Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS4662.roa
File: AS4662.roa (raw, json)
Hash identifier: lHIuLtTj83mFjYPzEwOiNcz0ICSbQuNvvLN4QS9Hg8s=
Subject key identifier: 2E:01:6D:94:B2:1D:89:0E:5A:E8:89:17:94:A1:8F:5E:A3:5D:D2:4F
Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial: 38A604A93E95651CE36CE13404BEDD26156BA3A6
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS4662.roa
Signing time: Mon 11 May 2026 17:08:41 +0000
ROA not before: Mon 11 May 2026 17:03:41 +0000
ROA not after: Mon 10 May 2027 17:08:41 +0000
asID: 4662
IP address blocks: 203.65.160.0/19 maxlen: 24
203.77.0.0/18 maxlen: 24
203.77.64.0/18 maxlen: 24
203.105.224.0/19 maxlen: 24
210.62.0.0/18 maxlen: 24
210.62.192.0/19 maxlen: 24
210.67.160.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a6:04:a9:3e:95:65:1c:e3:6c:e1:34:04:be:dd:26:15:6b:a3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Validity
Not Before: May 11 17:03:41 2026 GMT
Not After : May 10 17:08:41 2027 GMT
Subject: CN=2E016D94B21D890E5AE8891794A18F5EA35DD24F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:85:4f:12:62:fd:e8:66:17:90:2e:9c:aa:
f6:c9:b4:a9:89:fc:01:e4:54:20:2b:5d:b7:53:d4:
a7:8d:ed:9c:a5:f9:9b:7f:77:77:f3:48:aa:fa:74:
5e:60:46:38:36:7c:ce:c5:1f:6d:db:5c:07:46:d4:
4c:90:15:be:30:0e:33:85:46:4d:0c:0d:96:94:e7:
32:ec:81:61:0e:6d:f7:22:7e:45:c3:5a:89:82:e3:
8f:e3:da:6e:2f:39:e9:44:41:55:b5:06:22:0a:89:
b9:33:6f:ea:87:af:b5:f0:a4:e4:8d:52:d5:96:0a:
c9:97:82:68:33:13:99:18:23:c4:18:20:a9:68:bc:
84:75:ef:8f:dc:d9:80:a2:bd:9b:6c:85:e8:94:44:
34:98:3b:4a:f6:fd:3f:1b:79:b3:37:47:ea:91:87:
05:20:58:7c:0f:49:67:42:15:0c:87:dd:b1:c1:7f:
78:65:cd:dd:f6:8b:35:92:2b:7a:8d:4e:0a:08:b2:
07:a0:b3:87:43:a6:4d:d3:2d:fb:60:7d:1e:58:a5:
8e:23:a3:2a:6f:02:ad:00:71:d9:85:72:ff:a2:d8:
24:d7:97:0a:ec:92:51:ae:81:cc:bc:1c:a4:ae:a7:
b7:f7:8d:bd:47:75:34:b1:d2:24:f7:03:64:81:a2:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:6D:94:B2:1D:89:0E:5A:E8:89:17:94:A1:8F:5E:A3:5D:D2:4F
X509v3 Authority Key Identifier:
keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS4662.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.65.160.0/19
203.77.0.0/17
203.105.224.0/19
210.62.0.0/18
210.62.192.0/19
210.67.160.0/19
Signature Algorithm: sha256WithRSAEncryption
85:b0:5e:a5:57:c0:b3:8b:5c:ee:7b:a0:29:df:ea:b5:d7:a9:
b4:8e:11:6f:38:8e:ce:ee:4a:ea:ce:75:62:82:82:cb:98:58:
4a:c3:1b:f4:2c:13:5c:4e:1e:d1:15:3c:a1:24:f3:b1:36:bc:
1d:87:5c:d2:3a:09:1d:43:33:10:bd:1b:9a:68:5d:8b:eb:84:
dc:b9:4e:f3:01:a4:35:7f:41:2e:a4:24:f6:2c:09:bf:3b:7d:
99:7c:2e:3d:fc:f7:61:88:d3:1d:47:f0:53:81:4f:9c:e0:08:
7c:4f:9b:9d:1e:4f:18:bd:43:d6:b7:40:e0:30:de:59:3a:f0:
f2:f2:8a:83:a0:e8:aa:8f:2d:e8:f6:43:70:87:9b:14:5d:92:
85:2e:00:4d:2e:98:8e:97:02:10:a0:b9:da:41:7e:09:87:37:
91:68:81:59:d3:24:7d:f3:b5:8e:eb:11:c1:c7:8c:b5:ef:70:
8e:c2:ed:03:5a:f7:7e:c7:c6:11:9f:7a:7f:0d:eb:00:9e:b6:
56:ca:42:62:0e:e6:49:61:2e:e3:6f:e3:1a:c4:54:a3:eb:91:
42:a6:28:d7:c4:6e:9d:a0:b4:e4:61:2a:20:07:2c:86:86:4a:
18:c0:b2:31:3f:cd:d9:03:c1:31:5c:68:8f:fb:9b:4e:3a:b2:
9d:82:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:04:34 2026 by rpki-client