Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/0/AS17711.roa
File: AS17711.roa (raw, json)
Hash identifier: HXnFQ1ogZR2j1qGYqwrCTC9+3osb0O4DBAASmnaoNYs=
Subject key identifier: B0:7A:C6:14:00:7F:22:15:CA:84:50:6B:3D:58:D2:FB:38:CF:47:58
Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
Certificate serial: 2DC523B608676E1AB964D8FEC3592527D8FB7873
Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/AS17711.roa
Signing time: Tue 12 May 2026 01:50:11 +0000
ROA not before: Tue 12 May 2026 01:45:11 +0000
ROA not after: Tue 11 May 2027 01:50:11 +0000
asID: 17711
IP address blocks: 163.28.160.0/20 maxlen: 20
203.64.34.0/23 maxlen: 23
203.64.40.0/22 maxlen: 22
203.64.76.0/22 maxlen: 22
203.64.80.0/21 maxlen: 21
203.68.24.0/23 maxlen: 23
203.68.59.0/24 maxlen: 24
203.68.60.0/22 maxlen: 22
203.68.72.0/24 maxlen: 24
203.68.153.0/24 maxlen: 24
203.68.154.0/23 maxlen: 23
203.68.200.0/23 maxlen: 23
203.68.210.0/24 maxlen: 24
203.71.0.0/23 maxlen: 23
203.71.58.0/23 maxlen: 23
203.71.60.0/23 maxlen: 23
203.71.244.0/24 maxlen: 24
203.72.48.0/22 maxlen: 22
203.72.73.0/24 maxlen: 24
203.72.74.0/23 maxlen: 23
203.72.76.0/22 maxlen: 22
203.72.80.0/21 maxlen: 21
203.72.94.0/24 maxlen: 24
210.62.247.0/24 maxlen: 24
210.70.56.0/22 maxlen: 22
210.240.38.0/23 maxlen: 23
210.240.40.0/21 maxlen: 21
210.240.48.0/20 maxlen: 20
210.243.52.0/23 maxlen: 23
210.243.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl
rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c5:23:b6:08:67:6e:1a:b9:64:d8:fe:c3:59:25:27:d8:fb:78:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
Validity
Not Before: May 12 01:45:11 2026 GMT
Not After : May 11 01:50:11 2027 GMT
Subject: CN=B07AC614007F2215CA84506B3D58D2FB38CF4758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:79:06:00:64:a2:85:61:8c:d6:ad:32:2c:
86:70:f9:e7:19:51:e2:ab:ab:9f:84:a3:d6:09:a0:
2c:e8:a1:7b:69:4d:ac:c4:b3:e6:bc:98:75:35:dc:
34:f5:e7:6a:62:98:57:7e:3a:3f:4a:98:e2:97:0a:
ea:c8:36:99:5d:8a:d5:86:fe:ad:29:96:4d:7c:c2:
b3:18:bc:f9:9d:79:7c:b3:b0:32:e0:bf:3f:8d:ba:
da:a9:6a:18:b2:ea:cd:60:58:df:30:00:25:cf:2c:
ec:8f:0f:8f:2b:43:a0:84:69:78:13:b2:46:89:31:
88:b2:c2:b0:47:ca:00:c0:43:cc:ed:58:4b:5e:e0:
73:6e:07:f1:31:53:f1:bb:21:16:cf:51:30:69:2d:
e0:a5:01:ac:64:eb:0b:da:08:03:3e:26:8e:76:a8:
c6:bd:c8:d2:c5:c8:e6:34:4e:de:9e:d6:df:82:a0:
d8:ca:e3:b6:d3:b7:bd:8f:6b:5d:be:aa:a4:5b:34:
81:da:bf:87:31:4f:b6:0b:75:2a:bc:7d:75:8a:b3:
64:ea:6e:c6:9c:bf:c6:45:cd:a2:78:58:88:61:84:
f2:91:56:b3:cc:6f:36:25:e1:05:5c:10:89:ce:29:
2a:f8:b6:69:3e:d2:8b:f3:ba:c0:af:1e:b7:05:ae:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:C6:14:00:7F:22:15:CA:84:50:6B:3D:58:D2:FB:38:CF:47:58
X509v3 Authority Key Identifier:
keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/AS17711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.28.160.0/20
203.64.34.0/23
203.64.40.0/22
203.64.76.0-203.64.87.255
203.68.24.0/23
203.68.59.0-203.68.63.255
203.68.72.0/24
203.68.153.0-203.68.155.255
