Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS4780.roa
File: AS4780.roa (raw, json)
Hash identifier: 3doOsQ1lci/dcBoeewBHKS8r9uA8xibHfuoP96wZU8k=
Subject key identifier: BC:E7:C3:9C:CA:C8:3B:BE:13:B2:8D:A2:4A:9C:9D:8C:4F:02:AA:8D
Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial: 479CC7EEC1D93C625D925EDDDBCD6F1C7DF4E211
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS4780.roa
Signing time: Tue 12 May 2026 01:49:12 +0000
ROA not before: Tue 12 May 2026 01:44:12 +0000
ROA not after: Tue 11 May 2027 01:49:12 +0000
asID: 4780
IP address blocks: 42.0.64.0/18 maxlen: 24
45.64.228.0/22 maxlen: 24
59.104.0.0/15 maxlen: 24
60.245.64.0/19 maxlen: 24
60.245.96.0/19 maxlen: 24
61.56.192.0/19 maxlen: 24
61.56.224.0/19 maxlen: 24
61.59.0.0/16 maxlen: 24
61.61.0.0/17 maxlen: 24
61.61.6.0/24 maxlen: 24
61.61.128.0/18 maxlen: 24
61.61.156.0/22 maxlen: 24
61.66.0.0/16 maxlen: 24
103.234.40.0/22 maxlen: 24
106.104.0.0/14 maxlen: 24
106.104.0.0/16 maxlen: 24
106.105.128.0/19 maxlen: 24
112.104.0.0/15 maxlen: 24
112.104.0.0/16 maxlen: 24
112.105.0.0/16 maxlen: 24
112.105.8.0/24 maxlen: 24
112.105.64.0/18 maxlen: 24
112.105.128.0/17 maxlen: 24
113.196.0.0/16 maxlen: 24
113.196.115.0/24 maxlen: 24
115.30.64.0/18 maxlen: 24
122.146.0.0/15 maxlen: 24
122.147.16.0/21 maxlen: 24
122.147.128.0/17 maxlen: 24
122.147.160.0/19 maxlen: 24
123.51.128.0/17 maxlen: 24
123.51.180.0/24 maxlen: 24
123.51.181.0/24 maxlen: 24
123.204.0.0/15 maxlen: 24
123.204.0.0/16 maxlen: 24
123.205.0.0/16 maxlen: 24
123.205.15.0/24 maxlen: 24
123.205.32.0/19 maxlen: 19
123.205.39.0/24 maxlen: 24
123.205.56.0/24 maxlen: 24
123.205.58.0/24 maxlen: 24
123.205.64.0/19 maxlen: 19
123.205.76.0/24 maxlen: 24
123.205.105.0/24 maxlen: 24
123.205.128.0/17 maxlen: 24
175.180.0.0/14 maxlen: 24
175.182.0.0/16 maxlen: 24
175.183.0.0/17 maxlen: 24
175.183.136.0/23 maxlen: 24
175.183.254.0/23 maxlen: 24
203.67.0.0/16 maxlen: 24
203.70.0.0/16 maxlen: 24
203.73.0.0/16 maxlen: 24
203.190.16.0/21 maxlen: 24
210.64.0.0/16 maxlen: 24
210.66.0.0/16 maxlen: 24
210.68.0.0/16 maxlen: 24
210.243.128.0/17 maxlen: 24
210.244.0.0/17 maxlen: 24
211.74.0.0/16 maxlen: 24
211.74.0.0/17 maxlen: 24
211.74.128.0/17 maxlen: 24
211.78.0.0/18 maxlen: 24
211.78.4.0/22 maxlen: 24
211.78.8.0/22 maxlen: 24
211.78.24.0/21 maxlen: 24
211.78.96.0/19 maxlen: 24
211.78.128.0/19 maxlen: 24
211.78.160.0/19 maxlen: 24
218.32.0.0/16 maxlen: 24
218.210.0.0/15 maxlen: 24
218.210.0.0/16 maxlen: 24
218.211.0.0/16 maxlen: 24
220.228.0.0/15 maxlen: 24
220.228.0.0/16 maxlen: 24
220.229.0.0/16 maxlen: 24
220.229.68.0/22 maxlen: 24
221.169.0.0/16 maxlen: 24
2001:cd8::/32 maxlen: 48
2001:4580::/26 maxlen: 48
