Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS131602.roa
File: AS131602.roa (raw, json)
Hash identifier: c8PBaVi8xGWite7/HXu2sVqC0IX6KfOc8Tk7zANSpMs=
Subject key identifier: A3:0E:7A:33:CA:73:7B:3D:98:52:2F:36:0D:AB:D3:DB:15:25:C5:A5
Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial: 2C3C9F16246B3A6B432130905B85DD244A267E7A
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS131602.roa
Signing time: Mon 11 May 2026 17:39:18 +0000
ROA not before: Mon 11 May 2026 17:34:18 +0000
ROA not after: Mon 10 May 2027 17:39:18 +0000
asID: 131602
IP address blocks: 210.62.0.0/19 maxlen: 24
210.62.32.0/20 maxlen: 24
210.62.48.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:3c:9f:16:24:6b:3a:6b:43:21:30:90:5b:85:dd:24:4a:26:7e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Validity
Not Before: May 11 17:34:18 2026 GMT
Not After : May 10 17:39:18 2027 GMT
Subject: CN=A30E7A33CA737B3D98522F360DABD3DB1525C5A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:13:9a:5d:0b:19:70:ef:7a:b0:43:e1:1a:
91:cc:ff:89:ba:42:12:72:cf:a5:7f:5d:18:1a:a7:
36:dd:bd:fa:3f:fb:93:4d:c8:7d:77:76:7c:5a:2d:
52:16:bf:72:1e:7d:c8:6d:24:b7:48:57:88:58:a5:
61:79:42:57:7b:89:00:3d:4a:e1:47:5a:46:fd:ff:
92:58:be:84:fb:b0:76:53:07:11:69:71:ec:50:79:
2e:f6:5d:1a:14:39:ff:70:be:7e:d0:b5:3a:a6:14:
18:93:0c:a9:42:40:18:92:6c:c2:c2:7c:b3:43:b2:
ec:c8:da:ff:5f:2e:63:a6:76:c8:73:88:51:7e:9e:
6c:56:0f:50:31:f6:13:23:08:dc:c6:81:f9:b6:cd:
d2:42:29:2f:e4:17:0f:8d:48:60:3f:56:09:52:d6:
87:2f:15:c2:3d:6a:24:32:66:07:75:66:e3:aa:64:
ce:70:96:a2:1f:38:26:6a:77:91:3d:d2:0a:a0:25:
af:aa:c0:cb:5e:b6:75:b3:68:61:16:9d:05:6b:29:
5b:f8:08:9b:43:95:47:3b:6a:fd:df:fb:87:f2:37:
94:d3:47:e9:e7:44:41:78:18:01:68:7e:aa:29:70:
74:00:03:93:e6:eb:fa:e1:56:c9:f7:2c:26:f7:6f:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0E:7A:33:CA:73:7B:3D:98:52:2F:36:0D:AB:D3:DB:15:25:C5:A5
X509v3 Authority Key Identifier:
keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS131602.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.62.0.0-210.62.49.255
Signature Algorithm: sha256WithRSAEncryption
16:ed:38:5c:82:9f:ee:05:0d:10:a8:17:d0:59:ec:6d:d0:f6:
2c:e5:3e:38:c4:08:df:7c:c5:2e:7c:85:a5:0a:a9:d6:e7:48:
ca:70:70:a7:f7:47:e1:4c:43:00:ed:8f:fa:86:db:e5:9e:5a:
e2:95:fb:bd:f2:ed:f4:9b:5d:27:ee:39:cd:84:4c:f0:d9:e9:
ab:15:6e:2a:e9:ca:0b:76:65:b1:42:9e:b9:88:d8:a5:eb:9d:
a6:63:8d:7b:e8:8b:b9:9e:09:63:b6:4e:0c:84:b6:17:92:38:
1a:eb:8b:b9:6e:19:55:90:c7:eb:ce:0b:5d:09:34:71:a0:03:
5e:54:86:f7:66:b3:ea:d0:5d:41:9d:e8:f4:10:ec:c7:4e:e8:
9f:d6:74:c6:a0:e3:d0:5b:46:d2:37:1a:4b:f2:ea:c9:98:48:
bb:c7:62:7c:43:a4:c4:6e:c1:10:8e:db:b2:f2:5f:f5:5f:1a:
b0:a3:30:03:ce:6e:72:30:3c:19:51:3b:17:e3:38:aa:7b:5a:
9c:06:b2:70:78:2f:0a:a3:49:7a:d2:22:1a:32:a3:ff:ac:ae:
a9:a7:97:37:22:5c:35:9d:65:95:56:e6:cf:61:60:20:13:fd:
49:91:16:5d:c6:d9:e9:86:38:fa:44:a8:eb:41:49:3c:09:fb:
a1:e4:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:04:33 2026 by rpki-client