b6:a1:ed:b0:ee:1f:23:5e:60:51:34:ff:d4:ac:
d8:35:40:56:80:9c:78:5e:8b:14:4c:d8:cd:18:be:68:eb:46:
a4:ce:ab:2e:fe:49:02:42:f0:71:fe:d9:cb:95:37:26:b2:67:
e6:74:d5:93:8a:44:52:5f:b2:37:cf:b6:c4:1d:af:61:df:61:
fd:50:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:47:50 2026 by rpki-client