Route Origin Authorization
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/0/AS18177.roa
File: AS18177.roa (raw, json)
Hash identifier: UhyuHxslllfMQFLnPLZd7KoZfcoNG177s8onTkcW/8M=
Subject key identifier: 5F:C0:96:3F:B6:DE:3B:C4:2C:2B:0C:4F:2E:B9:EE:E1:43:58:CE:2D
Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
Certificate serial: 0F7494299797BE31CDA0C0446A6FD18336AAF5C0
Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/AS18177.roa
Signing time: Tue 13 Oct 2026 06:24:01 +0000
ROA not before: Tue 13 Oct 2026 06:19:01 +0000
ROA not after: Tue 12 Oct 2027 06:24:01 +0000
asID: 18177
IP address blocks: 120.114.0.0/16 maxlen: 24
120.115.0.0/16 maxlen: 16
120.116.0.0/16 maxlen: 16
120.117.0.0/16 maxlen: 16
163.26.0.0/16 maxlen: 16
163.28.112.0/20 maxlen: 20
203.64.18.0/23 maxlen: 23
203.64.20.0/23 maxlen: 23
203.64.53.0/24 maxlen: 24
203.64.230.0/23 maxlen: 23
203.64.232.0/22 maxlen: 22
203.64.236.0/23 maxlen: 23
203.68.23.0/24 maxlen: 24
203.68.26.0/23 maxlen: 23
203.68.74.0/24 maxlen: 24
203.68.102.0/24 maxlen: 24
203.68.156.0/22 maxlen: 22
203.68.160.0/22 maxlen: 22
203.68.164.0/24 maxlen: 24
203.68.179.0/24 maxlen: 24
203.68.180.0/22 maxlen: 22
203.68.184.0/23 maxlen: 23
203.68.191.0/24 maxlen: 24
203.71.52.0/23 maxlen: 23
203.71.54.0/24 maxlen: 24
203.71.76.0/24 maxlen: 24
203.71.96.0/24 maxlen: 24
203.71.112.0/22 maxlen: 22
203.71.116.0/23 maxlen: 23
203.71.176.0/24 maxlen: 24
203.71.220.0/22 maxlen: 22
203.72.21.0/24 maxlen: 24
203.72.42.0/24 maxlen: 24
203.72.191.0/24 maxlen: 24
203.72.206.0/23 maxlen: 23
203.72.208.0/24 maxlen: 24
210.59.12.0/22 maxlen: 22
210.59.16.0/22 maxlen: 22
210.59.20.0/23 maxlen: 23
210.59.35.0/24 maxlen: 24
210.59.92.0/24 maxlen: 24
210.59.95.0/24 maxlen: 24
210.59.96.0/23 maxlen: 23
210.59.98.0/24 maxlen: 24
210.60.2.0/23 maxlen: 23
210.60.4.0/22 maxlen: 22
210.60.36.0/24 maxlen: 24
210.60.50.0/23 maxlen: 23
210.60.73.0/24 maxlen: 24
210.60.74.0/23 maxlen: 23
210.60.136.0/22 maxlen: 22
210.60.165.0/24 maxlen: 24
210.60.224.0/24 maxlen: 24
210.60.246.0/24 maxlen: 24
210.60.253.0/24 maxlen: 24
210.70.37.0/24 maxlen: 24
210.70.111.0/24 maxlen: 24
210.70.112.0/22 maxlen: 22
210.70.137.0/24 maxlen: 24
210.70.138.0/24 maxlen: 24
210.70.145.0/24 maxlen: 24
210.70.146.0/23 maxlen: 23
210.70.148.0/22 maxlen: 22
210.70.152.0/21 maxlen: 21
210.70.160.0/20 maxlen: 20
210.70.176.0/21 maxlen: 21
210.70.250.0/23 maxlen: 23
210.71.26.0/23 maxlen: 23
210.71.31.0/24 maxlen: 24
210.71.80.0/23 maxlen: 23
210.71.82.0/24 maxlen: 24
210.71.102.0/24 maxlen: 24
210.71.109.0/24 maxlen: 24
210.71.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl
rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 15:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:74:94:29:97:97:be:31:cd:a0:c0:44:6a:6f:d1:83:36:aa:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
Validity
Not Before: Oct 13 06:19:01 2026 GMT
Not After : Oct 12 06:24:01 2027 GMT
