
$ rpki-client -vvf rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37362e302f32332d3234203d3e203332353935.roa
File: 3136332e3132382e37362e302f32332d3234203d3e203332353935.roa (raw, json)
Hash identifier: K7N8j7vo0GWBUJ7KcOfXRKUesPEQd6IuNZ46Edb07vs=
Subject key identifier: DA:86:A1:75:D1:61:D7:DF:98:29:29:F4:28:2E:CE:3B:AE:15:4D:7C
Certificate issuer: /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Certificate serial: 560BC2958581294EFFA3BB2582E925D510980F3F
Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37362e302f32332d3234203d3e203332353935.roa
Signing time: Mon 08 Jun 2026 17:03:49 +0000
ROA not before: Mon 08 Jun 2026 16:58:49 +0000
ROA not after: Mon 07 Jun 2027 17:03:49 +0000
asID: 32595
IP address blocks: 163.128.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0b:c2:95:85:81:29:4e:ff:a3:bb:25:82:e9:25:d5:10:98:0f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Validity
Not Before: Jun 8 16:58:49 2026 GMT
Not After : Jun 7 17:03:49 2027 GMT
Subject: CN=DA86A175D161D7DF982929F4282ECE3BAE154D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:76:8d:dd:f5:86:83:43:8f:02:0a:7f:36:
3c:b4:fe:a3:19:1d:29:91:21:19:5c:38:00:a6:52:
ce:49:cd:a3:3f:b3:25:d6:e4:1f:a2:c4:aa:01:d1:
75:d6:3d:31:ff:d8:64:1f:84:31:99:89:1d:4b:e3:
e1:f3:ff:14:e2:7c:df:b5:50:f0:dc:d4:3b:bd:17:
2c:fc:73:4a:22:bf:f7:0e:3c:5e:7d:1f:55:61:19:
5f:8a:15:9e:c6:ec:9b:03:96:72:5d:02:8d:b6:40:
a9:50:42:f3:08:16:63:42:96:89:98:f6:bf:e6:95:
e4:c2:ff:de:eb:f9:07:14:26:f0:66:64:6f:62:47:
19:a5:fe:1a:da:d9:14:5f:b9:e6:3d:6c:a4:a9:2a:
cc:c0:9c:89:7c:83:da:28:49:f6:f8:70:4b:a5:6d:
19:26:ab:91:3d:09:5c:28:af:ea:b8:4b:cd:01:2c:
3c:08:d1:6a:ce:ca:e7:a8:6b:6c:6b:f8:c8:66:4b:
04:c8:f7:e5:8b:f6:10:75:ec:ba:62:8e:d6:29:cf:
93:56:a3:16:b1:dc:3d:50:84:e6:31:ab:89:a1:38:
b8:91:3b:df:53:0b:b8:f9:5f:92:a2:2f:d2:66:fa:
e8:72:38:78:5f:1e:d1:1b:5d:3e:dc:e6:53:71:86:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:A1:75:D1:61:D7:DF:98:29:29:F4:28:2E:CE:3B:AE:15:4D:7C
X509v3 Authority Key Identifier:
keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/3136332e3132382e37362e302f32332d3234203d3e203332353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.76.0/23
Signature Algorithm: sha256WithRSAEncryption
50:3f:c8:f8:23:63:5b:aa:67:0f:6f:f2:3e:b1:23:80:65:39:
46:52:b6:64:65:76:58:95:47:9d:90:09:fa:76:eb:a5:c4:e5:
25:26:b2:aa:55:07:8f:e2:d2:cd:8f:7d:a8:12:5a:79:8d:16:
84:4b:11:f0:e6:c1:f0:39:04:44:30:fc:31:05:e5:f8:2e:6a:
0c:84:9e:9e:cd:d4:f5:99:88:b5:33:04:5c:c3:84:af:70:6a:
46:12:4e:84:82:bf:e3:0a:c5:36:1b:06:84:52:fa:4c:14:b4:
44:81:02:20:2f:72:45:68:49:2a:68:ba:9c:3f:ff:16:5c:7e:
8c:df:d7:ba:0a:27:ca:eb:82:7a:03:89:a3:b5:d1:dc:4a:e8:
43:4e:24:23:60:ae:73:0c:c2:ad:10:c4:f4:f7:75:2a:60:6c:
2e:00:73:72:8c:32:a2:50:c4:f2:f2:52:ea:c6:d5:d2:aa:2d:
e6:5b:69:08:40:fe:e3:fd:3b:0d:3f:1f:99:f9:9f:9c:d3:04:
79:bb:22:59:81:eb:99:75:fb:13:68:fe:42:c1:19:4d:12:87:
62:1b:92:43:00:b5:08:cc:30:9b:a3:d5:80:08:07:a1:d3:b9:
82:0a:50:17:a4:9b:ec:61:7a:36:43:73:25:26:8c:bd:d3:9d:
39:d5:9d:aa
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUVgvClYWBKU7/o7slgukl1RCYDz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFDODNDOTJF
RkRDQTI1RTAeFw0yNjA2MDgxNjU4NDlaFw0yNzA2MDcxNzAzNDlaMDMxMTAvBgNV
BAMTKERBODZBMTc1RDE2MUQ3REY5ODI5MjlGNDI4MkVDRTNCQUUxNTREN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IHaN3fWGg0OPAgp/Njy0/qMZ
HSmRIRlcOACmUs5JzaM/syXW5B+ixKoB0XXWPTH/2GQfhDGZiR1L4+Hz/xTifN+1
UPDc1Du9Fyz8c0oiv/cOPF59H1VhGV+KFZ7G7JsDlnJdAo22QKlQQvMIFmNClomY
9r/mleTC/97r+QcUJvBmZG9iRxml/hra2RRfueY9bKSpKszAnIl8g9ooSfb4cEul
bRkmq5E9CVwor+q4S80BLDwI0WrOyueoa2xr+MhmSwTI9+WL9hB17LpijtYpz5NW
oxax3D1QhOYxq4mhOLiRO99TC7j5X5KiL9Jm+uhyOHhfHtEbXT7c5lNxhtfdAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQU2oahddFh19+YKSn0KC7OO64VTXwwHwYDVR0j
BBgwFoAUN7xVxVOZca+49nCegcg8ku/col4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJFQUNI
OS8wLzM3QkM1NUM1NTM5OTcxQUZCOEY2NzA5RTgxQzgzQzkyRUZEQ0EyNUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFD
ODNDOTJFRkRDQTI1RS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JSRUFDSDkvMC8zMTM2MzMyZTMx
MzIzODJlMzczNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMzMzIzNTM5MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGjgEwwDQYJKoZIhvcNAQELBQADggEBAFA/yPgjY1uqZw9v8j6xI4Bl
OUZStmRldliVR52QCfp266XE5SUmsqpVB4/i0s2PfagSWnmNFoRLEfDmwfA5BEQw
/DEF5fguagyEnp7N1PWZiLUzBFzDhK9wakYSToSCv+MKxTYbBoRS+kwUtESBAiAv
ckVoSSpoupw//xZcfozf17oKJ8rrgnoDiaO10dxK6ENOJCNgrnMMwq0QxPT3dSpg
bC4Ac3KMMqJQxPLyUurG1dKqLeZbaQhA/uP9Ow0/H5n5n5zTBHm7IlmB65l1+xNo
/kLBGU0Sh2IbkkMAtQjMMJuj1YAIB6HTuYIKUBekm+xhejZDcyUmjL3TnTnVnao=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:51 2026 by rpki-client