Route Origin Authorization
$ rpki-client -vvvf rpkica.twnic.tw/rpki/FET/0/AS4780.roa
File: AS4780.roa (raw, json)
Hash identifier: aNdYnSvxEwrSuutlnm4Mntxv5bcH8xQasZk34Rr9r94=
Subject key identifier: D3:C5:B9:E7:E6:35:B9:74:EE:1D:D9:6D:9F:AB:8A:21:48:CA:DE:00
Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Certificate serial: 2393D1E780684E19790F0AD6294067249031FBF9
Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS4780.roa
Signing time: Tue 03 Nov 2026 08:24:03 +0000
ROA not before: Tue 03 Nov 2026 08:19:03 +0000
ROA not after: Tue 02 Nov 2027 08:24:03 +0000
asID: 4780
IP address blocks: 60.244.0.0/22 maxlen: 24
60.244.64.0/18 maxlen: 24
124.219.0.0/17 maxlen: 24
203.79.135.0/24 maxlen: 24
203.79.152.0/22 maxlen: 24
203.79.156.0/22 maxlen: 24
203.79.164.0/22 maxlen: 24
203.79.168.0/22 maxlen: 24
203.79.176.0/20 maxlen: 24
203.79.199.0/24 maxlen: 24
203.79.200.0/24 maxlen: 24
203.79.208.0/22 maxlen: 24
203.79.232.0/22 maxlen: 24
203.79.236.0/22 maxlen: 24
203.79.242.0/24 maxlen: 24
203.79.245.0/24 maxlen: 24
203.207.44.0/22 maxlen: 24
210.58.128.0/19 maxlen: 24
210.63.192.0/19 maxlen: 24
210.63.232.0/21 maxlen: 24
210.85.0.0/22 maxlen: 24
210.85.16.0/20 maxlen: 24
210.85.48.0/20 maxlen: 24
210.200.0.0/19 maxlen: 24
210.200.85.0/24 maxlen: 24
210.200.116.0/22 maxlen: 24
210.200.120.0/21 maxlen: 24
210.200.160.0/21 maxlen: 24
210.200.168.0/22 maxlen: 24
210.200.192.0/20 maxlen: 24
210.200.240.0/22 maxlen: 24
210.200.244.0/23 maxlen: 24
210.201.0.0/19 maxlen: 24
210.201.34.0/24 maxlen: 24
210.201.35.0/24 maxlen: 24
210.201.36.0/22 maxlen: 24
210.201.40.0/22 maxlen: 24
210.201.44.0/22 maxlen: 24
210.201.48.0/22 maxlen: 24
210.201.56.0/22 maxlen: 24
210.201.67.0/24 maxlen: 24
210.201.68.0/22 maxlen: 24
210.201.84.0/22 maxlen: 24
210.201.88.0/22 maxlen: 24
210.201.93.0/24 maxlen: 24
210.201.96.0/19 maxlen: 24
210.201.146.0/24 maxlen: 24
210.201.160.0/19 maxlen: 24
210.201.192.0/18 maxlen: 24
210.202.0.0/19 maxlen: 24
210.202.32.0/20 maxlen: 24
210.202.48.0/21 maxlen: 24
210.202.64.0/19 maxlen: 24
210.202.96.0/20 maxlen: 24
210.202.126.0/24 maxlen: 24
210.202.155.0/24 maxlen: 24
210.202.172.0/24 maxlen: 24
210.202.175.0/24 maxlen: 24
210.202.179.0/24 maxlen: 24
210.202.192.0/18 maxlen: 24
210.202.248.0/24 maxlen: 24
210.203.64.0/18 maxlen: 24
211.76.104.0/23 maxlen: 24
219.91.0.0/17 maxlen: 24
222.156.4.0/22 maxlen: 24
222.156.8.0/21 maxlen: 24
222.156.16.0/20 maxlen: 24
222.156.32.0/21 maxlen: 24
222.156.72.0/21 maxlen: 24
222.156.80.0/21 maxlen: 24
222.156.100.0/22 maxlen: 24
222.156.108.0/22 maxlen: 24
222.156.112.0/20 maxlen: 24
222.156.128.0/17 maxlen: 24
222.156.254.0/24 maxlen: 24
222.157.64.0/19 maxlen: 24
2404:0:10a5::/48 maxlen: 48
2404:0:10a6::/48 maxlen: 48
