Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/UBBNET/0/AS24165.roa
File: AS24165.roa (raw, json)
Hash identifier: 3FIiwNofmm4C5uRAP2kjrOtgHA40Oi5IQqIQn0zG3ZU=
Subject key identifier: 47:B0:67:66:64:DC:81:87:84:1C:F3:CE:BA:F0:C8:99:28:F8:0C:CA
Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E
Certificate serial: 6A444472473E3DD68A4D9FD7EC5F238D80203E98
Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS24165.roa
Signing time: Thu 14 May 2026 10:04:57 +0000
ROA not before: Thu 14 May 2026 09:59:57 +0000
ROA not after: Thu 13 May 2027 10:04:57 +0000
asID: 24165
IP address blocks: 45.64.34.0/24 maxlen: 24
49.158.0.0/15 maxlen: 24
49.158.128.0/22 maxlen: 22
49.158.132.0/22 maxlen: 22
49.158.220.0/22 maxlen: 22
49.158.224.0/21 maxlen: 21
49.158.232.0/23 maxlen: 23
49.158.240.0/21 maxlen: 22
49.159.68.0/22 maxlen: 22
49.159.72.0/22 maxlen: 22
49.159.76.0/22 maxlen: 22
49.159.208.0/22 maxlen: 22
49.159.212.0/22 maxlen: 22
49.159.218.0/23 maxlen: 23
49.159.220.0/22 maxlen: 22
49.159.248.0/22 maxlen: 22
49.159.252.0/22 maxlen: 22
61.58.112.0/21 maxlen: 21
61.58.112.0/21 maxlen: 22
61.58.120.0/22 maxlen: 22
61.58.124.0/22 maxlen: 22
61.60.215.128/25 maxlen: 25
61.61.208.0/24 maxlen: 29
61.61.213.0/24 maxlen: 24
61.61.213.0/25 maxlen: 25
61.61.228.0/24 maxlen: 24
61.64.8.0/21 maxlen: 21
61.64.8.0/22 maxlen: 22
61.64.12.0/22 maxlen: 22
61.64.16.0/21 maxlen: 21
103.225.0.0/22 maxlen: 24
114.198.160.0/20 maxlen: 24
114.198.176.0/20 maxlen: 24
115.165.192.0/18 maxlen: 24
115.165.232.0/22 maxlen: 22
119.77.128.0/17 maxlen: 24
122.100.64.0/18 maxlen: 24
122.100.96.0/21 maxlen: 21
122.254.0.0/21 maxlen: 21
122.254.8.0/21 maxlen: 21
122.254.16.0/21 maxlen: 21
122.254.24.0/21 maxlen: 21
122.254.32.0/21 maxlen: 21
122.254.32.0/22 maxlen: 22
122.254.48.0/21 maxlen: 21
124.6.0.0/21 maxlen: 21
124.6.8.0/21 maxlen: 21
124.6.12.0/22 maxlen: 22
124.6.16.0/22 maxlen: 22
180.218.40.0/22 maxlen: 22
180.218.44.0/22 maxlen: 22
180.218.80.0/22 maxlen: 22
180.218.88.0/22 maxlen: 22
180.218.96.0/22 maxlen: 22
180.218.100.0/22 maxlen: 22
180.218.104.0/21 maxlen: 21
180.218.104.0/22 maxlen: 22
180.218.112.0/21 maxlen: 21
180.218.112.0/22 maxlen: 22
180.218.120.0/22 maxlen: 22
180.218.200.0/21 maxlen: 21
2407:4b00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl
rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:44:44:72:47:3e:3d:d6:8a:4d:9f:d7:ec:5f:23:8d:80:20:3e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E
Validity
