Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS9924.roa
File: AS9924.roa (raw, json)
Hash identifier: r3fsGgFVN/8oQIX0mHv7W+GL7anAJUUTvQhEsNy2APg=
Subject key identifier: 2F:CD:86:AF:1D:30:A2:86:63:E2:AC:36:88:E4:01:F7:E8:DF:71:60
Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial: 729184A87383368B159C3D18EA5015780462AEAB
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS9924.roa
Signing time: Mon 11 May 2026 17:19:00 +0000
ROA not before: Mon 11 May 2026 17:14:00 +0000
ROA not after: Mon 10 May 2027 17:19:00 +0000
asID: 9924
IP address blocks: 43.240.24.0/22 maxlen: 24
49.214.0.0/15 maxlen: 24
49.216.0.0/14 maxlen: 24
60.198.0.0/16 maxlen: 24
60.199.0.0/16 maxlen: 24
60.199.107.0/24 maxlen: 32
60.199.110.0/24 maxlen: 32
60.199.134.0/24 maxlen: 32
60.199.140.0/24 maxlen: 32
60.199.147.0/24 maxlen: 32
60.199.162.0/24 maxlen: 32
60.199.168.0/24 maxlen: 32
60.199.171.0/24 maxlen: 32
60.199.176.0/24 maxlen: 32
60.199.193.0/24 maxlen: 32
60.199.212.0/24 maxlen: 32
60.199.224.0/24 maxlen: 32
60.199.235.0/24 maxlen: 32
61.30.0.0/16 maxlen: 24
61.30.239.0/24 maxlen: 32
61.31.0.0/16 maxlen: 24
61.31.197.0/24 maxlen: 32
61.57.0.0/19 maxlen: 24
103.224.132.0/22 maxlen: 24
124.8.0.0/14 maxlen: 24
124.12.0.0/16 maxlen: 24
124.108.128.0/18 maxlen: 32
175.96.0.0/14 maxlen: 24
175.99.72.0/24 maxlen: 32
202.132.0.0/16 maxlen: 24
202.145.32.0/19 maxlen: 24
202.145.64.0/18 maxlen: 24
202.145.128.0/17 maxlen: 24
203.65.160.0/19 maxlen: 24
203.77.0.0/19 maxlen: 24
203.77.32.0/19 maxlen: 24
203.77.64.0/18 maxlen: 24
203.105.224.0/19 maxlen: 24
203.211.0.0/19 maxlen: 24
210.17.0.0/17 maxlen: 24
210.17.7.0/24 maxlen: 32
210.17.13.0/24 maxlen: 32
210.17.16.0/24 maxlen: 32
210.17.17.0/24 maxlen: 32
210.17.19.0/24 maxlen: 32
210.17.20.0/24 maxlen: 32
210.17.35.0/24 maxlen: 32
210.17.43.0/24 maxlen: 32
210.17.49.0/24 maxlen: 32
210.17.50.0/24 maxlen: 32
210.17.51.0/24 maxlen: 32
210.17.72.0/24 maxlen: 32
210.17.73.0/24 maxlen: 32
210.17.76.0/22 maxlen: 32
210.17.80.0/20 maxlen: 32
210.17.96.0/22 maxlen: 32
210.17.100.0/23 maxlen: 32
210.17.104.0/21 maxlen: 32
210.17.112.0/20 maxlen: 32
210.62.0.0/19 maxlen: 24
210.62.32.0/19 maxlen: 24
210.62.192.0/19 maxlen: 24
210.63.128.0/19 maxlen: 24
210.63.160.0/19 maxlen: 24
210.67.144.0/20 maxlen: 24
210.67.144.0/20 maxlen: 25
210.67.160.0/19 maxlen: 24
210.67.192.0/19 maxlen: 24
210.67.192.0/20 maxlen: 24
210.67.208.0/20 maxlen: 24
210.192.0.0/18 maxlen: 24
210.192.128.0/17 maxlen: 24
210.208.96.0/19 maxlen: 24
210.208.192.0/18 maxlen: 24
210.243.64.0/19 maxlen: 24
210.243.96.0/19 maxlen: 24
211.78.208.0/20 maxlen: 24
211.79.0.0/19 maxlen: 24
219.80.0.0/15 maxlen: 24
219.80.0.0/16 maxlen: 24
219.81.0.0/16 maxlen: 24
219.86.0.0/15 maxlen: 24
2001:c50::/32 maxlen: 48
2001:4540::/27 maxlen: 64