2401:8000::/26 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:9c:c7:ee:c1:d9:3c:62:5d:92:5e:dd:db:cd:6f:1c:7d:f4:e2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Validity
Not Before: May 12 01:44:12 2026 GMT
Not After : May 11 01:49:12 2027 GMT
Subject: CN=BCE7C39CCAC83BBE13B28DA24A9C9D8C4F02AA8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:e5:7a:df:22:cd:4e:a3:61:d5:46:cc:54:
c6:bf:34:03:c7:0e:84:1b:b9:50:50:56:8b:e6:78:
ff:e2:be:80:37:72:6b:bd:8b:8a:e8:57:d7:1c:23:
8b:b1:3e:2e:47:e5:af:07:91:b1:28:5c:f9:5c:97:
f2:cc:c4:ac:56:cb:da:52:b9:ff:8e:15:00:16:d7:
5d:2f:78:da:64:2e:40:c8:71:4e:16:46:85:97:5a:
37:56:ca:42:12:8c:3b:ce:1e:cf:f4:e7:a6:2c:1a:
ab:54:29:b2:a3:42:b9:1a:fb:12:6c:8e:f3:45:a5:
aa:25:99:72:31:b0:01:b7:0a:a3:2b:38:c5:9b:af:
4a:5d:29:dc:28:b6:19:af:92:ce:37:98:88:6c:ff:
17:c8:6f:06:80:34:c7:89:94:6f:bd:1f:a9:26:b5:
56:65:9a:30:21:42:34:49:fa:c2:0e:d7:cd:17:0f:
4f:ed:15:b3:fa:c4:1b:ed:be:07:02:4e:40:3b:65:
74:f5:f4:8f:80:a2:1f:e7:24:7f:06:d5:91:f5:b5:
ed:5e:0e:32:cd:2e:ae:88:ff:6b:84:7a:45:8d:9a:
bc:89:42:8e:59:b7:7f:c6:9c:4c:e1:59:f7:f1:ea:
52:80:a1:13:0a:cd:07:66:24:19:5c:22:87:c7:4c:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:C3:9C:CA:C8:3B:BE:13:B2:8D:A2:4A:9C:9D:8C:4F:02:AA:8D
X509v3 Authority Key Identifier:
keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS4780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.0.64.0/18
45.64.228.0/22
59.104.0.0/15
60.245.64.0/18
61.56.192.0/18
61.59.0.0/16
61.61.0.0-61.61.191.255
61.66.0.0/16
103.234.40.0/22
106.104.0.0/14
112.104.0.0/15
113.196.0.0/16
115.30.64.0/18
122.146.0.0/15
123.51.128.0/17
123.204.0.0/15
175.180.0.0/14
203.67.0.0/16
203.70.0.0/16
203.73.0.0/16
203.190.16.0/21
210.64.0.0/16
210.66.0.0/16
210.68.0.0/16
210.243.128.0-210.244.127.255
211.74.0.0/16
211.78.0.0/18
211.78.96.0-211.78.191.255
218.32.0.0/16
218.210.0.0/15
220.228.0.0/15
221.169.0.0/16
IPv6:
2001:cd8::/32
2001:4580::/26
2401:8000::/26
Signature Algorithm: sha256WithRSAEncryption
48:f7:c3:25:79:68:32:6d:e6:e1:ff:fa:a8:4a:29:07:17:bd:
da:1c:d7:99:54:99:9d:54:ed:c8:62:c7:3d:75:88:ee:dd:e2:
9b:86:3f:74:3a:64:55:1e:a3:21:03:db:19:62:bb:46:ef:2d:
e6:7b:5c:32:57:16:43:6f:92:13:49:fb:b1:72:bc:bb:57:3e:
f7:51:58:41:f7:0d:ed:45:30:a2:f0:5d:37:45:1e:96:16:2c:
58:d8:59:8f:6d:ba:03:94:d6:58:a8:e3:cc:f0:98:fb:2b:fe:
b2:9b:81:33:30:0e:83:b7:73:1a:31:ea:d2:b2:b1:e9:01:0d:
f7:13:b0:df:59:12:f0:16:95:92:bb:58:70:79:bd:57:0e:27:
2e:63:0f:96:e0:e9:42:d5:96:d2:0a:f2:17:b7:80:54:f7:e4:
2b:20:04:0e:9d:88:4c:86:4c:0f:08:ee:c3:78:49:56:ca:ef:
51:63:fd:25:c7:b8:b7:31:6d:ed:7b:7a:18:be:bf:d6:5b:0e:
50:c6:95:c6:8b:74:84:07:c7:16:fd:d0:34:7f:31:f5:f2:77:
4e:ef:79:45:e6:17:09:b7:ec:06:49:0b:58:cf:7e:96:21:af:
3a:9c:c3:54:9f:f9:6a:04:ff:d4:87:86:f2:93:f0:75:b4:cc:
5a:a7:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:53:34 2026 by rpki-client