Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS18049.roa
File: AS18049.roa (raw, json)
Hash identifier: imAPk9R9jVyd99WO7kKgIQi9HdZOdv8Ferlvd6YDpo8=
Subject key identifier: 34:D7:2B:85:FA:51:36:6F:CB:F7:89:13:8D:55:82:73:D6:F4:C2:B9
Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial: 70300E9076C2F241A412D96C551A0B39A9BE168B
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS18049.roa
Signing time: Mon 11 May 2026 17:39:04 +0000
ROA not before: Mon 11 May 2026 17:34:04 +0000
ROA not after: Mon 10 May 2027 17:39:04 +0000
asID: 18049
IP address blocks: 60.198.64.0/18 maxlen: 24
210.62.192.0/20 maxlen: 24
210.62.208.0/21 maxlen: 24
210.62.216.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:30:0e:90:76:c2:f2:41:a4:12:d9:6c:55:1a:0b:39:a9:be:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Validity
Not Before: May 11 17:34:04 2026 GMT
Not After : May 10 17:39:04 2027 GMT
Subject: CN=34D72B85FA51366FCBF789138D558273D6F4C2B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:83:a3:b0:0a:0f:fa:d3:ab:db:45:46:ca:
bc:6c:95:3f:f2:3b:0c:72:63:15:43:30:7f:7b:54:
4b:f6:63:e1:9d:47:6f:2a:5b:42:c0:37:e4:eb:48:
e2:df:8e:7e:ac:ff:ec:21:e5:9b:76:e8:25:82:95:
24:01:69:a8:28:1c:26:cc:ff:c2:48:13:76:ba:50:
49:90:5e:9d:8f:59:6b:3d:d3:fe:80:e9:12:cf:c9:
e2:c7:5f:2f:5f:37:89:d7:c4:88:38:7a:a0:fc:41:
1f:c8:db:52:e6:f1:6f:24:20:8f:3c:27:b9:7e:82:
e7:77:48:e4:67:32:68:82:50:e7:5c:71:3c:f4:08:
af:69:1e:cd:5e:28:f5:01:4b:89:c8:d5:09:d0:85:
a2:4a:54:fc:43:08:93:19:a1:0c:7e:a5:44:b3:62:
b0:41:84:89:8a:c8:97:77:07:80:23:f7:76:40:49:
50:e4:e2:a2:3f:fa:5b:68:ed:5f:d1:3c:8c:23:c5:
18:5e:56:a6:b9:83:cf:d5:43:e3:f9:95:ea:71:b9:
00:7e:be:7c:5e:11:ab:bc:f4:49:f8:8b:e0:7e:b6:
f4:3f:f7:8c:f8:9f:70:c6:81:3b:59:fe:17:26:ce:
78:e6:f9:c7:b6:c7:d5:93:d8:42:db:b2:19:91:8f:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:2B:85:FA:51:36:6F:CB:F7:89:13:8D:55:82:73:D6:F4:C2:B9
X509v3 Authority Key Identifier:
keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS18049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.198.64.0/18
210.62.192.0-210.62.217.255
Signature Algorithm: sha256WithRSAEncryption
0e:e5:64:33:77:12:6a:33:fc:16:c4:23:7b:08:a1:65:9e:19:
38:cc:c1:f1:1f:a0:84:ce:b8:5b:e4:50:33:0a:2a:60:cd:d2:
45:e2:1c:ab:05:b9:62:31:51:d8:71:08:2c:60:a8:27:61:c2:
6e:4b:0c:42:e7:c0:80:f9:7c:0e:a0:72:ce:4c:22:61:4a:ea:
3c:fe:9c:93:97:6e:eb:d6:03:95:42:03:7c:03:b1:b8:37:24:
34:fe:89:3b:26:83:78:1c:c8:6c:0d:27:ce:d6:13:41:1a:f0:
b2:89:11:1b:64:cd:bf:c0:89:81:77:03:86:71:ee:07:bd:89:
44:eb:6f:8b:6b:a1:2c:0a:04:7e:cf:03:c7:c6:81:cc:a3:8b:
78:cd:fc:12:b6:9d:7f:e1:2e:0f:9d:b8:48:41:dc:0c:45:c9:
a2:6a:10:bf:e2:d1:d5:b9:e6:ed:ad:02:1c:88:5f:0c:5e:4a:
e9:99:3b:4b:e4:d4:50:81:0d:05:a4:3e:ad:d0:5b:07:4d:87:
f4:c2:8c:fb:14:72:0c:53:fe:a4:a6:49:9d:a3:8f:67:98:26:
70:ff:16:f4:78:46:b7:4a:bd:84:a7:4d:aa:1b:53:74:6b:82:
bb:8a:7e:1d:0f:c5:b2:4c:a3:fe:14:1f:a5:38:4b:d7:b1:80:
23:10:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:04:30 2026 by rpki-client