Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS17709.roa
File: AS17709.roa (raw, json)
Hash identifier: QQslVSRK+cRxzZNmuCIMKcj+y7+VSkFoqqXagzVr5Q4=
Subject key identifier: 3B:8E:84:BD:A1:8C:2D:E3:07:2A:6E:1D:36:2C:49:BE:E3:6D:19:1C
Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Certificate serial: 3B47CB06A4DF4A5C57F399A680FF89BA701D8A19
Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS17709.roa
Signing time: Mon 11 May 2026 17:35:55 +0000
ROA not before: Mon 11 May 2026 17:30:55 +0000
ROA not after: Mon 10 May 2027 17:35:55 +0000
asID: 17709
IP address blocks: 43.240.104.0/22 maxlen: 22
43.240.104.0/22 maxlen: 24
60.244.0.0/17 maxlen: 17
60.244.0.0/17 maxlen: 24
60.244.128.0/17 maxlen: 17
60.244.128.0/17 maxlen: 24
101.136.0.0/14 maxlen: 24
103.36.116.0/22 maxlen: 22
103.36.116.0/22 maxlen: 24
124.218.0.0/16 maxlen: 17
124.218.0.0/16 maxlen: 24
124.219.0.0/17 maxlen: 17
124.219.0.0/17 maxlen: 24
202.178.128.0/17 maxlen: 18
202.178.128.0/17 maxlen: 24
202.178.180.0/22 maxlen: 24
203.79.128.0/17 maxlen: 18
203.79.128.0/17 maxlen: 24
203.79.248.0/21 maxlen: 24
203.79.251.0/24 maxlen: 24
203.201.32.0/20 maxlen: 24
203.207.32.0/20 maxlen: 24
210.58.0.0/16 maxlen: 24
210.58.88.0/24 maxlen: 24
210.58.104.0/22 maxlen: 24
210.58.112.0/20 maxlen: 24
210.58.120.0/24 maxlen: 24
210.63.192.0/19 maxlen: 24
210.63.200.0/21 maxlen: 24
210.63.208.0/21 maxlen: 24
210.63.216.0/22 maxlen: 24
210.63.224.0/19 maxlen: 24
210.63.232.0/22 maxlen: 24
210.63.253.0/24 maxlen: 24
210.85.0.0/16 maxlen: 24
210.200.0.0/16 maxlen: 24
210.200.64.0/18 maxlen: 24
210.200.148.0/22 maxlen: 24
210.201.0.0/16 maxlen: 24
210.201.32.0/22 maxlen: 24
210.201.72.0/23 maxlen: 24
210.201.72.0/24 maxlen: 24
210.201.78.0/24 maxlen: 24
210.202.0.0/19 maxlen: 19
210.202.64.0/18 maxlen: 24
210.202.128.0/17 maxlen: 24
210.202.128.0/18 maxlen: 24
210.202.192.0/18 maxlen: 24
210.203.0.0/17 maxlen: 24
210.203.0.0/24 maxlen: 24
210.203.20.0/22 maxlen: 24
210.203.48.0/20 maxlen: 24
211.76.96.0/20 maxlen: 24
218.34.0.0/16 maxlen: 24
218.35.0.0/16 maxlen: 24
218.184.0.0/16 maxlen: 24
218.187.0.0/16 maxlen: 24
219.91.0.0/17 maxlen: 24
222.156.0.0/16 maxlen: 24
222.157.0.0/16 maxlen: 24
222.250.0.0/16 maxlen: 24
222.250.0.0/18 maxlen: 24
222.250.64.0/18 maxlen: 24
222.250.128.0/18 maxlen: 24
222.250.192.0/18 maxlen: 24
222.250.192.0/22 maxlen: 24
222.251.0.0/17 maxlen: 24
223.22.0.0/15 maxlen: 24
223.23.63.0/24 maxlen: 24
2001:f10::/32 maxlen: 48
2404::/26 maxlen: 48
2404::/36 maxlen: 48
2404:0:1000::/36 maxlen: 48
2404:0:1000::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:47:cb:06:a4:df:4a:5c:57:f3:99:a6:80:ff:89:ba:70:1d:8a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Validity