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:91:84:a8:73:83:36:8b:15:9c:3d:18:ea:50:15:78:04:62:ae:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Validity
Not Before: May 11 17:14:00 2026 GMT
Not After : May 10 17:19:00 2027 GMT
Subject: CN=2FCD86AF1D30A28663E2AC3688E401F7E8DF7160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:ff:1b:51:d4:a9:10:f5:c6:0b:d1:6f:f6:
58:74:e3:20:2e:b3:df:ff:63:51:e4:59:a0:20:75:
26:3a:da:55:84:4e:bf:40:55:c3:21:31:72:22:a0:
d7:72:11:00:ac:c5:96:1e:ed:73:6c:ce:7a:60:df:
23:83:44:9b:6b:a8:32:dd:7e:22:1f:d5:d8:e5:0b:
05:06:ab:ac:52:ee:dd:d9:4b:42:c7:c2:ee:ca:2c:
a4:43:b3:0b:3e:a8:77:13:75:55:c8:2a:69:45:c3:
57:5f:36:e9:b3:5d:59:37:70:dc:7c:a8:5f:bf:c8:
ed:56:77:b2:a0:e4:ed:91:a5:63:82:1e:4c:6a:59:
e2:fc:a7:8a:63:1a:97:a0:74:43:6f:26:05:e9:b8:
b8:fd:9c:97:42:85:b1:e8:c4:68:32:4b:d5:20:97:
30:40:01:e4:cb:bc:96:3a:a8:96:d0:a3:c4:b5:16:
07:b7:a8:69:cf:0c:47:02:f5:01:16:4e:81:c5:93:
cc:62:82:2a:57:c1:87:80:bf:a2:ed:c3:dd:4e:ef:
d6:ff:1c:08:c2:7c:11:1d:c3:76:ba:ca:66:c8:20:
a7:85:3c:3d:a7:36:3d:fa:b3:6f:17:79:b9:3d:fd:
67:f2:82:96:af:c5:7e:58:bf:da:a7:bc:a1:b9:16:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CD:86:AF:1D:30:A2:86:63:E2:AC:36:88:E4:01:F7:E8:DF:71:60
X509v3 Authority Key Identifier:
keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS9924.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.24.0/22
49.214.0.0-49.219.255.255
60.198.0.0/15
61.30.0.0/15
61.57.0.0/19
103.224.132.0/22
124.8.0.0-124.12.255.255
124.108.128.0/18
175.96.0.0/14
202.132.0.0/16
202.145.32.0-202.145.255.255
203.65.160.0/19
203.77.0.0/17
203.105.224.0/19
203.211.0.0/19
210.17.0.0/17
210.62.0.0/18
210.62.192.0/19
210.63.128.0/18
210.67.144.0-210.67.223.255
210.192.0.0/18
210.192.128.0/17
210.208.96.0/19
210.208.192.0/18
210.243.64.0/18
211.78.208.0/20
211.79.0.0/19
219.80.0.0/15
219.86.0.0/15
IPv6:
2001:c50::/32
2001:4540::/27
Signature Algorithm: sha256WithRSAEncryption
37:32:1d:95:eb:0a:8a:ed:8c:ad:69:a2:62:c8:b3:7e:27:9b:
45:a2:3d:5b:31:6a:ff:a5:59:5e:5b:8c:3f:ae:9f:e6:fd:55:
2e:c8:23:00:48:27:aa:84:f8:ed:81:ff:04:e7:aa:a4:4a:e1:
07:70:37:4a:69:c9:44:c5:51:ab:45:e8:29:35:8c:79:c7:bf:
f6:0e:15:9e:9f:eb:7a:44:d6:ba:3d:d5:0e:fc:89:64:b7:6f:
a5:66:d4:0a:3d:51:5b:b7:fc:17:44:26:64:0a:b2:98:6f:3c:
26:bb:c3:b1:cd:36:de:e1:5b:6a:55:75:c8:d9:7f:7b:36:90:
51:e2:63:b1:76:a0:30:64:9e:7f:ff:60:29:c5:0a:9b:88:8d:
24:ae:4d:88:de:cd:e0:6a:a5:61:b6:e0:d5:5c:31:50:60:6c:
2e:c8:cf:15:cf:ef:5b:a2:af:5e:bf:7b:bd:20:9d:80:19:42:
02:01:e5:05:b3:94:0c:16:cb:f8:d4:73:9d:ae:6d:03:38:67:
24:2c:a5:aa:14:9c:83:9b:10:ff:4c:ec:d4:e8:c2:02:52:40:
df:f4:8e:e4:e4:fb:d1:19:15:4f:c5:34:a8:12:72:09:ac:b8:
d6:d5:cb:37:9a:5a:d3:35:25:3a:03:87:07:51:c2:1e:d9:31:
f4:29:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:04:35 2026 by rpki-client