Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS131634.roa
File: AS131634.roa (raw, json)
Hash identifier: 7LDJ695va58I/1dPohOKBdAdgf4UvABfbWVL7H+yXhY=
Subject key identifier: 2C:AC:8A:16:88:02:30:64:FE:BD:5B:A9:35:1B:C8:5F:10:1D:9E:03
Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial: 47A26C310889A69FA6B43B809EE073E19D871CED
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS131634.roa
Signing time: Mon 11 May 2026 17:09:59 +0000
ROA not before: Mon 11 May 2026 17:04:59 +0000
ROA not after: Mon 10 May 2027 17:09:59 +0000
asID: 131634
IP address blocks: 60.199.50.0/24 maxlen: 24
124.108.136.0/22 maxlen: 24
124.108.140.0/23 maxlen: 24
124.108.149.0/24 maxlen: 24
124.108.150.0/23 maxlen: 24
124.108.152.0/21 maxlen: 24
124.108.160.0/21 maxlen: 24
124.108.160.0/24 maxlen: 24
124.108.172.0/22 maxlen: 24
124.108.174.0/24 maxlen: 24
124.108.191.0/24 maxlen: 24
210.17.80.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a2:6c:31:08:89:a6:9f:a6:b4:3b:80:9e:e0:73:e1:9d:87:1c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Validity
Not Before: May 11 17:04:59 2026 GMT
Not After : May 10 17:09:59 2027 GMT
Subject: CN=2CAC8A1688023064FEBD5BA9351BC85F101D9E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:17:f0:fc:69:6f:81:93:f1:6e:02:32:24:
2f:38:17:02:23:ad:78:79:a7:0f:ce:a8:e8:46:ab:
13:4a:9b:04:f7:39:76:36:dc:33:84:15:1e:bd:bf:
36:16:fa:76:d1:a1:2b:e1:65:d9:70:01:82:52:af:
11:aa:88:c3:d5:4c:b6:28:cc:d6:0f:97:ff:8b:a4:
76:34:28:9e:90:60:b6:d6:10:c0:46:95:7b:1b:25:
f7:7c:93:8f:a3:38:96:ce:3a:b1:d0:9c:c6:69:8c:
2b:e8:22:40:9a:5d:a9:ce:f2:34:9c:07:e9:7f:f2:
e5:b6:aa:1b:f2:7e:e9:6e:e1:05:1b:98:cb:c8:49:
c1:6a:09:ac:a9:e4:02:af:d3:3f:82:94:9e:41:53:
3d:6a:c0:51:ec:2b:00:0a:87:72:7e:57:d8:34:e1:
1b:58:a3:f3:2c:64:87:4f:a1:c2:69:22:fa:1a:bb:
99:cd:cd:99:63:99:4c:44:92:04:78:7e:0e:4b:9b:
2a:c0:f3:56:8a:e9:fd:d5:0e:37:20:98:3d:78:1e:
b1:c4:48:e8:19:63:29:c0:bd:9a:6f:66:7c:02:ff:
7b:5b:78:fd:e1:00:e8:96:73:91:4f:65:d5:d5:63:
b4:4e:ca:07:ed:8f:3d:1a:49:ef:a1:b7:68:2d:7e:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:8A:16:88:02:30:64:FE:BD:5B:A9:35:1B:C8:5F:10:1D:9E:03
X509v3 Authority Key Identifier:
keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS131634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.199.50.0/24
124.108.136.0-124.108.141.255
124.108.149.0-124.108.167.255
124.108.172.0/22
124.108.191.0/24
210.17.80.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ac:2b:71:f0:5e:4f:01:24:00:11:e1:3f:c8:d1:af:96:42:
82:fd:29:bb:cf:e1:a8:33:96:48:bf:2d:c1:bd:20:94:c8:87:
31:44:f6:5e:28:0c:11:e8:e8:01:69:ab:f7:2b:23:88:19:f0:
46:db:be:f5:cd:56:0f:8e:01:fc:3e:bd:b9:e3:13:1f:c6:42:
ba:af:0d:9c:80:e4:bc:ff:a4:3a:b3:d2:27:04:15:70:15:46:
97:32:3e:6f:e8:78:ea:55:e2:a6:e7:09:cf:5a:ee:4e:3e:e8:
d5:50:f7:7a:dc:ad:a0:5d:60:de:b9:d5:b9:04:a3:bf:b3:e6:
05:18:d1:51:8c:41:ef:91:dc:9a:de:55:fe:9d:3c:46:aa:74:
2a:a2:1b:be:b2:1a:80:e5:20:29:a9:d6:c3:91:4d:7f:54:7d:
ab:1b:e1:cd:fb:95:86:0a:4d:24:40:51:cb:a1:15:a3:02:63:
10:a5:27:22:96:a7:c0:7e:a3:aa:8b:f0:17:6c:b5:eb:00:d6:
71:f4:64:c5:84:31:1a:3d:df:b4:e5:d6:8b:76:0e:b4:b3:92:
3c:ae:91:02:57:b9:82:62:96:10:7f:84:a3:94:1d:8a:ab:05:
f2:14:4b:31:80:1d:26:c3:1d:aa:23:84:58:18:50:48:ad:cc:
41:98:aa:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 23:04:31 2026 by rpki-client