Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: KqL6uWmq2coJQx1vKzz61SKNsd0orrId3UgpDtG9ZEM=
Subject key identifier: 1C:2E:10:AB:0B:58:3B:18:CE:94:C9:CD:AD:27:5B:C7:94:EB:29:02
Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial: 089E7BB228A75A6B12D5155526ACEE5278C507B0
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS13335.roa
Signing time: Mon 11 May 2026 17:08:53 +0000
ROA not before: Mon 11 May 2026 17:03:53 +0000
ROA not after: Mon 10 May 2027 17:08:53 +0000
asID: 13335
IP address blocks: 210.17.44.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:9e:7b:b2:28:a7:5a:6b:12:d5:15:55:26:ac:ee:52:78:c5:07:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Validity
Not Before: May 11 17:03:53 2026 GMT
Not After : May 10 17:08:53 2027 GMT
Subject: CN=1C2E10AB0B583B18CE94C9CDAD275BC794EB2902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:0e:7c:0d:c5:33:dc:6d:03:10:73:a0:c5:
ad:37:7a:be:f9:37:57:44:d5:73:a0:ad:29:35:d6:
88:b3:b2:1e:28:02:96:91:05:0d:54:0b:3e:5c:7b:
49:6b:ca:8f:f4:47:bc:8e:47:22:e7:a9:60:7c:2a:
fa:91:ba:5f:d1:50:8b:af:d0:58:74:8f:c0:3f:dd:
85:bf:09:14:18:d2:17:bc:6c:64:d8:d3:48:f9:c1:
e7:97:b3:9c:ab:e4:91:03:a5:a1:d8:00:cf:df:ad:
bc:84:4c:4c:8f:76:1c:a9:d1:f3:56:f4:71:df:f8:
bc:ad:61:6e:28:2d:9e:4f:b3:da:ed:84:a7:d1:7c:
51:12:de:9f:8b:f0:2b:57:b0:10:93:65:51:a5:5d:
fe:bc:54:38:dc:ae:c2:4a:b9:39:04:df:18:98:a3:
5a:87:f7:57:ae:d1:c1:1e:98:8e:f0:d8:a6:2b:bf:
da:fa:92:c2:da:1a:a6:83:a0:4e:f8:e2:8e:09:b6:
25:d1:83:13:ab:7d:63:df:bc:33:2d:8c:32:75:eb:
a2:64:e0:cb:1b:cd:69:6a:2a:e0:ce:62:0b:c9:eb:
0a:26:00:81:1a:56:c7:bc:ca:d6:10:59:22:4e:25:
87:72:23:51:b0:94:ac:51:f4:a9:3b:6c:ad:0f:6b:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:10:AB:0B:58:3B:18:CE:94:C9:CD:AD:27:5B:C7:94:EB:29:02
X509v3 Authority Key Identifier:
keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.17.44.0/24
Signature Algorithm: sha256WithRSAEncryption
17:36:23:df:e6:c9:0c:a5:74:ec:c3:d4:88:07:be:0f:11:ea:
46:88:b8:ec:54:2a:3b:86:b1:e1:f8:12:e4:b0:4d:3a:0b:52:
c2:06:3a:6c:92:04:c2:c1:92:d9:de:60:10:13:13:30:bd:1e:
ea:26:72:f5:00:a4:f7:e5:e5:c2:0e:be:97:d8:22:21:fa:90:
86:76:86:4f:88:ee:98:37:c3:b3:05:fd:19:df:c2:0e:69:c0:
2b:e1:cb:6f:8a:65:34:6e:7a:e0:6f:1b:8e:18:5c:9c:e7:4c:
6d:20:71:90:d3:59:a0:5b:40:82:89:f3:7b:84:63:77:87:48:
60:46:d6:72:ea:02:b0:c1:51:5c:79:09:04:64:91:c7:da:ac:
04:5b:0d:6a:51:1e:60:8f:e7:02:58:23:05:84:c3:58:0c:5e:
d9:13:04:b1:89:97:be:22:12:5e:dc:49:ed:d0:04:66:c4:0a:
8d:03:e6:de:d5:d8:e5:84:52:be:0b:40:7c:0a:6c:b4:dd:ff:
64:04:5d:39:d8:d3:48:f4:da:7b:f5:ad:12:80:ab:05:11:0f:
d0:fd:d8:b6:3f:0b:ff:f3:b2:9b:98:d1:fe:ae:e7:55:af:f1:
12:f4:9c:c6:db:a5:73:a1:80:d2:93:76:be:4d:da:0a:33:77:
5f:a9:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:04:34 2026 by rpki-client