Route Origin Authorization
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/AS1659.roa
File: AS1659.roa (raw, json)
Hash identifier: a9JF70ttylpg+T9TOGnj3tVWmGB1CnSM61mc0bVSBuE=
Subject key identifier: FA:C5:8C:94:CA:8E:17:A0:6B:CE:81:E6:BF:5B:02:2D:4C:BC:CB:14
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 4005A0F0D419EE8AA4681D28BD1E17EF9AE45C4A
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/AS1659.roa
Signing time: Wed 19 Aug 2026 03:44:01 +0000
ROA not before: Wed 19 Aug 2026 03:39:01 +0000
ROA not after: Wed 18 Aug 2027 03:44:01 +0000
asID: 1659
IP address blocks: 134.208.0.0/16 maxlen: 16
140.110.0.0/15 maxlen: 15
140.112.0.0/12 maxlen: 12
140.120.0.0/16 maxlen: 16
140.128.0.0/13 maxlen: 13
140.128.0.0/16 maxlen: 16
140.132.0.0/16 maxlen: 16
140.134.0.0/16 maxlen: 16
140.135.0.0/16 maxlen: 16
140.136.0.0/15 maxlen: 15
140.138.0.0/16 maxlen: 16
192.83.166.0/23 maxlen: 23
192.83.167.0/24 maxlen: 24
192.83.168.0/21 maxlen: 21
192.83.176.0/20 maxlen: 20
192.83.181.0/24 maxlen: 24
192.83.192.0/22 maxlen: 22
192.83.196.0/24 maxlen: 24
192.192.0.0/16 maxlen: 16
192.192.2.0/24 maxlen: 24
192.192.21.0/24 maxlen: 24
192.192.22.0/23 maxlen: 23
192.192.24.0/23 maxlen: 23
192.192.26.0/24 maxlen: 24
192.192.59.0/24 maxlen: 24
192.192.100.0/22 maxlen: 22
192.192.104.0/22 maxlen: 22
192.192.114.0/23 maxlen: 23
192.192.125.0/24 maxlen: 24
192.192.126.0/23 maxlen: 23
192.192.128.0/23 maxlen: 23
192.192.132.0/24 maxlen: 24
192.192.136.0/24 maxlen: 24
192.192.227.0/24 maxlen: 24
192.192.238.0/23 maxlen: 23
192.192.240.0/21 maxlen: 21
192.192.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:05:a0:f0:d4:19:ee:8a:a4:68:1d:28:bd:1e:17:ef:9a:e4:5c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: Aug 19 03:39:01 2026 GMT
Not After : Aug 18 03:44:01 2027 GMT
Subject: CN=FAC58C94CA8E17A06BCE81E6BF5B022D4CBCCB14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:a8:ab:e0:99:c6:29:db:fd:14:a7:a7:50:
0e:10:d9:57:27:59:46:5a:79:a2:7c:69:af:d9:dd:
67:34:de:21:23:c3:41:1e:c7:75:22:f1:01:16:83:
3e:56:66:d7:c7:19:96:98:e2:0d:a1:a5:9d:a4:57:
dc:27:b7:58:52:77:63:8a:7d:06:e5:87:e9:7e:87:
46:5a:03:81:42:fc:28:87:3b:1e:74:f5:84:df:e8:
90:da:1a:c8:dc:6b:5f:22:ef:a0:d6:19:df:dd:80:
9e:b6:c9:d8:0d:8e:ef:8d:cc:cd:da:59:7f:bb:52:
b9:1d:50:03:58:e1:bb:61:f4:c7:bf:e0:6b:48:64:
7c:89:1e:f7:97:e2:58:8e:8b:cb:6d:58:9e:a7:33:
08:11:1b:69:fb:50:b9:12:1f:8c:f4:1e:55:9d:b3:
36:c3:e5:3c:ff:91:e1:e6:0f:59:2a:6f:8b:d3:db:
03:2e:b7:c2:a1:0f:b4:61:ac:48:85:8b:d0:97:0e:
1d:fe:36:df:0b:d3:66:69:d3:a8:3b:9b:8c:89:1c:
87:2c:13:cb:11:c8:56:78:a3:a1:da:3c:18:c6:6c:
e8:39:c7:43:2b:4f:39:60:8e:5f:48:75:9d:5d:ad:
91:35:75:51:a6:21:5d:00:29:ac:95:d7:8e:bb:b7:
63:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C5:8C:94:CA:8E:17:A0:6B:CE:81:E6:BF:5B:02:2D:4C:BC:CB:14
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/AS1659.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.208.0.0/16
140.110.0.0-140.138.255.255
192.83.166.0-192.83.196.255
192.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:e4:2c:18:13:2f:7e:c4:25:45:c7:2b:ab:43:ee:f4:62:2c:
52:72:26:b9:ac:d5:4d:77:41:3d:c1:6d:be:fb:81:d0:94:7e:
4c:4e:64:89:ba:cd:15:53:10:95:ca:bb:d9:06:b8:d3:42:75:
fd:2b:43:af:7a:54:ce:79:42:a8:35:90:3c:92:02:85:ed:b4:
9f:72:9a:e5:42:9f:89:85:c0:6e:e3:60:0a:77:ff:4b:3c:8f:
e5:08:5f:c5:ce:2d:07:1a:92:be:cf:76:37:31:f3:13:24:fd:
fa:24:62:a2:aa:c0:39:9a:20:10:89:46:09:9d:3e:5b:39:e8:
7e:bb:2b:8d:cb:8b:5b:44:ce:71:d6:7f:4a:da:bd:cf:4b:66:
42:b2:65:e7:f6:eb:cd:e0:48:e0:d8:17:24:b1:78:cb:f6:eb:
42:62:b6:c2:14:1b:5a:6f:44:2a:de:4e:bf:65:a3:3b:33:61:
2e:89:b0:d3:ec:13:f7:0b:5b:fd:8f:87:5b:9d:92:fa:17:86:
dc:ad:87:75:9e:13:43:58:52:4d:32:24:5f:be:0a:20:96:bb:
c6:ea:74:90:d7:a8:1c:0a:c7:c8:c3:d2:f6:cd:2b:6f:bc:fc:
0b:66:ee:f4:01:da:a1:a0:7f:15:e1:0d:80:27:91:69:d1:e0:
58:8d:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:34:31 2026 by rpki-client