
$ rpki-client -vvf rpkica.twnic.tw/rpki/BREACH9/0/323030313a6466653a3a2f33322d3438203d3e2039393233.roa
File: 323030313a6466653a3a2f33322d3438203d3e2039393233.roa (raw, json)
Hash identifier: pgrYZOajKzQyKCkN+wjloDZT1L0F29LlCuW5K22DqWg=
Subject key identifier: EB:E9:D8:8D:E3:08:CD:4F:D6:B7:75:4F:51:C8:A8:F3:D7:3C:58:5F
Certificate issuer: /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Certificate serial: 6F2AA22C774B119F16A0676180E3B02E316C22E0
Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BREACH9/0/323030313a6466653a3a2f33322d3438203d3e2039393233.roa
Signing time: Mon 08 Jun 2026 17:03:50 +0000
ROA not before: Mon 08 Jun 2026 16:58:50 +0000
ROA not after: Mon 07 Jun 2027 17:03:50 +0000
asID: 9923
IP address blocks: 2001:dfe::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2a:a2:2c:77:4b:11:9f:16:a0:67:61:80:e3:b0:2e:31:6c:22:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E
Validity
Not Before: Jun 8 16:58:50 2026 GMT
Not After : Jun 7 17:03:50 2027 GMT
Subject: CN=EBE9D88DE308CD4FD6B7754F51C8A8F3D73C585F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:93:13:b4:62:38:d8:ab:b9:0c:2f:38:95:
5a:fe:be:c3:1c:50:2d:63:00:d9:7d:7c:71:31:cc:
56:1c:ee:9f:62:02:25:9f:ba:5a:dd:9f:f6:da:ba:
4a:96:0a:97:6b:40:1b:33:7d:be:f8:1c:c9:58:a1:
af:1a:f5:5f:6a:5f:5e:21:3c:0a:5f:85:2b:4b:f7:
63:93:f1:69:39:29:3d:47:0d:0e:aa:da:31:71:0c:
98:64:e3:db:34:77:e0:99:3e:df:3a:cd:a0:ab:b3:
1a:da:e6:79:70:02:b1:44:40:14:93:86:a2:7e:2d:
13:51:8c:7b:93:76:6f:cc:4a:88:fe:e1:8c:a0:e8:
8c:e7:6b:f2:70:3c:f9:c0:1d:3b:74:25:4d:cf:12:
b3:bd:65:6d:5a:d5:42:08:bd:15:50:33:db:d9:73:
48:d9:f8:2a:c5:1a:ef:eb:25:75:e1:12:5b:27:10:
c2:f0:53:a7:2c:1c:56:ae:3b:e6:70:be:bf:49:7f:
9f:c1:df:c8:ab:e6:0b:c4:2f:91:5e:b0:da:1c:0e:
44:05:ab:bc:07:28:0c:a0:bd:3a:c8:e5:c4:ab:b1:
92:5a:36:ea:4d:f0:13:86:21:7c:5f:43:dd:1e:b7:
21:09:e0:e7:a0:c7:2f:8a:e7:28:23:a0:4d:55:93:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:D8:8D:E3:08:CD:4F:D6:B7:75:4F:51:C8:A8:F3:D7:3C:58:5F
X509v3 Authority Key Identifier:
keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/323030313a6466653a3a2f33322d3438203d3e2039393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:dfe::/32
Signature Algorithm: sha256WithRSAEncryption
64:97:8a:9d:41:5c:07:2d:98:e1:3d:8f:80:f9:35:d8:64:c2:
de:0a:5a:80:98:26:0d:8b:8c:64:c9:c3:25:45:29:7c:8c:35:
8d:3a:a0:a2:3d:d0:52:49:3e:36:31:cc:35:91:b5:ae:d1:9c:
0d:ee:97:e6:c8:c3:a4:92:19:d5:a6:95:60:ec:cd:4e:c7:04:
50:a6:8b:8b:d9:48:9f:ff:c3:fd:bb:95:4d:51:0e:44:dc:8a:
fd:91:00:1e:59:28:f9:10:c0:89:07:76:c4:c0:38:7d:4b:8f:
df:1d:1e:8c:22:e3:5a:d1:50:30:92:cc:9e:7b:38:88:da:60:
e5:d0:61:de:ea:47:01:f0:11:74:05:3b:fd:a8:61:f6:fe:21:
2f:07:f2:f0:f8:de:50:34:3b:88:00:91:2b:57:83:04:1d:2b:
89:83:14:5a:fb:60:33:0c:95:83:fd:cf:31:5b:75:07:ba:43:
6a:8b:cc:0c:07:80:1e:05:36:b1:70:d0:69:a8:27:21:3b:25:
83:30:1d:df:97:51:6f:3a:9c:56:5f:55:86:a4:89:c0:e7:75:
e9:84:be:08:08:1e:ac:e4:78:b1:c7:fa:33:c3:cf:c2:ca:58:
32:6f:41:ee:b7:b1:fc:b0:94:24:2c:c7:7a:4a:17:e9:3b:fd:
5f:c0:43:cc
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIUbyqiLHdLEZ8WoGdhgOOwLjFsIuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFDODNDOTJF
RkRDQTI1RTAeFw0yNjA2MDgxNjU4NTBaFw0yNzA2MDcxNzAzNTBaMDMxMTAvBgNV
BAMTKEVCRTlEODhERTMwOENENEZENkI3NzU0RjUxQzhBOEYzRDczQzU4NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSpMTtGI42Ku5DC84lVr+vsMc
UC1jANl9fHExzFYc7p9iAiWfulrdn/baukqWCpdrQBszfb74HMlYoa8a9V9qX14h
PApfhStL92OT8Wk5KT1HDQ6q2jFxDJhk49s0d+CZPt86zaCrsxra5nlwArFEQBST
hqJ+LRNRjHuTdm/MSoj+4Yyg6Izna/JwPPnAHTt0JU3PErO9ZW1a1UIIvRVQM9vZ
c0jZ+CrFGu/rJXXhElsnEMLwU6csHFauO+Zwvr9Jf5/B38ir5gvEL5FesNocDkQF
q7wHKAygvTrI5cSrsZJaNupN8BOGIXxfQ90etyEJ4Oegxy+K5ygjoE1Vk/DbAgMB
AAGjggHgMIIB3DAdBgNVHQ4EFgQU6+nYjeMIzU/Wt3VPUcio89c8WF8wHwYDVR0j
BBgwFoAUN7xVxVOZca+49nCegcg8ku/col4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJFQUNI
OS8wLzM3QkM1NUM1NTM5OTcxQUZCOEY2NzA5RTgxQzgzQzkyRUZEQ0EyNUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFD
ODNDOTJFRkRDQTI1RS5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhlty
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JSRUFDSDkvMC8zMjMwMzAzMTNh
NjQ2NjY1M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzOTMyMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD
BQAgAQ3+MA0GCSqGSIb3DQEBCwUAA4IBAQBkl4qdQVwHLZjhPY+A+TXYZMLeClqA
mCYNi4xkycMlRSl8jDWNOqCiPdBSST42Mcw1kbWu0ZwN7pfmyMOkkhnVppVg7M1O
xwRQpouL2Uif/8P9u5VNUQ5E3Ir9kQAeWSj5EMCJB3bEwDh9S4/fHR6MIuNa0VAw
ksyeeziI2mDl0GHe6kcB8BF0BTv9qGH2/iEvB/Lw+N5QNDuIAJErV4MEHSuJgxRa
+2AzDJWD/c8xW3UHukNqi8wMB4AeBTaxcNBpqCchOyWDMB3fl1FvOpxWX1WGpInA
53XphL4ICB6s5Hixx/ozw8/Cylgyb0Hut7H8sJQkLMd6ShfpO/1fwEPM
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:37 2026 by rpki-client