Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/0/AS1659.roa
File: AS1659.roa (raw, json)
Hash identifier: j3u3V18aHfHo/NDML42g0UQSQjnXI5q9wXWoowXLBFg=
Subject key identifier: AA:68:61:0A:48:78:85:87:88:31:8C:E1:B4:65:E5:57:10:78:8F:76
Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
Certificate serial: 58B1AEE1C0F9820B97B269EE79393018888C118C
Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/AS1659.roa
Signing time: Tue 04 Aug 2026 03:04:03 +0000
ROA not before: Tue 04 Aug 2026 02:59:03 +0000
ROA not after: Tue 03 Aug 2027 03:04:03 +0000
asID: 1659
IP address blocks: 120.96.0.0/11 maxlen: 11
120.107.0.0/16 maxlen: 16
120.107.0.0/18 maxlen: 18
120.108.0.0/16 maxlen: 16
120.108.56.0/21 maxlen: 21
120.108.64.0/18 maxlen: 18
120.109.0.0/16 maxlen: 16
120.109.0.0/18 maxlen: 18
120.109.64.0/20 maxlen: 20
120.110.0.0/16 maxlen: 16
120.110.64.0/19 maxlen: 19
120.110.96.0/20 maxlen: 20
120.110.112.0/22 maxlen: 22
120.110.116.0/23 maxlen: 23
120.113.64.0/18 maxlen: 18
120.124.0.0/16 maxlen: 16
120.125.0.0/16 maxlen: 16
163.13.0.0/16 maxlen: 16
163.14.0.0/15 maxlen: 15
163.16.0.0/13 maxlen: 19
163.22.41.0/24 maxlen: 24
163.22.44.0/22 maxlen: 22
163.22.48.0/24 maxlen: 24
163.22.177.0/24 maxlen: 24
163.22.178.0/24 maxlen: 24
163.22.228.0/22 maxlen: 22
163.22.232.0/21 maxlen: 21
163.22.240.0/20 maxlen: 20
163.24.0.0/14 maxlen: 14
163.25.0.0/18 maxlen: 18
163.25.64.0/20 maxlen: 20
163.25.80.0/22 maxlen: 22
163.25.85.0/24 maxlen: 24
163.25.120.0/21 maxlen: 21
163.25.128.0/17 maxlen: 17
163.28.0.0/16 maxlen: 16
163.28.48.0/20 maxlen: 20
163.28.80.0/20 maxlen: 20
163.30.0.0/15 maxlen: 15
163.30.0.0/16 maxlen: 16
163.32.0.0/16 maxlen: 16
203.64.0.0/16 maxlen: 16
203.64.8.0/21 maxlen: 21
203.64.44.0/23 maxlen: 23
203.64.155.0/24 maxlen: 24
203.64.158.0/23 maxlen: 23
203.64.191.0/24 maxlen: 24
203.68.0.0/16 maxlen: 16
203.68.32.0/22 maxlen: 22
203.68.36.0/23 maxlen: 23
203.68.75.0/24 maxlen: 24
203.68.203.0/24 maxlen: 24
203.68.204.0/23 maxlen: 23
203.68.243.0/24 maxlen: 24
203.68.244.0/23 maxlen: 23
203.68.248.0/23 maxlen: 23
203.68.250.0/24 maxlen: 24
203.71.0.0/16 maxlen: 16
203.71.2.0/24 maxlen: 24
203.71.16.0/23 maxlen: 23
203.71.100.0/22 maxlen: 22
203.71.118.0/23 maxlen: 23
203.71.120.0/23 maxlen: 23
203.71.136.0/22 maxlen: 22
203.71.152.0/22 maxlen: 22
203.71.156.0/24 maxlen: 24
203.71.181.0/24 maxlen: 24
203.71.186.0/23 maxlen: 23
203.71.204.0/23 maxlen: 23
203.71.212.0/24 maxlen: 24
203.71.234.0/24 maxlen: 24
203.71.236.0/24 maxlen: 24
203.71.245.0/24 maxlen: 24
203.72.0.0/16 maxlen: 24
210.59.0.0/17 maxlen: 24
210.60.0.0/16 maxlen: 24
210.62.64.0/19 maxlen: 19
210.62.224.0/20 maxlen: 20
210.62.224.0/21 maxlen: 21
210.62.240.0/21 maxlen: 21
210.67.248.0/21 maxlen: 21
210.70.0.0/16 maxlen: 16
210.70.0.0/24 maxlen: 24
210.70.26.0/23 maxlen: 23
210.70.28.0/24 maxlen: 24
210.70.72.0/21 maxlen: 21
210.70.79.0/24 maxlen: 24
210.70.80.0/21 maxlen: 21
210.70.99.0/24 maxlen: 24
210.70.125.0/24 maxlen: 24
210.70.126.0/24 maxlen: 24
210.71.0.0/17 maxlen: 17
210.71.44.0/23 maxlen: 23
