
$ rpki-client -vvf rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa
File: 3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: mlh0L4cv9acKEJ/qOZgzfu+K5lGDak9tmXUoIiAOhVA=
Subject key identifier: 24:75:DF:A9:3D:31:AB:8B:93:A7:CB:62:D2:F7:64:44:1A:AB:1D:48
Certificate issuer: /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Certificate serial: 63810CBD9FD0C1A00B14D866D9EF719D23A34C72
Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa
Signing time: Fri 26 Jun 2026 03:43:50 +0000
ROA not before: Fri 26 Jun 2026 03:38:50 +0000
ROA not after: Fri 25 Jun 2027 03:43:50 +0000
asID: 197537
IP address blocks: 163.128.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 14:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:81:0c:bd:9f:d0:c1:a0:0b:14:d8:66:d9:ef:71:9d:23:a3:4c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Validity
Not Before: Jun 26 03:38:50 2026 GMT
Not After : Jun 25 03:43:50 2027 GMT
Subject: CN=2475DFA93D31AB8B93A7CB62D2F764441AAB1D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:7a:dc:29:ea:36:70:e1:f1:e5:57:d6:fd:
49:6c:e3:2b:27:2c:f4:01:f0:d3:16:70:38:cc:55:
b3:41:44:51:26:4a:1c:84:ef:f6:fd:7e:cf:2b:86:
a8:dc:7d:45:b8:4a:59:75:71:c8:a4:41:29:db:0d:
7b:9a:c4:e7:9b:51:93:21:6a:64:b1:b4:ca:0a:8c:
c1:b7:4f:4f:ff:16:76:3e:4b:bc:f1:e2:73:69:78:
57:bb:3a:c2:11:7d:b9:87:83:52:e8:6b:8e:3f:88:
6b:42:37:a8:c3:e3:4c:0a:fe:64:1b:1e:17:0e:96:
2f:a8:fa:16:b8:ac:45:7d:22:12:ab:d1:08:f0:e7:
69:3d:e8:64:4a:f9:58:ee:a5:a1:d2:86:ec:61:75:
2e:8a:39:d7:a9:8c:c0:03:4c:d1:39:c5:4e:c9:09:
3f:66:6a:cc:3b:b9:97:68:e1:3e:1d:e8:45:28:ad:
1b:cb:cd:16:88:18:dd:40:a4:0b:d5:3b:a9:15:42:
67:ea:9c:76:99:f8:09:16:91:f4:d7:5c:ef:c6:60:
c5:85:12:f4:2d:fe:c5:d3:09:73:e3:e1:3e:97:1e:
c6:fa:9d:ac:10:8c:ef:ee:98:fd:12:33:ac:2b:e7:
e8:b2:df:5e:a8:0d:dd:67:9f:9f:5a:87:6f:94:e1:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:DF:A9:3D:31:AB:8B:93:A7:CB:62:D2:F7:64:44:1A:AB:1D:48
X509v3 Authority Key Identifier:
keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.77.0/24
Signature Algorithm: sha256WithRSAEncryption
16:55:15:fe:b6:b2:dc:d3:5d:26:d4:24:df:8f:3c:bf:e7:c3:
cf:ed:4f:0a:46:2c:0c:31:62:b1:6f:f2:34:20:e9:1f:ac:ad:
c8:2f:fb:c6:63:b0:ee:86:a7:78:6c:f5:a7:eb:41:65:3e:a9:
c7:ef:95:97:b8:05:c9:a3:4e:94:d2:cf:a4:ca:7c:83:bb:e8:
74:a9:46:62:c9:25:1f:72:d6:38:3c:7a:bd:59:c7:96:9e:c9:
c3:e5:8f:2e:85:9f:27:bc:4a:3c:a3:85:48:ac:ff:f0:8a:4e:
d7:8d:32:93:a0:0e:2d:75:0b:a7:30:83:34:cf:e8:00:87:c9:
9a:38:97:32:90:e6:17:5e:0e:1f:57:8c:ce:d4:53:e3:51:ce:
6f:1f:29:37:4a:c1:6f:63:c6:11:cf:c2:74:1b:05:ef:eb:57:
64:c3:66:39:d1:1a:1f:f1:93:a7:c8:71:ec:67:69:c8:ec:12:
9b:b9:6e:fd:d4:fa:23:ce:9b:92:54:e1:a3:38:cf:d7:3c:cb:
46:73:31:5d:2d:48:c1:f6:87:d1:ef:f9:c5:e2:24:8b:94:bc:
7e:48:8b:e9:27:80:06:c3:88:5e:3d:5d:d7:50:8f:76:eb:d8:
74:fd:7b:f9:56:c2:94:f4:9d:eb:ea:55:93:3b:be:7c:ee:7f:
85:96:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 20:12:55 2026 by rpki-client