Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS24158.roa
File: AS24158.roa (raw, json)
Hash identifier: oSamXs2ONWSTZysY+Q9Qf9zAoLqjdYSQalFFnMeIIfs=
Subject key identifier: 73:F8:1B:31:44:93:55:49:CE:B7:42:A1:1F:ED:B5:5B:47:AC:19:DF
Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial: 1F9AA9C2387143108A6EB9453442885BBDF8203B
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS24158.roa
Signing time: Mon 11 May 2026 17:31:24 +0000
ROA not before: Mon 11 May 2026 17:26:24 +0000
ROA not after: Mon 10 May 2027 17:31:24 +0000
asID: 24158
IP address blocks: 49.214.0.0/15 maxlen: 24
49.216.0.0/14 maxlen: 24
61.30.25.0/24 maxlen: 24
175.96.0.0/16 maxlen: 24
175.97.0.0/16 maxlen: 24
203.105.224.0/24 maxlen: 24
203.105.239.0/24 maxlen: 24
2001:4546:1000:8f00::/56 maxlen: 64
2001:4546:1000:da00::/56 maxlen: 64
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:9a:a9:c2:38:71:43:10:8a:6e:b9:45:34:42:88:5b:bd:f8:20:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Validity
Not Before: May 11 17:26:24 2026 GMT
Not After : May 10 17:31:24 2027 GMT
Subject: CN=73F81B3144935549CEB742A11FEDB55B47AC19DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:9e:92:9e:a2:10:26:a9:6c:3a:8d:5f:70:
76:ce:57:40:3e:c0:1a:64:88:6e:68:9c:8d:bd:39:
9a:22:df:4f:2c:6d:57:f9:3d:0d:07:a1:04:29:3c:
2a:31:c5:34:22:d5:e2:87:59:f1:d0:61:56:ac:68:
26:7e:20:0d:52:0a:b3:00:88:12:53:9c:e0:70:7b:
7b:3a:d7:8b:ec:58:b6:8b:f7:34:05:a9:41:0d:4e:
a3:6b:b8:cc:98:e8:a0:f7:39:69:34:ae:56:cb:2a:
cc:f3:7f:37:63:d9:08:63:bf:e1:35:34:8e:f6:5f:
94:bd:90:f5:cc:f2:73:d4:32:68:99:62:5c:d0:2a:
e9:78:cd:df:f3:42:8f:3f:b4:44:20:77:f0:62:8a:
9b:aa:d0:3a:86:3e:1f:43:d5:a0:b7:93:9b:c2:90:
64:58:26:9e:dd:40:6e:b9:bf:9f:09:48:80:3d:21:
17:02:2b:a0:09:cf:de:f7:a0:b8:6d:d3:46:1a:13:
80:72:97:32:40:04:ea:40:15:bb:1c:e1:b4:18:88:
10:a9:b7:0a:1d:54:56:25:55:6b:fb:2e:75:98:9c:
05:cf:0a:de:9b:0b:fe:b7:4c:36:b5:d1:c9:7e:d4:
51:d8:e0:d8:d0:37:d2:aa:f9:e7:31:62:b4:f2:85:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F8:1B:31:44:93:55:49:CE:B7:42:A1:1F:ED:B5:5B:47:AC:19:DF
X509v3 Authority Key Identifier:
keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS24158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.214.0.0-49.219.255.255
61.30.25.0/24
175.96.0.0/15
203.105.224.0/24
203.105.239.0/24
IPv6:
2001:4546:1000:8f00::/56
2001:4546:1000:da00::/56
Signature Algorithm: sha256WithRSAEncryption
36:93:b5:24:06:44:32:7c:50:74:15:2b:51:e1:91:2e:6b:17:
47:6c:8c:02:d9:f0:e9:3d:6c:7e:7a:88:d0:9b:cf:94:09:22:
f6:14:c0:f9:17:f1:76:26:df:f9:33:45:4c:61:c9:8b:ae:95:
8f:0e:45:38:0f:f1:db:38:c8:eb:37:11:58:ac:cd:6d:e4:1f:
35:85:e7:6c:bb:6e:de:fc:ed:90:60:0e:0b:e3:19:05:ee:c1:
89:1a:cf:5d:fe:a4:86:df:66:3d:42:9f:5c:e3:a2:08:37:32:
65:d3:e4:a9:6a:0a:3e:72:fb:78:12:1e:61:2a:00:df:23:cd:
89:5d:5d:72:54:de:91:1b:63:89:08:c8:fd:8f:a9:e0:f5:a3:
ae:02:08:4a:58:df:3b:0b:82:9e:8b:49:a3:84:43:4f:70:b1:
d3:60:2d:e8:a7:81:a6:4f:a8:25:a9:c4:bc:60:30:fa:6f:8e:
8e:c8:91:de:d9:f5:13:19:ef:43:9f:da:fd:94:2c:d2:43:63:
dc:8e:69:96:5b:01:86:96:67:de:d2:90:20:2d:3f:28:f4:ac:
2c:03:5a:34:f3:34:fb:e4:5e:6c:74:8b:47:c1:d3:13:4b:9f:
fc:a1:eb:5e:f7:9d:1b:73:df:65:c6:16:11:e4:d1:d5:6d:7d:
05:aa:77:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:04:33 2026 by rpki-client