Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS19551.roa
File: AS19551.roa (raw, json)
Hash identifier: K42R6DMDmIcWxpBPO/uVl2iyVu3yapsM7yn/fxqw9OY=
Subject key identifier: F6:0E:7E:A3:1B:88:3D:D6:70:0E:2E:E8:C2:6D:95:4E:96:49:F2:D7
Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial: 730C7E5E6D11AFEA76194D24A6E6155B70200080
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS19551.roa
Signing time: Mon 11 May 2026 17:57:58 +0000
ROA not before: Mon 11 May 2026 17:52:58 +0000
ROA not after: Mon 10 May 2027 17:57:58 +0000
asID: 19551
IP address blocks: 124.108.137.0/24 maxlen: 24
124.108.149.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0c:7e:5e:6d:11:af:ea:76:19:4d:24:a6:e6:15:5b:70:20:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Validity
Not Before: May 11 17:52:58 2026 GMT
Not After : May 10 17:57:58 2027 GMT
Subject: CN=F60E7EA31B883DD6700E2EE8C26D954E9649F2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:6a:9f:eb:3d:3c:75:31:3c:32:db:70:da:
a2:1a:b3:e0:3f:78:c7:28:b9:17:51:db:a9:72:d4:
fc:51:c6:5a:68:62:8f:5f:8f:95:2d:68:35:5c:5a:
c5:32:87:4c:c9:1b:73:f5:76:06:48:61:a3:b0:07:
a0:ef:d2:08:11:86:54:85:38:2a:b8:06:af:af:5f:
19:fe:42:84:dc:aa:26:d9:04:ab:a1:2b:14:ff:16:
20:84:39:f0:7e:2b:89:d8:f1:72:e1:d9:8a:ab:7d:
43:df:a3:6d:45:3d:8f:f0:dd:0a:24:49:96:89:6f:
2b:66:14:76:aa:45:0b:b7:02:fb:36:58:f5:71:aa:
e0:cb:bb:20:2b:4a:f8:30:4b:bc:ea:9a:b2:56:89:
aa:92:f9:64:81:c9:bc:51:1e:af:2b:a9:f4:56:56:
a0:c2:d5:95:58:b0:8f:e6:f0:c0:69:d2:01:71:b5:
9d:79:18:0e:2f:96:84:29:2e:4b:d1:85:d8:c7:98:
78:51:2e:00:3e:5c:46:f6:f0:bf:9c:3a:d9:cc:d9:
1e:40:4f:ed:75:29:51:d9:c0:92:51:a6:fd:a5:61:
ef:be:a2:72:fc:16:a3:64:48:a9:c8:42:77:04:c9:
c4:34:24:09:1c:af:0b:a3:31:88:44:ce:78:ae:eb:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0E:7E:A3:1B:88:3D:D6:70:0E:2E:E8:C2:6D:95:4E:96:49:F2:D7
X509v3 Authority Key Identifier:
keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS19551.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.108.137.0/24
124.108.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0e:43:0b:c5:5a:00:22:5d:75:26:75:62:c4:d8:9a:99:5f:
3f:48:61:d3:8c:0c:1d:80:11:90:b0:d2:62:9d:fc:63:b2:ad:
8f:46:f1:cf:60:80:6b:30:3c:55:de:4c:39:44:1f:f7:43:fc:
cc:47:4b:36:bb:d5:b4:22:7d:f7:1e:f9:ec:e9:96:c9:86:e3:
40:e4:ca:a1:4c:1f:da:ef:34:46:bd:ff:48:5c:f4:2e:37:d2:
66:82:51:a8:c3:da:2e:df:0b:d7:d7:7f:72:fb:bf:8f:b6:a2:
e4:1f:7b:7e:50:aa:8b:09:ca:c1:a1:5e:7a:14:a6:a6:3a:2c:
1a:3a:60:6a:a1:4e:2e:b4:8b:9f:f0:5e:cf:27:07:e0:99:7c:
d0:13:97:44:31:0c:aa:76:ba:0d:f7:5d:20:33:38:07:00:94:
ed:65:46:07:d8:3b:8a:40:4f:e2:4c:a7:a0:a1:14:d5:0e:fd:
eb:92:51:bd:50:33:34:8a:55:95:55:af:b3:cc:ea:9a:6f:6c:
81:ed:be:7c:4c:f4:a4:60:5d:f8:8d:8e:b2:0e:54:cc:3f:cc:
73:10:39:5f:7f:d8:86:92:b9:96:d4:22:87:d9:37:8d:35:c0:
56:d7:2c:35:34:2d:6c:46:3d:d7:3c:9d:c0:41:3a:e4:66:d4:
3b:79:85:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:04:32 2026 by rpki-client