Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
File: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer (raw, json)
Hash identifier: 4GWgYua3Kf3v3t4BBiyg7PIWrAmIr+hk9F/KujeaQPM=
Subject key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4DE2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Thu 16 Oct 2025 02:27:09 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 2.58.240.0/22
IP: 2001:7fa:1::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19938 (0x4de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 16 02:27:09 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:2d:6c:a6:63:34:42:4a:08:60:2c:3e:bf:
15:b8:8e:13:65:ca:b0:aa:4c:99:3c:d5:f8:49:6e:
ea:d2:42:e0:48:c8:2a:c4:81:4b:f3:50:2d:36:4a:
14:e6:b7:5e:1e:fa:05:f0:8f:fe:0a:a9:e6:63:f8:
fd:60:7d:b8:ed:09:a8:51:f7:27:e2:fa:cd:28:63:
ec:c3:6a:a2:ab:6b:77:39:74:16:1a:0c:28:3c:09:
08:be:a0:94:51:d9:c1:3e:a9:67:ba:92:95:68:ca:
d0:a7:a2:10:5b:cb:e6:5a:8c:e2:01:c1:8d:94:22:
4c:41:f6:69:ae:35:51:da:a0:23:56:d8:64:ed:ce:
90:75:ba:fd:85:28:22:85:38:e9:14:25:1b:2a:cd:
40:56:66:5b:ad:0e:b7:eb:8c:61:a5:3b:90:43:09:
74:14:4b:21:73:a9:84:dd:43:dd:c1:bf:25:24:72:
8b:01:84:0f:62:56:f7:31:93:89:83:26:17:49:e5:
ce:84:71:a2:7c:2e:26:5b:56:a9:4d:17:28:39:76:
d1:2c:ca:53:5d:f0:80:c1:d4:34:68:87:f1:4a:fb:
b3:ca:21:6b:14:5b:fd:4e:db:cc:90:b6:65:a4:48:
e3:e5:8d:e5:f9:00:3c:c4:dd:44:f3:f8:ef:1b:09:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
2.58.240.0/22
IPv6:
2001:7fa:1::/48
Signature Algorithm: sha256WithRSAEncryption
30:e4:f5:fa:78:19:e9:44:0a:b0:5b:66:18:3f:81:cf:01:67:
57:21:d2:74:53:fe:64:b8:b6:7b:36:4e:f3:0b:cf:2d:e1:c4:
fa:47:a4:34:84:c4:62:2f:93:35:b1:f8:bf:4b:75:d8:5f:42:
ee:f9:5e:9b:08:09:a2:ee:6a:0b:16:c5:f6:5a:19:71:62:3e:
8b:f3:d4:7e:d3:57:4a:7f:b1:fc:28:25:0d:7c:38:cd:fa:65:
93:cd:7f:59:b9:e5:33:88:0b:22:04:b2:e1:be:39:fc:f6:ad:
4b:d9:c0:2b:84:2f:bd:6e:a4:b3:64:33:bb:7a:10:45:02:da:
48:75:8c:94:8c:a0:8f:e6:5f:d1:78:4a:51:50:58:0d:6d:25:
8f:7d:85:73:4a:e4:6f:a6:76:78:c1:7b:91:6f:73:8d:f1:88:
2d:57:77:05:b5:84:bc:02:f8:f4:1c:f4:bc:54:64:62:c7:38:
2e:41:c9:a0:46:4f:2f:83:7b:13:99:5f:10:f0:a8:73:79:9f:
e9:34:c2:e5:1c:f5:6c:6d:c0:46:df:16:ad:74:10:70:e6:29:
74:36:0d:69:f6:53:b2:74:a8:96:ba:30:25:fd:1a:34:34:cc:
26:4c:2b:7b:9e:4a:1a:12:14:06:a2:f0:04:b3:3f:a8:a4:68:
45:03:b9:7d
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgICTeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjUxMDE2MDIyNzA5WhcNMjYwOTMwMDAwMDAwWjBKMRUwEwYD
VQQDEwxBOTFCREIyOTAwMDAxMTAvBgNVBAUTKEQxRDJGNTVDMjZEQjI4NTIwQTc5
OTZGRjcyRUQwMTA0MjAwNzk4QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+Ei1spmM0QkoIYCw+vxW4jhNlyrCqTJk81fhJburSQuBIyCrEgUvzUC02
ShTmt14e+gXwj/4KqeZj+P1gfbjtCahR9yfi+s0oY+zDaqKra3c5dBYaDCg8CQi+
oJRR2cE+qWe6kpVoytCnohBby+ZajOIBwY2UIkxB9mmuNVHaoCNW2GTtzpB1uv2F
KCKFOOkUJRsqzUBWZlutDrfrjGGlO5BDCXQUSyFzqYTdQ93BvyUkcosBhA9iVvcx
k4mDJhdJ5c6EcaJ8LiZbVqlNFyg5dtEsylNd8IDB1DRoh/FK+7PKIWsUW/1O28yQ
tmWkSOPljeX5ADzE3UTz+O8bCdrbAgMBAAGjggKjMIICnzAdBgNVHQ4EFgQU0dL1
XCbbKFIKeZb/cu0BBCAHmKIwHwYDVR0jBBgwFoAUDPzneFf88B852ZpitKpi5hWe
dvgwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo
oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0
MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0RQem5lRmY4OEI4NTJacGl0S3BpNWhX
ZWR2Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy
MUE0RjRGQjQvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZnLmNlcjBKBgNVHSAB
Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw
bmljLm5ldC9SUEtJL0NQUy5wZGYwgcgGCCsGAQUFBwELBIG7MIG4MDEGCCsGAQUF
BzAFhiVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMFAGCCsG
AQUFBzAKhkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMGRM
MVhDYmJLRklLZVpiX2N1MEJCQ0FIbUtJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6
Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAgI68DAPBAIAAjAJAwcAIAEH+gABMA0GCSqGSIb3DQEBCwUA
A4IBAQAw5PX6eBnpRAqwW2YYP4HPAWdXIdJ0U/5kuLZ7Nk7zC88t4cT6R6Q0hMRi
L5M1sfi/S3XYX0Lu+V6bCAmi7moLFsX2WhlxYj6L89R+01dKf7H8KCUNfDjN+mWT
zX9ZueUziAsiBLLhvjn89q1L2cArhC+9bqSzZDO7ehBFAtpIdYyUjKCP5l/ReEpR
UFgNbSWPfYVzSuRvpnZ4wXuRb3ON8YgtV3cFtYS8Avj0HPS8VGRixzguQcmgRk8v
g3sTmV8Q8KhzeZ/pNMLlHPVsbcBG3xatdBBw5il0Ng1p9lOydKiWujAl/Ro0NMwm
TCt7nkoaEhQGovAEsz+opGhFA7l9
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:36:35 2025 by rpki-client