Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
File: xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer (raw, json)
Hash identifier: +xkFnglLsVtSrBcTsG7gvBfuZ+CtqCu+lqaJDhoPWus=
Subject key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5334
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 11:36:48 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 2.58.240.0/22
IP: 151.158.6.0/23
IP: 151.158.26.0/23
IP: 151.158.88.0/23
IP: 151.158.160.0/23
IP: 151.158.168.0/23
IP: 151.158.224.0/23
IP: 2001:7fa:1::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21300 (0x5334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: May 11 11:36:48 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:56:46:5d:42:2c:00:18:5c:42:3b:90:e6:
39:ba:9b:0f:34:6c:75:c2:30:6d:26:af:ae:a1:5a:
64:1f:6b:fc:96:4d:47:a9:28:7a:79:f1:c3:a1:8e:
fc:23:eb:07:9a:8c:c3:ad:a8:4c:74:e5:c8:2c:73:
83:b6:4c:13:71:89:18:f4:7c:e8:e4:93:6a:5a:fd:
81:22:d8:30:e9:0e:58:cd:2e:5a:75:10:08:34:55:
f2:56:93:b9:d8:15:48:62:38:d9:52:89:1a:ad:3d:
a0:1f:39:3f:21:8c:09:52:0d:46:b1:a5:71:a7:82:
1a:7b:9b:88:24:e5:06:9f:a7:f6:e3:69:7a:bf:fd:
fa:28:66:79:90:94:93:e8:60:d8:7b:a3:fb:80:b3:
ac:10:cf:28:61:71:da:dd:b6:87:9b:b2:c5:19:83:
5a:5c:c3:6a:da:a7:3d:eb:dc:b4:7f:73:23:df:f5:
aa:c6:3c:e0:5a:41:0d:29:92:d1:c7:54:3f:e9:f9:
e2:ac:a6:10:65:b0:19:43:bf:62:9a:ba:98:93:db:
a8:bd:82:ba:5c:a7:fd:4c:e5:4a:1a:07:86:29:e5:
57:b7:23:96:53:01:93:90:84:2b:60:84:5d:50:d9:
3e:ca:93:a3:82:57:3e:53:b2:d9:09:9c:ac:04:a9:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
2.58.240.0/22
151.158.6.0/23
151.158.26.0/23
151.158.88.0/23
151.158.160.0/23
151.158.168.0/23
151.158.224.0/23
IPv6:
2001:7fa:1::/48
Signature Algorithm: sha256WithRSAEncryption
44:f6:d6:a3:cc:21:62:e1:64:90:3a:e4:80:09:2a:b2:5d:5d:
06:72:59:d7:c3:1d:eb:08:1b:09:ea:4c:40:ef:db:6d:83:51:
c6:67:19:a1:f3:38:7a:5b:a7:73:23:84:2d:17:f5:92:1a:d5:
2f:a4:5e:70:4f:f9:f9:ce:50:1d:ff:db:1d:04:f1:da:97:7f:
b0:14:b3:70:b8:4a:84:80:5d:99:5b:ab:11:4e:b4:3b:e0:65:
35:92:be:de:af:2a:a9:88:ab:fd:9e:b9:32:d5:0c:f8:e4:3a:
cb:b5:b3:4b:06:7d:0c:a7:0b:20:0d:39:f0:0b:70:f9:75:4a:
07:fd:67:53:43:27:26:c1:9e:3d:c0:85:1f:24:c4:3b:51:21:
69:7a:50:2d:94:1f:4b:26:b1:f0:06:53:bc:92:ec:68:af:a0:
5c:43:f5:bc:ad:91:cd:22:b6:34:c0:11:05:cf:a7:20:bf:98:
cf:ae:56:06:fa:db:0f:1f:80:b5:9d:af:2f:17:43:e5:ef:11:
55:ad:f1:74:e8:f1:f5:e9:29:0b:49:e6:89:c9:00:08:a9:fe:
9a:68:ab:50:9e:de:c4:f2:93:44:74:af:c8:c1:93:c5:c6:89:
78:c6:75:c5:53:b8:59:bc:89:26:6e:43:f7:96:48:d1:71:fa:
1c:a1:c1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:07 2026 by rpki-client