203.68.200.0/23
203.68.210.0/24
203.71.0.0/23
203.71.58.0-203.71.61.255
203.71.244.0/24
203.72.48.0/22
203.72.73.0-203.72.87.255
203.72.94.0/24
210.62.247.0/24
210.70.56.0/22
210.240.38.0-210.240.63.255
210.243.52.0-210.243.54.255
Signature Algorithm: sha256WithRSAEncryption
2d:a0:61:26:3b:ea:49:54:45:47:89:99:d2:1d:7a:67:12:9b:
44:30:c1:71:4c:f7:b6:4e:3a:8f:35:cb:c3:64:b5:a5:9f:71:
17:c3:5e:e7:6a:48:e3:a6:5b:8b:55:f0:c4:36:ed:f8:59:22:
06:1c:b6:a6:cc:b4:e6:72:a8:ed:f1:27:36:4e:21:ca:11:67:
4b:ea:8e:24:40:3f:ee:75:cd:0a:20:dd:20:a6:4a:2c:da:1d:
06:94:c9:7c:40:71:9b:4c:7b:0a:d7:b1:66:fd:9c:74:6a:c7:
51:f6:13:d7:76:ab:f7:7b:59:2d:a2:9c:33:c0:f4:07:f9:9d:
84:5c:ed:41:c3:7f:2a:8e:97:2c:b9:08:99:44:3e:39:35:a5:
47:7d:01:1f:85:a1:d7:05:a7:ff:61:d7:04:a8:dc:61:da:56:
a3:87:5b:7c:aa:90:e4:d6:26:ff:41:52:4c:87:8d:a9:60:f8:
92:8b:76:d0:03:e5:14:98:fb:e6:dd:73:ba:d6:8f:bb:23:d7:
00:f1:19:24:54:64:2d:34:db:76:5d:5c:95:30:bc:20:be:11:
6b:db:bb:bf:e6:41:27:4c:96:68:90:35:af:5c:dd:20:3e:ea:
04:a6:dd:5d:31:bc:08:ab:2e:06:52:4a:7d:29:77:56:f2:d4:
11:da:99:93
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIULcUjtghnbhq5ZNj+w1klJ9j7eHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU5QzMyMjY2ODJBRUZBOEQ2N0I4QUM2MDhDQ0NGQzhB
MDk2MTBDRDAeFw0yNjA1MTIwMTQ1MTFaFw0yNzA1MTEwMTUwMTFaMDMxMTAvBgNV
BAMTKEIwN0FDNjE0MDA3RjIyMTVDQTg0NTA2QjNENThEMkZCMzhDRjQ3NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYXkGAGSihWGM1q0yLIZw+ecZ
UeKrq5+Eo9YJoCzooXtpTazEs+a8mHU13DT152pimFd+Oj9KmOKXCurINplditWG
/q0plk18wrMYvPmdeXyzsDLgvz+Nutqpahiy6s1gWN8wACXPLOyPD48rQ6CEaXgT
skaJMYiywrBHygDAQ8ztWEte4HNuB/ExU/G7IRbPUTBpLeClAaxk6wvaCAM+Jo52
qMa9yNLFyOY0Tt6e1t+CoNjK47bTt72Pa12+qqRbNIHav4cxT7YLdSq8fXWKs2Tq
bsacv8ZFzaJ4WIhhhPKRVrPMbzYl4QVcEInOKSr4tmk+0ovzusCvHrcFrmL7AgMB
AAGjggJhMIICXTAdBgNVHQ4EFgQUsHrGFAB/IhXKhFBrPVjS+zjPR1gwHwYDVR0j
BBgwFoAUbpwyJmgq76jWe4rGCMzPyKCWEM0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MC82RTlDMzIyNjY4MkFFRkE4RDY3QjhBQzYwOENDQ0ZDOEEwOTYxMENELmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzZFOUMzMjI2NjgyQUVGQThENjdCOEFDNjA4Q0ND
RkM4QTA5NjEwQ0QuY2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8wL0FTMTc3MTEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgc0GCCsGAQUFBwEHAQH/BIG9MIG6MIG3
BAIAATCBsAMEBKMcoAMEActAIgMEAstAKDAMAwQCy0BMAwQDy0BQAwQBy0QYMAwD
BADLRDsDBAbLRAADBADLREgwDAMEAMtEmQMEAstEmAMEActEyAMEAMtE0gMEActH
ADAMAwQBy0c6AwQBy0c8AwQAy0f0AwQCy0gwMAwDBADLSEkDBAPLSFADBADLSF4D
BADSPvcDBALSRjgwDAMEAdLwJgMEBtLwADAMAwQC0vM0AwQA0vM2MA0GCSqGSIb3
DQEBCwUAA4IBAQAtoGEmO+pJVEVHiZnSHXpnEptEMMFxTPe2TjqPNcvDZLWln3EX
w17nakjjpluLVfDENu34WSIGHLamzLTmcqjt8Sc2TiHKEWdL6o4kQD/udc0KIN0g
pkos2h0GlMl8QHGbTHsK17Fm/Zx0asdR9hPXdqv3e1ktopwzwPQH+Z2EXO1Bw38q
jpcsuQiZRD45NaVHfQEfhaHXBaf/YdcEqNxh2lajh1t8qpDk1ib/QVJMh42pYPiS
i3bQA+UUmPvm3XO61o+7I9cA8RkkVGQtNNt2XVyVMLwgvhFr27u/5kEnTJZokDWv
XN0gPuoEpt1dMbwIqy4GUkp9KXdW8tQR2pmT
-----END CERTIFICATE-----
Generated at Tue May 12 23:00:48 2026 by rpki-client