Route Origin Authorization
$ rpki-client -vvvf rpkica.twnic.tw/rpki/FET/0/AS9919.roa
File: AS9919.roa (raw, json)
Hash identifier: eeag909kzwe+KHt+mHzcnGmEn6oKbwOTE6rnqH7qwZ8=
Subject key identifier: A4:95:4E:81:1A:2B:A5:29:C1:FC:56:8F:CD:8B:B3:81:BA:9C:82:3A
Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Certificate serial: 3A22A735EA9CF127F0FD1ADFC2D72E81DDF8B64B
Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS9919.roa
Signing time: Fri 18 Sep 2026 09:04:03 +0000
ROA not before: Fri 18 Sep 2026 08:59:03 +0000
ROA not after: Fri 17 Sep 2027 09:04:03 +0000
asID: 9919
IP address blocks: 60.244.0.0/22 maxlen: 24
60.244.64.0/18 maxlen: 24
124.219.0.0/17 maxlen: 24
203.79.199.0/24 maxlen: 24
203.79.200.0/24 maxlen: 24
203.79.208.0/22 maxlen: 24
203.207.44.0/22 maxlen: 24
210.63.192.0/19 maxlen: 24
210.63.232.0/21 maxlen: 24
210.85.16.0/20 maxlen: 24
210.200.0.0/19 maxlen: 24
210.200.85.0/24 maxlen: 24
210.202.0.0/19 maxlen: 24
210.202.32.0/20 maxlen: 24
210.202.48.0/21 maxlen: 24
210.202.64.0/19 maxlen: 24
210.202.192.0/18 maxlen: 24
211.76.104.0/23 maxlen: 24
222.156.254.0/24 maxlen: 24
2404:0:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 15:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:22:a7:35:ea:9c:f1:27:f0:fd:1a:df:c2:d7:2e:81:dd:f8:b6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Validity
Not Before: Sep 18 08:59:03 2026 GMT
Not After : Sep 17 09:04:03 2027 GMT
Subject: CN=A4954E811A2BA529C1FC568FCD8BB381BA9C823A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:31:95:a2:ec:c5:b9:bf:73:ca:78:b3:6b:
1b:ca:d1:4d:6c:2e:c6:f1:4b:01:04:38:ec:f0:ac:
d1:d2:df:89:60:cc:68:06:70:f1:52:36:bd:66:1f:
5f:2c:c4:19:27:3a:df:c2:ff:08:36:9a:d7:6c:d5:
92:53:fd:be:c3:69:42:24:07:eb:94:3d:4e:22:80:
5b:23:3b:8a:3a:2e:88:29:7f:ea:7e:98:54:eb:36:
c9:22:ee:4d:41:54:26:48:ee:14:7a:73:42:f3:95:
2b:3f:ea:5f:2c:5b:60:7d:04:13:51:08:eb:c4:b3:
07:30:36:3d:cf:48:1d:3c:0e:25:48:63:86:26:0e:
b7:88:ad:f6:54:d5:44:61:1a:d9:2b:c5:c4:be:5b:
fd:a7:3e:21:c0:0e:06:43:b9:13:21:45:ec:8a:65:
70:64:dd:9f:bc:8e:d2:1a:7a:c5:13:b1:3d:90:21:
18:fe:70:a2:98:b0:d5:08:03:68:8e:d7:a3:b6:be:
10:29:3d:fd:92:2c:0e:78:98:a0:6f:5d:fa:0f:92:
86:97:f9:09:98:e0:81:61:84:15:fb:17:27:ea:73:
ce:6e:b5:72:6f:14:48:d9:35:8b:c3:8c:3e:d7:dd:
07:bb:f2:52:a5:8a:78:f9:df:e3:7c:e0:12:ce:83:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:4E:81:1A:2B:A5:29:C1:FC:56:8F:CD:8B:B3:81:BA:9C:82:3A
X509v3 Authority Key Identifier:
keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS9919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/22
60.244.64.0/18
124.219.0.0/17
203.79.199.0-203.79.200.255
203.79.208.0/22
203.207.44.0/22
210.63.192.0/19
210.63.232.0/21
210.85.16.0/20
210.200.0.0/19
210.200.85.0/24
210.202.0.0-210.202.55.255
210.202.64.0/19
210.202.192.0/18
211.76.104.0/23
222.156.254.0/24
IPv6:
2404:0:5000::/36
Signature Algorithm: sha256WithRSAEncryption
bd:d1:33:17:3b:4a:12:0b:77:46:f0:bf:45:2e:3c:b0:ef:13:
39:67:91:2d:3d:1e:fe:2d:03:bf:26:55:c9:b8:0c:12:f3:fc:
2b:11:7f:26:61:02:12:70:6d:6d:46:02:19:af:02:7a:6e:db:
dc:d1:df:21:c5:92:c8:09:4f:dc:2d:60:3b:6e:b0:9e:89:5a:
2e:16:de:f8:4a:75:22:5c:56:20:10:33:d0:c5:59:d7:84:59:
12:40:90:74:93:b2:ed:6e:62:67:1e:70:19:d2:10:cc:4c:de:
34:73:43:ad:01:da:72:82:ea:91:1e:73:46:81:a6:d5:e1:8e:
79:e8:97:83:b0:48:c9:08:47:07:ac:08:1b:45:e3:ca:d4:b6:
e1:db:c2:63:00:17:e6:81:05:22:16:32:dc:91:4a:e9:d4:28:
65:30:01:f4:1e:b9:2c:92:f5:19:e7:d6:21:67:ff:83:4b:19:
b9:96:d9:0d:b4:d5:a1:14:19:11:73:2c:66:88:8a:a4:fc:5c:
59:27:c8:5c:b5:52:7b:26:a5:b8:69:b1:88:a8:4a:42:1d:20:
ae:73:fc:1a:64:5b:dd:36:fd:61:bc:50:68:96:1b:9c:34:fb:
3a:d2:06:9d:f5:85:ee:14:d4:61:b0:62:db:40:3b:37:88:67:
51:da:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:47:32 2026 by rpki-client