2404:0:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 15:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:93:d1:e7:80:68:4e:19:79:0f:0a:d6:29:40:67:24:90:31:fb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Validity
Not Before: Nov 3 08:19:03 2026 GMT
Not After : Nov 2 08:24:03 2027 GMT
Subject: CN=D3C5B9E7E635B974EE1DD96D9FAB8A2148CADE00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:83:34:f3:76:80:93:28:ca:03:f1:ec:b8:
dc:67:93:ae:c9:5e:eb:a6:d3:4b:dc:5a:a4:c6:c5:
4d:03:61:b2:e9:cd:69:9f:bc:e5:f9:55:62:00:66:
b0:c3:5d:53:ef:ad:5d:d5:17:13:1e:3a:c1:54:1b:
fe:45:76:6e:5f:cb:7e:a6:80:b5:35:94:55:01:41:
10:a9:3a:9c:89:ea:df:df:49:c8:4e:41:d9:a0:fe:
59:c2:84:38:79:32:86:d2:81:0b:f3:c6:80:8c:4c:
11:d0:69:97:6a:a7:f3:b7:81:7d:54:18:9b:7f:37:
13:fa:92:6c:79:6f:c4:a2:c8:8d:b9:ab:96:00:86:
de:14:f4:d4:bc:ac:ff:fb:b3:25:de:dd:15:9f:3d:
fd:ea:ad:b3:73:a3:12:fe:c4:a4:6f:e0:09:07:47:
54:38:bf:a4:97:c7:a8:4b:30:e8:5b:2b:fc:77:f6:
93:99:16:22:9b:5e:65:d1:a4:f4:27:e7:e3:c4:3e:
28:2d:11:1e:47:6d:c4:d8:a7:eb:b5:c3:1e:40:8f:
e9:9c:a4:fa:51:62:3f:ca:94:e8:36:c9:27:02:31:
50:dc:ad:36:14:65:5a:f3:77:3c:fc:18:70:75:89:
27:3a:ea:b0:22:19:47:6d:5e:57:f6:48:a1:25:48:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:B9:E7:E6:35:B9:74:EE:1D:D9:6D:9F:AB:8A:21:48:CA:DE:00
X509v3 Authority Key Identifier:
keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS4780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/22
60.244.64.0/18
124.219.0.0/17
203.79.135.0/24
203.79.152.0/21
203.79.164.0-203.79.171.255
203.79.176.0/20
203.79.199.0-203.79.200.255
203.79.208.0/22
203.79.232.0/21
203.79.242.0/24
203.79.245.0/24
203.207.44.0/22
210.58.128.0/19
210.63.192.0/19
210.63.232.0/21
210.85.0.0/22
210.85.16.0/20
210.85.48.0/20
210.200.0.0/19
210.200.85.0/24
210.200.116.0-210.200.127.255
210.200.160.0-210.200.171.255
210.200.192.0/20
210.200.240.0-210.200.245.255
210.201.0.0/19
210.201.34.0-210.201.51.255
210.201.56.0/22
210.201.67.0-210.201.71.255
210.201.84.0-210.201.91.255
210.201.93.0/24
210.201.96.0/19
210.201.146.0/24
210.201.160.0-210.202.55.255
210.202.64.0-210.202.111.255
210.202.126.0/24
210.202.155.0/24
210.202.172.0/24
210.202.175.0/24
210.202.179.0/24
210.202.192.0/18
210.203.64.0/18
211.76.104.0/23
219.91.0.0/17
222.156.4.0-222.156.39.255
222.156.72.0-222.156.87.255
222.156.100.0/22
222.156.108.0-222.156.255.255
222.157.64.0/19
IPv6:
2404:0:10a5::-2404:0:10a6:ffff:ffff:ffff:ffff:ffff
2404:0:5000::/36
Signature Algorithm: sha256WithRSAEncryption
11:70:e5:62:a3:8d:4e:c1:a9:f1:c5:f3:d0:be:2f:51:ca:94:
17:2a:ef:16:37:a6:bc:a7:0b:7b:4a:b4:93:7d:fe:b0:67:6e:
65:7a:25:d7:6b:4d:6f:90:36:ca:5b:a1:4e:a3:0e:18:78:51:
b1:bb:af:e2:b2:5a:ec:9e:9f:d1:25:aa:1f:f2:84:f5:a9:1d:
20:60:98:8a:35:4c:f7:5e:b5:d1:7d:62:2f:0f:bd:44:d7:4b:
