Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
File:                     cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (raw, json)
Hash identifier:          kRE596OuuyWoxbv8T1vR2OaR4I4quaciUDwMti2Nlmk=
Subject key identifier:   71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer:       /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial:       4A1F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/2/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 11:37:41 +0000
Certificate not after:    Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources:    IP: 187.79.192.0/18
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18975 (0x4a1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
        Validity
            Not Before: May 11 11:37:41 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:ff:6a:e4:b2:78:c0:6d:cc:97:c3:a0:b4:
                    6d:33:51:de:a1:d2:6a:9c:b1:08:27:f0:f5:70:90:
                    12:28:8f:6b:8f:1d:66:06:e5:e3:c0:a0:b2:88:76:
                    8f:81:c5:53:bc:b0:3a:68:c4:ed:37:f9:38:f0:8b:
                    5c:1a:49:bd:40:bc:b0:ea:61:3d:f8:02:4c:c8:e9:
                    0f:f1:f4:a8:4d:d1:e8:f6:0b:7b:b1:07:09:47:6a:
                    a7:ac:03:6a:f0:0c:49:d4:a5:93:db:ab:6e:61:79:
                    7c:e6:8c:11:1d:ca:d6:12:d4:8e:c9:bb:68:72:ab:
                    bd:e6:bf:b3:18:f0:b1:b4:95:73:57:09:f9:d6:bf:
                    16:dc:8f:19:7e:d3:d7:62:c1:f4:57:19:2e:ab:df:
                    8a:ae:9d:60:86:fe:c7:65:47:33:fa:4a:19:19:0a:
                    dc:50:28:c3:b4:8a:a3:87:e0:06:b3:00:c3:3f:c6:
                    c4:59:92:cf:14:80:80:e6:8b:8e:17:ee:10:ae:d2:
                    c9:2b:06:08:5a:92:fb:e3:6f:aa:d8:04:e6:f1:bd:
                    9b:0d:8f:2d:eb:9f:35:23:d3:55:fe:99:28:28:2e:
                    10:86:96:57:73:fa:71:0b:bf:0a:91:55:2d:ed:3b:
                    c2:50:63:fe:84:62:81:d5:e9:e6:b7:60:1d:4a:99:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
            X509v3 Authority Key Identifier:
                keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.79.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:2b:a7:f9:67:25:8f:91:63:4b:1c:d6:b9:93:18:1a:29:9c:
         17:75:c8:7f:f3:94:dc:ac:56:d6:54:d5:0c:57:32:fc:7b:e5:
         94:ab:ca:99:f8:59:8f:1a:46:fe:ee:d8:62:cc:a9:06:7f:6c:
         fc:70:1b:7d:20:49:8a:18:56:72:aa:fa:a8:6f:34:79:56:17:
         72:b0:cf:b1:ff:0b:67:8a:59:d3:a2:eb:ee:b3:61:c5:75:29:
         8a:a2:60:31:d6:70:ca:4b:09:5a:ab:0d:70:24:c5:09:c5:33:
         95:87:7c:1a:21:d2:97:42:fc:38:e3:2a:40:5f:8e:81:87:4d:
         30:aa:d1:0b:cc:8f:bb:f1:e3:67:66:fb:e4:85:6d:61:87:ac:
         45:17:d1:c6:23:4d:68:ae:2c:ba:06:cf:be:51:f5:97:d7:07:
         02:02:a1:d3:3a:71:ec:3a:ae:a4:33:e3:95:62:9b:e8:92:58:
         80:77:bb:4a:7e:af:6a:16:9e:d1:e3:78:0c:01:fe:d9:b3:44:
         22:fa:ce:a0:cc:c8:69:06:0d:e8:cd:21:0f:e7:95:c3:e5:e9:
         aa:fd:fa:fe:2d:fa:66:18:7e:34:49:77:4e:44:71:a9:03:46:
         0b:ca:66:0c:32:7c:c4:7a:af:10:e4:48:18:50:fe:88:44:0e:
         d2:3b:7d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:36 2026 by rpki-client