
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer
File: 06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer (raw, json)
Hash identifier: 0v9Ny2pvVTokfCdrDLrVtmeIqXyc4MKlYH/R+FxwWvs=
Subject key identifier: 06:06:8E:54:F1:96:F9:CB:56:DE:CE:C6:BD:F8:1F:4E:47:7A:BF:5C
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial: 4CF332194BAC4A260F155D1A625838FEF7C656A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest: rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
caRepository: rsync://rpkica.twnic.tw/rpki/BEIDOU/1/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:43:10 +0000
Certificate not after: Mon 10 May 2027 15:48:10 +0000
Subordinate resources: IP: 160.30.78.0/23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 01:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f3:32:19:4b:ac:4a:26:0f:15:5d:1a:62:58:38:fe:f7:c6:56:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Validity
Not Before: May 11 15:43:10 2026 GMT
Not After : May 10 15:48:10 2027 GMT
Subject: CN=06068E54F196F9CB56DECEC6BDF81F4E477ABF5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:bf:3b:ad:35:da:99:8c:b7:8e:7a:17:c7:
44:44:37:22:f9:08:0a:64:2d:0f:f7:37:21:25:05:
87:e9:6f:65:66:b2:62:f5:38:2a:45:f7:d7:39:6b:
ba:75:8e:2f:ec:fb:ee:d4:df:2a:93:14:18:04:15:
2b:30:cf:57:96:67:14:11:a9:91:52:39:2e:b1:57:
70:f1:56:07:88:35:9d:fa:cc:e1:bb:dd:16:a5:56:
2a:3d:12:1b:70:da:86:03:ea:99:1f:cf:fe:32:3b:
f0:e1:ee:90:8d:b6:70:75:d8:89:ca:ad:b9:eb:17:
9c:e1:03:5d:6f:ba:86:b6:0b:4e:e9:1d:a8:02:11:
0c:5d:ba:8b:09:f3:71:19:3e:18:4f:38:4e:e8:86:
b9:b6:0f:32:27:a7:10:c9:eb:e8:10:00:87:ab:f3:
0a:30:48:ef:eb:5e:ae:cb:4b:eb:89:ae:26:d6:90:
33:70:c8:df:dd:13:8f:11:04:e2:fa:26:f5:2c:08:
93:89:38:c9:e0:b3:5f:a2:cc:8c:8a:06:24:ba:21:
c7:5a:d9:ea:ee:f5:74:a4:21:d2:ad:63:c3:31:83:
59:d2:d7:3d:d4:f8:01:2a:8b:26:0e:a4:ab:17:41:
fb:6c:78:28:41:ee:e3:b7:b2:9a:0e:86:a5:fb:46:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
06:06:8E:54:F1:96:F9:CB:56:DE:CE:C6:BD:F8:1F:4E:47:7A:BF:5C
X509v3 Authority Key Identifier:
keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/1/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.30.78.0/23
Signature Algorithm: sha256WithRSAEncryption
68:95:91:8c:6a:97:4d:af:f7:bb:97:ef:af:38:38:46:2c:02:
57:f4:38:3b:1c:e4:7f:10:f4:be:9d:84:ee:78:99:d9:df:28:
cc:0e:4a:b8:ea:e7:25:ca:e1:fe:bd:af:af:4b:8a:a3:d0:b1:
51:17:57:bb:dc:55:c2:2c:df:e2:30:5f:ad:09:55:a2:fe:73:
64:4b:f6:f5:8e:eb:7d:35:17:0d:54:9a:37:b5:fa:72:08:08:
35:a1:3d:7b:0e:fd:7f:20:ce:20:a8:00:af:f7:7e:5c:c2:07:
14:37:21:e7:38:96:8e:52:e8:d2:3c:e1:00:16:40:d2:8b:43:
a0:ae:ba:ab:20:cd:15:47:40:d0:6d:76:12:93:a8:41:5b:13:
bf:b6:0c:80:9b:e3:a5:84:b7:3f:f2:dc:2f:66:34:1c:e8:c4:
ad:f5:92:34:4e:ea:7a:0e:dd:50:2b:8c:54:ac:10:d8:9d:23:
2a:8f:62:da:91:a4:4e:3d:09:8c:22:94:29:62:fb:34:09:4a:
dc:72:03:5a:75:5f:56:6c:b8:62:be:ad:28:28:9a:fd:55:59:
50:45:b9:d1:6a:58:39:b5:f1:2e:f4:53:24:4d:5b:d5:ed:3d:
1e:ea:0b:da:2b:78:5b:4d:9e:d1:0d:f5:f0:f4:b4:9a:ac:c7:
70:2a:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:45:40 2026 by rpki-client