
$ rpki-client -vvf rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa
File: 3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier: TfpMHl3tbMw4P8soG2o7vLNtNm7H+J+gz5LksyActPg=
Subject key identifier: 2A:41:06:D4:6E:56:A0:A2:EF:2B:E6:58:2C:51:2B:A9:A5:82:66:96
Certificate issuer: /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Certificate serial: 7143CE8AB94EE9552E6CB53854B1C6A468A9C640
Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa
Signing time: Wed 05 Aug 2026 17:04:01 +0000
ROA not before: Wed 05 Aug 2026 16:59:01 +0000
ROA not after: Wed 04 Aug 2027 17:04:01 +0000
asID: 202736
IP address blocks: 163.128.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 14:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:43:ce:8a:b9:4e:e9:55:2e:6c:b5:38:54:b1:c6:a4:68:a9:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Validity
Not Before: Aug 5 16:59:01 2026 GMT
Not After : Aug 4 17:04:01 2027 GMT
Subject: CN=2A4106D46E56A0A2EF2BE6582C512BA9A5826696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:f0:fc:7b:8e:85:58:46:6a:c0:ae:2e:26:
35:8d:b1:0e:97:16:af:8f:2c:6e:11:27:a1:c0:c8:
bd:a0:79:e0:bb:d2:86:3b:f0:5f:7f:ff:13:a3:79:
4d:f8:a3:fc:46:6b:70:dc:75:5d:1a:7f:2d:39:ba:
2c:09:c9:ba:0d:66:1f:74:aa:47:81:94:28:d1:d1:
74:d3:54:71:df:ca:c6:88:70:68:21:ee:c9:50:5f:
6b:bf:ba:c1:c5:b4:d5:16:bc:00:ba:a8:17:ee:aa:
ea:0f:96:cd:e8:35:d5:c3:dd:da:62:86:87:d3:31:
db:c8:1b:64:b6:05:48:01:19:fd:0a:88:8e:f4:a3:
21:b2:02:15:c8:32:79:2d:27:53:62:d5:26:8f:1f:
03:b9:d3:f6:f8:1d:d5:ed:cc:62:3d:07:75:ef:9a:
6c:30:51:f4:0e:78:06:10:5a:dd:f9:bb:4b:54:ac:
1a:68:cc:3b:95:95:a1:e0:7c:b1:b7:12:d7:78:ad:
a6:29:e5:dd:d7:fd:9f:5e:a2:42:3a:8a:2b:07:bd:
eb:9d:9c:a7:35:2b:86:9b:38:4c:c7:af:38:05:4f:
89:9f:2d:67:7b:a7:89:8d:69:2d:83:49:10:5f:01:
49:88:90:71:07:e6:81:8d:b1:95:b9:52:19:05:6b:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:06:D4:6E:56:A0:A2:EF:2B:E6:58:2C:51:2B:A9:A5:82:66:96
X509v3 Authority Key Identifier:
keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.77.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4c:7b:7c:a5:38:e7:02:58:ea:fa:27:67:0a:f1:6a:a7:6c:
f3:e4:be:05:4e:cb:36:70:98:13:a9:72:44:1d:20:57:85:a9:
3c:a4:30:28:19:8b:b1:3d:9a:95:35:b3:46:61:63:d0:bc:c1:
bd:4b:3f:8a:fa:df:09:85:2e:79:0f:9c:8d:bb:22:50:2b:6f:
89:99:c0:7c:04:19:5a:57:a6:8f:48:38:5f:9f:6a:81:0d:5c:
b6:49:b4:15:3f:4b:c8:bc:55:d3:e1:d2:38:15:d9:4d:ed:ad:
24:79:01:f0:5f:40:f2:b0:73:98:4f:31:94:50:5b:e7:d3:14:
1f:1e:a8:5a:55:81:a1:c4:ce:39:13:68:2b:a1:db:71:a5:7d:
22:6e:12:94:f6:05:f1:78:76:bf:30:fd:b3:7e:a5:d8:a1:c5:
0e:85:17:ad:91:c3:48:b5:5e:d3:13:9d:b6:71:84:d3:b7:ce:
8a:66:4f:8b:01:e7:59:d7:fe:ad:ab:26:4d:1e:8f:d0:8a:41:
38:c7:c4:dc:d7:7f:e4:98:c0:f2:fd:11:ce:08:c6:98:f4:b0:
26:6f:eb:70:28:7d:7f:cf:bf:34:47:85:40:9c:82:a7:72:3e:
fd:b6:a5:82:f8:79:ad:04:c1:88:dc:59:db:0c:b0:d5:3b:3f:
fa:7a:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:31:57 2026 by rpki-client