Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/985AF7058B94D432A9181F30B0AE306C97BD4F3B.cer
File:                     985AF7058B94D432A9181F30B0AE306C97BD4F3B.cer (raw, json)
Hash identifier:          zdBKNq1vGTpHBcrN+avZ8c4ETEXTYUKIgYzs594h5oU=
Subject key identifier:   98:5A:F7:05:8B:94:D4:32:A9:18:1F:30:B0:AE:30:6C:97:BD:4F:3B
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer:       /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial:       478EF17238C75BD113B1F632AFDCEDF2AC9F885A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:44:28 +0000
Certificate not after:    Mon 10 May 2027 15:49:28 +0000
Subordinate resources:    IP: 160.30.210.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 01:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8e:f1:72:38:c7:5b:d1:13:b1:f6:32:af:dc:ed:f2:ac:9f:88:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
        Validity
            Not Before: May 11 15:44:28 2026 GMT
            Not After : May 10 15:49:28 2027 GMT
        Subject: CN=985AF7058B94D432A9181F30B0AE306C97BD4F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:ec:f5:49:99:d0:99:78:76:e3:f5:b7:20:
                    1e:4c:89:08:fd:69:96:d7:e1:30:fd:b2:7d:64:1f:
                    a4:a2:d5:38:e0:cb:c5:ff:b8:4f:7b:1a:3f:93:83:
                    34:74:26:c7:d4:97:a0:47:1b:58:92:71:ce:e0:42:
                    d0:b7:07:07:1f:fc:f5:a0:80:60:0c:71:3f:c7:13:
                    40:aa:22:4a:09:de:1e:35:68:e2:a7:69:72:60:d7:
                    9b:72:8f:10:5b:32:91:7b:68:2b:fb:e1:ba:de:47:
                    b8:cc:f2:01:f6:d1:a9:53:2c:9d:cd:8e:2b:de:6c:
                    1e:ba:71:4d:d4:a0:c0:6c:6a:ef:42:fd:c4:7e:82:
                    6e:dc:65:84:00:5f:96:67:d1:c2:66:d3:b9:a8:ba:
                    7d:f4:41:7c:0e:7c:89:bf:73:ec:d8:2f:9d:ff:32:
                    ba:c0:fa:ea:df:e8:7b:ec:b5:27:e5:2f:3e:ee:a2:
                    92:70:85:fe:ae:c5:60:e3:73:85:18:38:93:21:a3:
                    b7:2c:d1:4e:25:1d:f8:50:48:c3:ce:1d:fd:97:84:
                    5b:7f:70:e9:10:ac:ce:40:b0:66:c9:98:9b:bc:43:
                    57:06:d6:82:36:05:fd:d0:41:05:49:60:11:cb:ca:
                    09:10:13:a7:52:65:a5:38:46:a1:46:1a:1b:0c:d9:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:5A:F7:05:8B:94:D4:32:A9:18:1F:30:B0:AE:30:6C:97:BD:4F:3B
            X509v3 Authority Key Identifier:
                keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:af:14:77:fd:5a:3e:b4:69:05:d6:73:66:f7:f8:de:11:07:
         1c:fd:7c:89:31:f8:df:8a:7e:d2:e6:6b:19:c1:4d:48:d4:62:
         4b:8d:56:e5:75:14:0c:b2:41:43:44:66:54:c3:3f:66:e9:5d:
         1c:38:c9:dd:6f:7a:08:26:cf:58:96:fb:48:99:4c:6a:fa:d4:
         e4:86:cc:bb:17:c4:de:a3:98:a5:7a:e4:fd:a9:79:4f:9c:c6:
         f8:90:75:b4:f7:5a:73:72:ca:02:77:98:ec:a3:c3:aa:bf:78:
         2a:5a:f2:78:41:70:91:14:0d:24:cd:90:92:3a:7a:b2:0e:71:
         4f:c5:4b:5c:fc:d7:f5:8d:fc:45:64:57:64:e3:38:f6:02:e8:
         78:4b:1e:20:c4:5b:53:ce:95:e4:8a:1f:fd:0f:93:b4:59:62:
         cb:d2:b3:19:72:18:40:5b:a0:bb:0a:8a:80:ca:f4:f1:d3:ee:
         8a:9a:06:a1:3f:f3:fb:6b:5c:47:13:4f:01:0c:10:a5:73:2a:
         47:4a:e8:96:71:90:7d:2a:7e:eb:69:07:c9:54:e5:52:a7:4d:
         f0:c0:42:7d:11:18:dd:f4:45:65:98:83:ee:1b:05:41:87:34:
         23:b3:6b:21:1e:e0:a4:01:0a:d5:fe:89:ee:fe:d3:98:00:19:
         f4:a3:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:58 2026 by rpki-client