Not Before: May 14 09:59:57 2026 GMT
Not After : May 13 10:04:57 2027 GMT
Subject: CN=47B0676664DC8187841CF3CEBAF0C89928F80CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:e5:1a:7a:1e:8c:e8:2a:f5:e3:5a:e6:ec:
00:35:05:6a:1e:72:54:8c:13:fc:bc:e3:ed:86:b3:
27:41:9d:79:06:57:5d:2e:35:97:4a:29:a3:13:07:
6d:c8:f0:1b:1a:1c:dc:b0:f8:a6:21:d9:49:58:3b:
53:9a:39:98:82:89:55:6c:6c:df:2f:70:d3:f0:40:
c3:09:1e:52:ec:d6:50:2b:5a:39:50:ad:86:d5:77:
30:c5:6e:93:e9:33:f6:54:70:6f:b2:4d:e6:77:d4:
95:53:a1:1c:25:9b:20:d6:19:a1:96:11:72:04:20:
f3:3f:13:38:01:11:9b:5d:7c:8c:28:d2:ac:e5:bc:
5b:c1:b7:c7:fb:05:9f:56:44:88:a7:67:91:98:da:
3c:78:05:04:00:98:55:ec:22:72:26:32:b7:a3:ab:
76:bb:d0:d0:77:41:25:e3:e5:48:43:a0:6d:65:a9:
36:61:52:70:f8:7d:18:d6:69:54:87:5f:76:55:45:
80:5f:6e:82:5e:02:bc:2a:61:be:cf:da:81:fe:ec:
df:f0:be:86:76:49:0e:57:1a:51:02:14:71:0d:b5:
f2:07:b7:30:66:78:45:19:6d:db:08:c8:57:9e:8a:
ec:dd:82:6a:94:42:d5:4f:4f:79:66:ef:c4:57:4f:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:67:66:64:DC:81:87:84:1C:F3:CE:BA:F0:C8:99:28:F8:0C:CA
X509v3 Authority Key Identifier:
keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS24165.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.64.34.0/24
49.158.0.0/15
61.58.112.0/20
61.60.215.128/25
61.61.208.0/24
61.61.213.0/24
61.61.228.0/24
61.64.8.0-61.64.23.255
103.225.0.0/22
114.198.160.0/19
115.165.192.0/18
119.77.128.0/17
122.100.64.0/18
122.254.0.0-122.254.39.255
122.254.48.0/21
124.6.0.0-124.6.19.255
180.218.40.0/21
180.218.80.0/22
180.218.88.0/22
180.218.96.0-180.218.123.255
180.218.200.0/21
IPv6:
2407:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
14:0b:78:9b:ab:38:d9:00:39:a8:1b:71:59:62:1a:35:22:16:
a7:b9:bd:c5:cb:74:d6:6e:91:8e:e7:d4:f9:42:ff:ed:cd:1d:
2f:eb:2b:a1:86:26:20:21:a4:2d:74:97:5f:00:34:b1:81:89:
c2:45:bb:01:31:92:59:c2:cf:75:2f:8a:f6:77:ba:9a:eb:f8:
e7:33:07:bc:09:73:6c:6a:50:ba:54:1f:6b:6f:b2:3e:35:6e:
35:0e:7f:0d:50:6c:db:61:c4:05:56:53:88:ab:01:24:c8:b2:
a0:e5:04:04:47:49:bc:42:ad:26:cb:67:15:e9:3f:c1:8e:d6:
2d:56:88:22:2b:d5:9b:e2:f2:3a:14:b3:b2:30:c8:52:18:58:
31:f5:5d:a0:f6:a7:fb:fd:a4:a9:53:90:ff:07:62:47:44:56:
9f:a3:67:4c:cb:b8:b0:dd:e4:ec:90:bb:43:b2:e5:c6:29:f2:
df:a0:e2:25:50:b2:6b:81:22:d9:35:2d:54:5d:e2:cf:8f:41:
d1:8c:d9:ba:21:f7:77:56:99:b3:57:ac:56:d4:d3:b5:75:6c:
e7:75:cd:2c:cd:e3:25:c3:b4:8e:bc:c1:c9:d7:c0:58:26:84:
72:ec:19:e8:5d:d9:53:3d:4f:21:6a:1d:0d:28:8a:56:46:de:
10:e8:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:28 2026 by rpki-client