Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS3911.roa
File: AS3911.roa (raw, json)
Hash identifier: 04MUBmX9Txx4oAnl8VJRVeR34OAhrsKOU9XnmsvvQnQ=
Subject key identifier: D8:5B:43:B1:F6:8E:9C:E4:37:8D:BF:52:97:E1:A0:57:34:61:FC:30
Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial: 25B868965F172ED5745E693C160629912EB6F3E9
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS3911.roa
Signing time: Mon 11 May 2026 17:28:47 +0000
ROA not before: Mon 11 May 2026 17:23:47 +0000
ROA not after: Mon 10 May 2027 17:28:47 +0000
asID: 3911
IP address blocks: 219.86.93.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b8:68:96:5f:17:2e:d5:74:5e:69:3c:16:06:29:91:2e:b6:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Validity
Not Before: May 11 17:23:47 2026 GMT
Not After : May 10 17:28:47 2027 GMT
Subject: CN=D85B43B1F68E9CE4378DBF5297E1A0573461FC30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:2d:70:91:76:9f:8e:5b:53:3d:49:cf:63:
58:38:12:a8:31:68:48:dd:99:51:6a:44:e6:5e:93:
c7:5e:ce:43:ac:d3:d2:5c:2f:8c:6c:38:da:35:78:
62:61:58:62:2e:5a:17:e2:1f:49:b0:97:e9:3c:da:
9e:57:5c:1d:6c:ef:b0:aa:1c:c4:9a:ae:02:81:ff:
36:99:0c:0e:b3:ef:66:51:fa:37:50:36:c8:be:40:
f9:00:18:d5:00:89:82:d8:79:c9:d2:88:48:d1:82:
22:f3:c1:ef:37:5a:6d:2d:b2:03:ba:99:60:d0:d7:
f5:3c:6c:c4:f2:c2:87:82:e1:12:8b:d1:c4:5e:ea:
64:58:96:f4:ba:bd:81:0d:c4:97:6f:f5:28:07:e3:
fe:ec:2c:99:40:11:59:45:52:6f:c4:06:4a:69:cd:
f4:ef:72:a3:74:ed:87:e3:32:58:a1:69:58:b4:1e:
a2:17:68:63:e7:ac:8e:7f:2f:88:60:ec:7c:83:45:
c0:10:cb:cf:85:57:4f:c3:a1:ed:c8:11:5b:b2:f5:
0d:c7:56:60:70:31:9e:7a:b9:9d:af:1d:fa:f6:b7:
d5:d4:5d:e6:6f:c3:fb:f6:3f:dc:c9:44:90:98:62:
3d:45:de:ec:e9:f6:58:a5:c0:c7:d0:b5:5d:49:d9:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5B:43:B1:F6:8E:9C:E4:37:8D:BF:52:97:E1:A0:57:34:61:FC:30
X509v3 Authority Key Identifier:
keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS3911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.86.93.0/24
Signature Algorithm: sha256WithRSAEncryption
88:11:2c:d3:f7:d2:e5:c0:4d:90:e1:32:21:9b:1a:12:a6:e2:
30:6d:07:3e:07:2e:43:2c:d0:18:5e:0f:62:7a:0f:49:29:1e:
c4:9a:e2:4c:92:fe:24:9d:03:67:81:f2:0d:6b:53:7f:1b:88:
65:56:c4:54:34:f0:89:f3:37:51:7f:4e:87:41:ca:88:08:08:
6d:31:1f:fc:2a:70:d8:92:3b:20:8d:17:d4:39:99:2b:0f:42:
5b:14:1b:b1:8e:c7:6a:05:a6:26:84:76:8d:78:38:15:a1:1a:
0d:68:ee:6e:26:48:b0:00:ab:53:4b:8f:ab:3f:d3:a5:8a:0a:
52:6d:54:b7:24:46:1d:29:56:bf:8f:7e:34:ba:51:a3:9e:30:
a4:4d:94:de:9a:47:85:5f:cf:01:aa:76:85:fa:ae:8e:51:e7:
cb:b3:1b:ff:8c:43:95:ec:2e:23:19:08:64:b7:bf:4d:5f:74:
5d:9e:d5:3d:fe:0e:eb:41:ee:ef:4e:fc:73:79:61:8d:72:6f:
af:ec:5d:a3:0c:4e:83:5a:5f:04:c1:67:ba:4f:70:13:5a:aa:
77:97:4b:e3:0b:ec:7b:e8:52:86:5c:dd:41:06:78:78:cc:f2:
5f:7c:8c:07:b5:ae:4f:21:be:48:4d:29:5f:4d:e5:cb:93:ac:
44:5a:d8:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 23:04:34 2026 by rpki-client