Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa
File:                     3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier:          TfpMHl3tbMw4P8soG2o7vLNtNm7H+J+gz5LksyActPg=
Subject key identifier:   2A:41:06:D4:6E:56:A0:A2:EF:2B:E6:58:2C:51:2B:A9:A5:82:66:96
Certificate issuer:       /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Certificate serial:       7143CE8AB94EE9552E6CB53854B1C6A468A9C640
Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa
Signing time:             Wed 05 Aug 2026 17:04:01 +0000
ROA not before:           Wed 05 Aug 2026 16:59:01 +0000
ROA not after:            Wed 04 Aug 2027 17:04:01 +0000
asID:                     202736
IP address blocks:        163.128.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
                          rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 14:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:43:ce:8a:b9:4e:e9:55:2e:6c:b5:38:54:b1:c6:a4:68:a9:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
        Validity
            Not Before: Aug  5 16:59:01 2026 GMT
            Not After : Aug  4 17:04:01 2027 GMT
        Subject: CN=2A4106D46E56A0A2EF2BE6582C512BA9A5826696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:f0:fc:7b:8e:85:58:46:6a:c0:ae:2e:26:
                    35:8d:b1:0e:97:16:af:8f:2c:6e:11:27:a1:c0:c8:
                    bd:a0:79:e0:bb:d2:86:3b:f0:5f:7f:ff:13:a3:79:
                    4d:f8:a3:fc:46:6b:70:dc:75:5d:1a:7f:2d:39:ba:
                    2c:09:c9:ba:0d:66:1f:74:aa:47:81:94:28:d1:d1:
                    74:d3:54:71:df:ca:c6:88:70:68:21:ee:c9:50:5f:
                    6b:bf:ba:c1:c5:b4:d5:16:bc:00:ba:a8:17:ee:aa:
                    ea:0f:96:cd:e8:35:d5:c3:dd:da:62:86:87:d3:31:
                    db:c8:1b:64:b6:05:48:01:19:fd:0a:88:8e:f4:a3:
                    21:b2:02:15:c8:32:79:2d:27:53:62:d5:26:8f:1f:
                    03:b9:d3:f6:f8:1d:d5:ed:cc:62:3d:07:75:ef:9a:
                    6c:30:51:f4:0e:78:06:10:5a:dd:f9:bb:4b:54:ac:
                    1a:68:cc:3b:95:95:a1:e0:7c:b1:b7:12:d7:78:ad:
                    a6:29:e5:dd:d7:fd:9f:5e:a2:42:3a:8a:2b:07:bd:
                    eb:9d:9c:a7:35:2b:86:9b:38:4c:c7:af:38:05:4f:
                    89:9f:2d:67:7b:a7:89:8d:69:2d:83:49:10:5f:01:
                    49:88:90:71:07:e6:81:8d:b1:95:b9:52:19:05:6b:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:41:06:D4:6E:56:A0:A2:EF:2B:E6:58:2C:51:2B:A9:A5:82:66:96
            X509v3 Authority Key Identifier:
                keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:7b:7c:a5:38:e7:02:58:ea:fa:27:67:0a:f1:6a:a7:6c:
         f3:e4:be:05:4e:cb:36:70:98:13:a9:72:44:1d:20:57:85:a9:
         3c:a4:30:28:19:8b:b1:3d:9a:95:35:b3:46:61:63:d0:bc:c1:
         bd:4b:3f:8a:fa:df:09:85:2e:79:0f:9c:8d:bb:22:50:2b:6f:
         89:99:c0:7c:04:19:5a:57:a6:8f:48:38:5f:9f:6a:81:0d:5c:
         b6:49:b4:15:3f:4b:c8:bc:55:d3:e1:d2:38:15:d9:4d:ed:ad:
         24:79:01:f0:5f:40:f2:b0:73:98:4f:31:94:50:5b:e7:d3:14:
         1f:1e:a8:5a:55:81:a1:c4:ce:39:13:68:2b:a1:db:71:a5:7d:
         22:6e:12:94:f6:05:f1:78:76:bf:30:fd:b3:7e:a5:d8:a1:c5:
         0e:85:17:ad:91:c3:48:b5:5e:d3:13:9d:b6:71:84:d3:b7:ce:
         8a:66:4f:8b:01:e7:59:d7:fe:ad:ab:26:4d:1e:8f:d0:8a:41:
         38:c7:c4:dc:d7:7f:e4:98:c0:f2:fd:11:ce:08:c6:98:f4:b0:
         26:6f:eb:70:28:7d:7f:cf:bf:34:47:85:40:9c:82:a7:72:3e:
         fd:b6:a5:82:f8:79:ad:04:c1:88:dc:59:db:0c:b0:d5:3b:3f:
         fa:7a:c0:75
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUcUPOirlO6VUubLU4VLHGpGipxkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFDODNDOTJF
RkRDQTI1RTAeFw0yNjA4MDUxNjU5MDFaFw0yNzA4MDQxNzA0MDFaMDMxMTAvBgNV
BAMTKDJBNDEwNkQ0NkU1NkEwQTJFRjJCRTY1ODJDNTEyQkE5QTU4MjY2OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+o/D8e46FWEZqwK4uJjWNsQ6X
Fq+PLG4RJ6HAyL2geeC70oY78F9//xOjeU34o/xGa3DcdV0afy05uiwJyboNZh90
qkeBlCjR0XTTVHHfysaIcGgh7slQX2u/usHFtNUWvAC6qBfuquoPls3oNdXD3dpi
hofTMdvIG2S2BUgBGf0KiI70oyGyAhXIMnktJ1Ni1SaPHwO50/b4HdXtzGI9B3Xv
mmwwUfQOeAYQWt35u0tUrBpozDuVlaHgfLG3Etd4raYp5d3X/Z9eokI6iisHveud
nKc1K4abOEzHrzgFT4mfLWd7p4mNaS2DSRBfAUmIkHEH5oGNsZW5UhkFa+UJAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUKkEG1G5WoKLvK+ZYLFErqaWCZpYwHwYDVR0j
BBgwFoAUN7xVxVOZca+49nCegcg8ku/col4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJFQUNI
OS8wLzM3QkM1NUM1NTM5OTcxQUZCOEY2NzA5RTgxQzgzQzkyRUZEQ0EyNUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFD
ODNDOTJFRkRDQTI1RS5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JSRUFDSDkvMC8zMTM2MzMyZTMx
MzIzODJlMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjM3MzMzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKOATTANBgkqhkiG9w0BAQsFAAOCAQEAREx7fKU45wJY6vonZwrx
aqds8+S+BU7LNnCYE6lyRB0gV4WpPKQwKBmLsT2alTWzRmFj0LzBvUs/ivrfCYUu
eQ+cjbsiUCtviZnAfAQZWlemj0g4X59qgQ1ctkm0FT9LyLxV0+HSOBXZTe2tJHkB
8F9A8rBzmE8xlFBb59MUHx6oWlWBocTOORNoK6HbcaV9Im4SlPYF8Xh2vzD9s36l
2KHFDoUXrZHDSLVe0xOdtnGE07fOimZPiwHnWdf+rasmTR6P0IpBOMfE3Nd/5JjA
8v0RzgjGmPSwJm/rcCh9f8+/NEeFQJyCp3I+/balgvh5rQTBiNxZ2wyw1Ts/+nrA
dQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:31:57 2026 by rpki-client