210.71.46.0/24 maxlen: 24
210.240.0.0/16 maxlen: 16
210.240.187.0/24 maxlen: 24
210.240.188.0/22 maxlen: 22
210.240.192.0/22 maxlen: 22
210.240.196.0/23 maxlen: 23
210.240.212.0/23 maxlen: 23
210.240.214.0/23 maxlen: 23
210.240.224.0/21 maxlen: 21
210.243.0.0/18 maxlen: 18
210.243.49.0/24 maxlen: 24
210.243.50.0/24 maxlen: 24
2001:288::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl
rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 00:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b1:ae:e1:c0:f9:82:0b:97:b2:69:ee:79:39:30:18:88:8c:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD
Validity
Not Before: Aug 4 02:59:03 2026 GMT
Not After : Aug 3 03:04:03 2027 GMT
Subject: CN=AA68610A4878858788318CE1B465E55710788F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:07:fd:8c:52:58:0c:7f:ed:c3:d2:65:4f:
bd:97:22:08:9b:d4:6e:e3:13:95:ab:0a:07:46:8f:
2c:bb:bb:61:dc:92:d3:32:25:05:15:4a:5e:d7:f9:
aa:e3:7b:33:51:27:04:06:52:eb:22:91:12:70:b5:
80:8a:2c:6f:fe:40:0b:63:a9:66:75:4c:d7:4a:5d:
7f:02:5d:bc:a4:30:ed:dd:b3:04:34:b2:cc:5d:ba:
a7:d7:c2:38:0d:46:ec:3b:13:6f:b5:9d:82:e1:c0:
b2:b7:7c:98:57:da:19:00:9c:37:ea:67:4e:82:79:
dc:ae:8a:3d:4f:4b:b8:79:8c:b3:23:8a:b6:19:39:
2f:7e:06:44:86:a1:68:d3:e9:cd:b9:0f:91:e6:86:
af:04:b9:d2:8f:44:29:9c:82:e6:b8:6c:a9:e4:92:
37:43:8b:a0:76:43:5a:e5:c6:31:08:2f:99:04:57:
71:65:b7:78:05:19:bd:99:ac:db:17:c8:4c:2e:44:
3f:82:b0:d3:20:77:8c:f3:26:f6:83:af:bb:45:60:
78:46:b3:a1:f1:29:64:49:64:81:94:a6:de:44:73:
41:14:37:c5:f8:86:46:e0:ac:0c:14:b8:e0:18:4e:
a5:b8:5b:22:11:e7:00:35:f5:79:48:91:6e:34:96:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:68:61:0A:48:78:85:87:88:31:8C:E1:B4:65:E5:57:10:78:8F:76
X509v3 Authority Key Identifier:
keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/AS1659.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.96.0.0/11
163.13.0.0-163.28.255.255
163.30.0.0-163.32.255.255
203.64.0.0/16
203.68.0.0/16
203.71.0.0-203.72.255.255
210.59.0.0/17
210.60.0.0/16
210.62.64.0/19
210.62.224.0-210.62.247.255
210.67.248.0/21
210.70.0.0-210.71.127.255
210.240.0.0/16
210.243.0.0/18
IPv6:
2001:288::/32
Signature Algorithm: sha256WithRSAEncryption
b8:b7:b7:ea:d1:06:a0:63:0d:4b:93:b7:1b:6f:e7:c6:2c:43:
2c:3e:c5:c2:fb:1f:0c:6a:54:fa:5d:0e:2f:80:e7:b3:d7:fe:
80:c7:a6:23:ea:c7:70:f6:ab:c2:f3:51:73:1c:cb:61:68:61:
9c:bc:d4:ea:5e:15:ea:ee:0d:a0:49:53:ef:92:10:b8:ac:2e:
37:b5:bd:98:01:65:0d:0d:da:be:c5:a3:ad:56:22:33:ef:78:
e3:c2:8f:ce:5d:1f:23:62:f2:3d:e0:69:0a:06:e6:7a:b5:95:
c8:cb:97:8c:89:b8:d3:72:77:7b:2b:b1:1d:1e:ff:a1:1c:1c:
86:35:79:39:d5:a7:a3:ef:96:b0:61:33:1a:6d:7d:8c:7a:fb:
22:fc:4e:ca:90:19:ab:3e:58:58:95:5a:fd:82:49:4b:d1:8a:
b6:1b:a0:04:96:e8:e4:bd:e7:00:03:f2:ee:c8:7a:5d:37:35:
74:23:ac:12:05:fa:a4:f6:1b:54:b7:1f:92:8a:fb:f6:f9:4e:
98:8e:38:8d:e8:08:1f:a1:11:c6:b8:d5:30:33:71:e8:8c:81:
24:11:0c:5a:76:4d:3a:09:a8:0b:2f:60:d1:91:b8:d3:5d:05:
8f:fa:1b:3a:02:1b:28:cd:44:b0:35:6f:66:6c:02:13:2f:df:
1d:97:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:13:15 2026 by rpki-client