Not Before: May 11 17:30:55 2026 GMT
Not After : May 10 17:35:55 2027 GMT
Subject: CN=3B8E84BDA18C2DE3072A6E1D362C49BEE36D191C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:26:13:a6:e2:36:50:e6:02:e0:9b:d4:8e:56:
a0:ab:03:e9:5a:9d:dc:2b:9e:7d:a2:47:62:96:a9:
39:3c:b3:2e:99:8b:45:f2:f0:a1:03:3e:60:de:1c:
60:5f:ff:b9:f9:c2:b2:3f:82:c5:7b:0e:ef:54:c9:
86:8e:a0:c5:1d:7d:94:2c:7c:28:7f:50:7d:d2:71:
69:bd:de:69:36:41:e8:1e:57:1b:1d:5c:07:8c:ce:
91:b9:28:f0:c5:be:f7:c5:d0:5c:35:29:b0:0c:93:
6e:8f:f9:8a:0a:83:a0:d3:7d:44:28:a5:d3:da:c3:
bd:13:e0:06:f4:33:ac:6d:e6:f9:dc:91:f3:15:e9:
7e:6a:c8:89:d3:3c:1b:f5:ad:01:cd:07:2d:67:83:
92:e7:59:74:fa:0d:1f:b1:93:32:75:51:6a:92:f0:
2d:a7:92:7e:f6:e1:3a:ca:51:59:00:8f:d5:f9:18:
f8:f2:f4:7e:e5:9d:56:ec:67:3f:ef:82:f7:54:4a:
d8:4f:e9:39:f8:dd:7d:90:16:42:e5:70:96:55:44:
d5:ef:5e:30:13:f4:24:65:d9:76:70:74:c8:77:52:
ed:26:52:f3:9d:9c:67:a3:04:d1:4a:2c:e4:92:e8:
ee:f4:31:56:99:11:a0:9c:18:ac:9d:64:58:ac:9c:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8E:84:BD:A1:8C:2D:E3:07:2A:6E:1D:36:2C:49:BE:E3:6D:19:1C
X509v3 Authority Key Identifier:
keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS17709.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.104.0/22
60.244.0.0/16
101.136.0.0/14
103.36.116.0/22
124.218.0.0-124.219.127.255
202.178.128.0/17
203.79.128.0/17
203.201.32.0/20
203.207.32.0/20
210.58.0.0/16
210.63.192.0/18
210.85.0.0/16
210.200.0.0-210.202.31.255
210.202.64.0-210.203.127.255
211.76.96.0/20
218.34.0.0/15
218.184.0.0/16
218.187.0.0/16
219.91.0.0/17
222.156.0.0/15
222.250.0.0-222.251.127.255
223.22.0.0/15
IPv6:
2001:f10::/32
2404::/26
Signature Algorithm: sha256WithRSAEncryption
9e:a3:73:42:96:c2:75:12:1a:fc:d0:3a:8b:18:27:3f:94:4a:
33:64:a3:19:78:95:08:b8:bd:61:72:cb:44:76:12:18:09:4c:
e5:fb:c0:cd:3e:41:84:20:89:9c:36:a9:1f:2c:17:3b:5e:45:
b5:55:11:26:08:29:9c:f8:54:fb:eb:48:9e:e4:4c:7e:81:a6:
db:a0:9f:e5:26:1a:4e:ad:96:49:b4:73:b1:e4:c5:d9:25:f4:
ed:57:cc:7b:ec:c6:06:38:58:3e:37:bd:79:88:1c:7f:1f:88:
01:fe:d5:3d:6e:be:a3:fc:43:b6:83:1b:f4:99:f3:4e:ca:a4:
4c:98:fd:ec:e5:f8:00:f7:04:22:5a:81:c4:d0:3a:00:99:7d:
52:c4:9a:b3:1c:d3:9d:13:c5:eb:8c:a2:58:33:24:21:9a:1f:
b2:85:9d:31:57:8e:c0:b2:2f:54:b9:7d:4f:1f:3a:79:97:8a:
42:13:80:58:e4:68:3c:b7:3f:58:28:bf:d4:94:d8:46:5a:04:
4b:22:f8:d2:ef:cc:e5:24:b7:c4:79:6e:b6:ce:06:09:2d:d4:
6e:be:fa:c1:3e:00:ee:4b:dd:36:de:b4:bd:54:26:22:4a:d9:
2e:2b:26:9b:ac:b3:90:31:59:a2:1e:79:74:28:9b:5b:39:51:
b9:dc:c5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:50:43 2026 by rpki-client