d1:99:74:dd:23:eb:41:9f:99:fb:2a:e6:67:6a:ba:f3:39:55:
3a:c8:ce:c3:9b:3d:be:50:84:4c:72:8e:d6:7b:69:be:be:d3:
e0:ad:21:fd:3f:e8:5e:a4:bc:cd:eb:4f:84:38:d1:38:70:61:
ac:cd:57:61:48:43:dd:84:98:36:66:21:82:87:97:81:f8:f9:
cd:4d:47:de:0e:51:6b:4d:14:ba:cb:c1:f8:f7:c1:f0:2d:f3:
d7:8c:54:e8:6f:c3:4d:aa:c9:69:20:a5:2e:91:ca:40:1f:64:
6a:23:dc:dd:76:13:e1:76:bc:af:e5:e5:e1:22:27:2e:be:22:
ce:23:3e:c4:a5:02:3f:e7:33:56:1a:58:cc:c7:c6:c7:5b:bd:
f3:7f:61:61:a2:69:96:c6:ae:84:64:7f:f3:17:5a:17:cb:f3:
2f:bc:54:d2
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUI5PR54BoThl5DwrWKUBnJJAx+/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4
NDI0NkQxMDAeFw0yNjExMDMwODE5MDNaFw0yNzExMDIwODI0MDNaMDMxMTAvBgNV
BAMTKEQzQzVCOUU3RTYzNUI5NzRFRTFERDk2RDlGQUI4QTIxNDhDQURFMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChY4M083aAkyjKA/HsuNxnk67J
Xuum00vcWqTGxU0DYbLpzWmfvOX5VWIAZrDDXVPvrV3VFxMeOsFUG/5Fdm5fy36m
gLU1lFUBQRCpOpyJ6t/fSchOQdmg/lnChDh5MobSgQvzxoCMTBHQaZdqp/O3gX1U
GJt/NxP6kmx5b8SiyI25q5YAht4U9NS8rP/7syXe3RWfPf3qrbNzoxL+xKRv4AkH
R1Q4v6SXx6hLMOhbK/x39pOZFiKbXmXRpPQn5+PEPigtER5HbcTYp+u1wx5Aj+mc
pPpRYj/KlOg2yScCMVDcrTYUZVrzdzz8GHB1iSc66rAiGUdtXlf2SKElSInhAgMB
AAGjggNiMIIDXjAdBgNVHQ4EFgQU08W55+Y1uXTuHdltn6uKIUjK3gAwHwYDVR0j
BBgwFoAUcfog/Cac6YBbLGflmzV6poQkbRAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAv
NzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4NDI0NkQxMC5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS83MUZBMjBGQzI2OUNFOTgwNUIyQzY3RTU5QjM1N0FB
Njg0MjQ2RDEwLmNlcjBJBggrBgEFBQcBCwQ9MDswOQYIKwYBBQUHMAuGLXJzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAvQVM0NzgwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMIIB0gYIKwYBBQUHAQcBAf8EggHBMIIBvTCCAZUE
AgABMIIBjQMEAjz0AAMEBjz0QAMEB3zbAAMEAMtPhwMEA8tPmDAMAwQCy0+kAwQC
y0+oAwQEy0+wMAwDBADLT8cDBADLT8gDBALLT9ADBAPLT+gDBADLT/IDBADLT/UD
BALLzywDBAXSOoADBAXSP8ADBAPSP+gDBALSVQADBATSVRADBATSVTADBAXSyAAD
BADSyFUwDAMEAtLIdAMEB9LIADAMAwQF0sigAwQC0sioAwQE0sjAMAwDBATSyPAD
BAHSyPQDBAXSyQAwDAMEAdLJIgMEAtLJMAMEAtLJODAMAwQA0slDAwQD0slAMAwD
BALSyVQDBALSyVgDBADSyV0DBAXSyWADBADSyZIwDAMEBdLJoAMEA9LKMDAMAwQG
0spAAwQE0spgAwQA0sp+AwQA0sqbAwQA0sqsAwQA0sqvAwQA0sqzAwQG0srAAwQG
0stAAwQB00xoAwQH21sAMAwDBALenAQDBAPenCAwDAMEA96cSAMEA96cUAMEAt6c
ZDALAwQC3pxsAwMA3pwDBAXenUAwIgQCAAIwHDASAwcAJAQAABClAwcAJAQAABCm
AwYEJAQAAFAwDQYJKoZIhvcNAQELBQADggEBABFw5WKjjU7BqfHF89C+L1HKlBcq
7xY3prynC3tKtJN9/rBnbmV6JddrTW+QNspboU6jDhh4UbG7r+KyWuyen9Elqh/y
hPWpHSBgmIo1TPdetdF9Yi8PvUTXS9GZdN0j60Gfmfsq5mdquvM5VTrIzsObPb5Q
hExyjtZ7ab6+0+CtIf0/6F6kvM3rT4Q40ThwYazNV2FIQ92EmDZmIYKHl4H4+c1N
R94OUWtNFLrLwfj3wfAt89eMVOhvw02qyWkgpS6RykAfZGoj3N12E+F2vK/l5eEi
Jy6+Is4jPsSlAj/nM1YaWMzHxsdbvfN/YWGiaZbGroRkf/MXWhfL8y+8VNI=
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:36:40 2026 by rpki-client