Subject: CN=5FC0963FB6DE3BC42C2B0C4F2EB9EEE14358CE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:da:a8:ff:cc:a0:50:dd:b7:0c:a5:6b:26:
d4:79:97:2f:8d:f0:c4:bf:a8:94:4a:ff:88:37:f8:
2f:e9:8f:17:4e:ad:11:f8:a5:7b:25:28:88:2e:93:
c0:b8:36:bf:f7:7b:18:4a:b3:d2:62:5d:17:69:04:
b8:3d:c0:e2:9f:8e:79:d9:ea:28:6f:57:15:94:86:
86:90:d3:75:99:63:81:88:55:8d:b4:7a:c9:15:47:
c3:1d:fb:90:b2:80:6a:57:d2:bd:7d:07:c6:f3:45:
02:99:13:f9:79:58:eb:4e:23:63:22:fc:00:dd:5f:
eb:7c:62:8a:2a:b1:76:72:02:73:a6:1d:da:36:27:
ee:de:9e:2b:62:4c:9a:c2:eb:1c:93:8e:a8:02:bb:
06:cd:2c:08:a2:84:5d:14:fa:f5:fc:05:89:e4:3b:
59:c6:fa:7f:48:32:65:51:a4:78:9a:47:51:00:a6:
93:ae:7d:6d:22:5e:99:d1:c9:d9:91:44:a9:bc:d4:
dc:b7:11:42:26:b8:f2:ea:bb:2f:d2:e0:ba:20:35:
bf:48:a7:ca:e4:35:34:7d:da:51:63:09:61:56:53:
b9:4c:f7:09:36:d5:78:7a:9a:d5:21:5b:7e:9c:e4:
8b:c5:f9:83:b6:7c:26:d7:60:16:00:02:1c:97:71:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:96:3F:B6:DE:3B:C4:2C:2B:0C:4F:2E:B9:EE:E1:43:58:CE:2D
X509v3 Authority Key Identifier:
keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/AS18177.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.114.0.0-120.117.255.255
163.26.0.0/16
163.28.112.0/20
203.64.18.0-203.64.21.255
203.64.53.0/24
203.64.230.0-203.64.237.255
203.68.23.0/24
203.68.26.0/23
203.68.74.0/24
203.68.102.0/24
203.68.156.0-203.68.164.255
203.68.179.0-203.68.185.255
203.68.191.0/24
203.71.52.0-203.71.54.255
203.71.76.0/24
203.71.96.0/24
203.71.112.0-203.71.117.255
203.71.176.0/24
203.71.220.0/22
203.72.21.0/24
203.72.42.0/24
203.72.191.0/24
203.72.206.0-203.72.208.255
210.59.12.0-210.59.21.255
210.59.35.0/24
210.59.92.0/24
210.59.95.0-210.59.98.255
210.60.2.0-210.60.7.255
210.60.36.0/24
210.60.50.0/23
210.60.73.0-210.60.75.255
210.60.136.0/22
210.60.165.0/24
210.60.224.0/24
210.60.246.0/24
210.60.253.0/24
210.70.37.0/24
210.70.111.0-210.70.115.255
210.70.137.0-210.70.138.255
210.70.145.0-210.70.183.255
210.70.250.0/23
210.71.26.0/23
210.71.31.0/24
210.71.80.0-210.71.82.255
210.71.102.0/24
210.71.109.0/24
210.71.112.0/23
Signature Algorithm: sha256WithRSAEncryption
50:01:ab:9a:b3:75:5c:d5:8d:f2:5b:b1:46:8f:dd:31:bc:fd:
53:03:78:1e:94:03:10:2d:37:bb:12:6b:41:38:35:2f:7a:d0:
2c:11:61:22:44:92:bb:3f:de:83:f2:8c:b9:10:d1:34:e2:c3:
b1:25:0e:57:a9:a2:76:d6:96:b4:e0:a6:bd:0f:ad:6e:36:f7:
d9:28:84:94:d8:ce:2a:31:72:01:be:ef:5e:0f:f3:6f:cc:ac:
b1:ca:cf:54:74:4c:eb:10:02:17:55:65:ea:21:46:0d:92:d2:
03:46:5c:e5:5b:18:b5:30:03:07:7d:78:15:be:42:57:94:c4:
dc:49:d9:3e:b8:4e:86:65:1c:93:0b:1e:b8:d7:6f:c2:34:9f:
6a:4d:5b:2c:4a:ab:30:8c:93:51:f2:d3:f9:2f:d1:16:f6:89:
90:e9:ec:fe:9c:63:4b:6b:00:5d:9e:d8:f1:b8:6b:7f:2a:2f:
0d:61:12:dc:56:17:1c:0b:f8:d1:52:37:1d:45:83:27:79:7c:
63:11:1e:42:22:50:33:76:e1:fd:df:d7:7c:6a:65:05:13:46:
c5:2d:81:52:3f:36:71:69:35:12:a2:3e:54:28:7d:09:d8:26:
b3:0e:ee:8d:d9:78:b9:ba:0f:68:65:fe:b9:81:4e:0a:74:23:
91:10:02:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:39:46 2026 by rpki-client