Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer
File:                     06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer (raw, json)
Hash identifier:          0v9Ny2pvVTokfCdrDLrVtmeIqXyc4MKlYH/R+FxwWvs=
Subject key identifier:   06:06:8E:54:F1:96:F9:CB:56:DE:CE:C6:BD:F8:1F:4E:47:7A:BF:5C
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer:       /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial:       4CF332194BAC4A260F155D1A625838FEF7C656A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/BEIDOU/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:43:10 +0000
Certificate not after:    Mon 10 May 2027 15:48:10 +0000
Subordinate resources:    IP: 160.30.78.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 01:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f3:32:19:4b:ac:4a:26:0f:15:5d:1a:62:58:38:fe:f7:c6:56:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
        Validity
            Not Before: May 11 15:43:10 2026 GMT
            Not After : May 10 15:48:10 2027 GMT
        Subject: CN=06068E54F196F9CB56DECEC6BDF81F4E477ABF5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:bf:3b:ad:35:da:99:8c:b7:8e:7a:17:c7:
                    44:44:37:22:f9:08:0a:64:2d:0f:f7:37:21:25:05:
                    87:e9:6f:65:66:b2:62:f5:38:2a:45:f7:d7:39:6b:
                    ba:75:8e:2f:ec:fb:ee:d4:df:2a:93:14:18:04:15:
                    2b:30:cf:57:96:67:14:11:a9:91:52:39:2e:b1:57:
                    70:f1:56:07:88:35:9d:fa:cc:e1:bb:dd:16:a5:56:
                    2a:3d:12:1b:70:da:86:03:ea:99:1f:cf:fe:32:3b:
                    f0:e1:ee:90:8d:b6:70:75:d8:89:ca:ad:b9:eb:17:
                    9c:e1:03:5d:6f:ba:86:b6:0b:4e:e9:1d:a8:02:11:
                    0c:5d:ba:8b:09:f3:71:19:3e:18:4f:38:4e:e8:86:
                    b9:b6:0f:32:27:a7:10:c9:eb:e8:10:00:87:ab:f3:
                    0a:30:48:ef:eb:5e:ae:cb:4b:eb:89:ae:26:d6:90:
                    33:70:c8:df:dd:13:8f:11:04:e2:fa:26:f5:2c:08:
                    93:89:38:c9:e0:b3:5f:a2:cc:8c:8a:06:24:ba:21:
                    c7:5a:d9:ea:ee:f5:74:a4:21:d2:ad:63:c3:31:83:
                    59:d2:d7:3d:d4:f8:01:2a:8b:26:0e:a4:ab:17:41:
                    fb:6c:78:28:41:ee:e3:b7:b2:9a:0e:86:a5:fb:46:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:06:8E:54:F1:96:F9:CB:56:DE:CE:C6:BD:F8:1F:4E:47:7A:BF:5C
            X509v3 Authority Key Identifier:
                keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:95:91:8c:6a:97:4d:af:f7:bb:97:ef:af:38:38:46:2c:02:
         57:f4:38:3b:1c:e4:7f:10:f4:be:9d:84:ee:78:99:d9:df:28:
         cc:0e:4a:b8:ea:e7:25:ca:e1:fe:bd:af:af:4b:8a:a3:d0:b1:
         51:17:57:bb:dc:55:c2:2c:df:e2:30:5f:ad:09:55:a2:fe:73:
         64:4b:f6:f5:8e:eb:7d:35:17:0d:54:9a:37:b5:fa:72:08:08:
         35:a1:3d:7b:0e:fd:7f:20:ce:20:a8:00:af:f7:7e:5c:c2:07:
         14:37:21:e7:38:96:8e:52:e8:d2:3c:e1:00:16:40:d2:8b:43:
         a0:ae:ba:ab:20:cd:15:47:40:d0:6d:76:12:93:a8:41:5b:13:
         bf:b6:0c:80:9b:e3:a5:84:b7:3f:f2:dc:2f:66:34:1c:e8:c4:
         ad:f5:92:34:4e:ea:7a:0e:dd:50:2b:8c:54:ac:10:d8:9d:23:
         2a:8f:62:da:91:a4:4e:3d:09:8c:22:94:29:62:fb:34:09:4a:
         dc:72:03:5a:75:5f:56:6c:b8:62:be:ad:28:28:9a:fd:55:59:
         50:45:b9:d1:6a:58:39:b5:f1:2e:f4:53:24:4d:5b:d5:ed:3d:
         1e:ea:0b:da:2b:78:5b:4d:9e:d1:0d:f5:f0:f4:b4:9a:ac:c7:
         70:2a:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:45:40 2026 by rpki-client