Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS24164.roa
File: AS24164.roa (raw, json)
Hash identifier: emjsjnNx4a98FkY0YlgYFKbr6Cj7Q2Ztt9CWalYN91I=
Subject key identifier: 64:6C:33:D1:71:97:E7:45:46:17:0B:8F:82:39:E0:87:E5:09:DA:62
Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial: 04419B2D7E9F75D98BC52878FA4647E54E5347AC
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS24164.roa
Signing time: Mon 11 May 2026 17:39:46 +0000
ROA not before: Mon 11 May 2026 17:34:46 +0000
ROA not after: Mon 10 May 2027 17:39:46 +0000
asID: 24164
IP address blocks: 60.198.40.0/21 maxlen: 24
203.65.172.0/24 maxlen: 24
203.65.174.0/24 maxlen: 24
203.77.0.0/18 maxlen: 24
203.77.0.0/19 maxlen: 20
203.77.32.0/19 maxlen: 24
203.77.32.0/22 maxlen: 24
203.77.36.0/23 maxlen: 24
203.77.38.0/23 maxlen: 24
203.77.40.0/21 maxlen: 24
203.77.48.0/23 maxlen: 24
203.77.50.0/23 maxlen: 24
203.77.50.0/24 maxlen: 24
203.77.51.0/24 maxlen: 24
203.77.52.0/24 maxlen: 24
203.77.53.0/24 maxlen: 24
203.77.54.0/23 maxlen: 24
203.77.56.0/21 maxlen: 24
203.77.64.0/20 maxlen: 24
203.77.80.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:41:9b:2d:7e:9f:75:d9:8b:c5:28:78:fa:46:47:e5:4e:53:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Validity
Not Before: May 11 17:34:46 2026 GMT
Not After : May 10 17:39:46 2027 GMT
Subject: CN=646C33D17197E74546170B8F8239E087E509DA62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:6c:bc:01:ff:3d:8e:c1:f8:56:3c:98:ab:
31:94:14:4f:41:86:e0:a6:2f:5d:81:67:f6:53:64:
87:77:b7:a3:8b:a3:37:85:d1:e6:39:1a:aa:81:60:
79:4b:59:3d:6c:36:c2:0a:f4:79:1f:02:d5:77:03:
8b:98:e6:67:d8:4b:7f:ab:a9:78:0d:2d:f9:24:65:
28:66:a1:d7:91:ff:6b:ac:f9:77:97:66:de:8e:d8:
08:9f:b8:43:02:42:ec:44:6a:67:86:1e:dd:6a:68:
99:f7:fd:b0:23:69:b1:1c:24:fe:9e:6d:e3:7d:ef:
bb:a7:e0:ac:80:f5:cd:cb:ac:f9:d4:6e:0d:e9:29:
c6:e0:25:1f:e3:c2:6b:17:43:b7:61:3e:e3:7c:45:
54:9b:67:83:3b:1b:0a:32:27:ce:bb:e0:ac:7c:f0:
36:70:4f:4f:ba:ab:d9:19:ed:57:a3:3d:3d:0c:1b:
21:4a:ff:d4:3e:e3:a1:2e:54:85:f6:11:a4:25:09:
36:99:9e:24:08:12:5d:ac:ea:e4:84:57:86:e3:a3:
87:c9:ef:ab:64:f8:69:06:a1:7c:bb:7f:01:18:dd:
00:a4:f3:27:28:6d:71:e2:69:b9:3f:99:bd:fb:d3:
cb:c3:8e:ec:b1:48:f3:b3:e0:69:1d:01:24:9a:8b:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:33:D1:71:97:E7:45:46:17:0B:8F:82:39:E0:87:E5:09:DA:62
X509v3 Authority Key Identifier:
keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS24164.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.198.40.0/21
203.65.172.0/24
203.65.174.0/24
203.77.0.0-203.77.81.255
Signature Algorithm: sha256WithRSAEncryption
12:fc:3d:48:fd:34:b1:af:20:47:31:36:1b:81:a5:62:19:52:
1d:21:03:da:46:ba:86:d2:43:24:a0:57:c2:d6:7f:8e:06:a6:
8a:60:52:94:6e:5d:af:f2:68:24:4d:e3:fd:0d:6d:b4:18:cd:
5b:91:ae:89:59:49:a9:b9:ee:20:18:34:1e:31:8b:59:58:52:
7a:6c:cb:6e:bf:15:e4:4f:ed:91:b5:cd:52:e5:fe:a5:47:2d:
c4:e6:c5:82:21:79:e2:57:6f:6c:b5:90:48:d6:8a:be:9c:ec:
46:52:90:71:da:6b:f9:a4:dc:68:f5:c2:4f:85:11:9e:0a:2f:
c6:5d:17:68:1e:76:b5:af:e2:3f:9f:f5:0c:2e:fe:91:73:7a:
ba:40:24:63:38:be:cb:1a:ed:27:a1:b8:83:c4:58:51:bc:f9:
62:7d:b8:cc:b0:32:c9:e7:c3:79:a8:73:2b:c3:71:ac:63:a8:
76:29:0b:53:93:68:15:6a:02:c8:bc:3b:05:e4:e9:33:ab:d4:
2d:b6:94:13:da:88:e1:9f:91:a2:5c:5f:71:b1:ab:7e:da:f0:
b8:87:94:75:17:8a:54:ec:ad:5f:c2:8a:89:ef:06:19:6d:12:
54:4d:19:fc:81:b6:61:79:79:96:1b:64:8e:22:79:c2:ad:bb:
07:91:99:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:04:32 2026 by rpki-client