
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.cer
File: F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.cer (raw, json)
Hash identifier: ZsX6k4MBgFOOukTx/jm0SCthmFC8qNF3UFpyCtFoLsg=
Subject key identifier: F8:B8:4F:8B:B1:B1:2A:40:60:31:B7:DA:BB:53:66:E2:DE:2F:AC:A5
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial: 50EE3ACC94C0562635407307FF81719A171D3ED8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest: rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft
caRepository: rsync://rpkica.twnic.tw/rpki/XINANG/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 16:01:00 +0000
Certificate not after: Mon 10 May 2027 16:06:00 +0000
Subordinate resources: IP: 160.191.168.0/23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 01:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ee:3a:cc:94:c0:56:26:35:40:73:07:ff:81:71:9a:17:1d:3e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Validity
Not Before: May 11 16:01:00 2026 GMT
Not After : May 10 16:06:00 2027 GMT
Subject: CN=F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:82:60:8e:8b:b6:05:c3:9e:ff:5b:28:f0:
82:71:47:86:1f:1c:b2:59:f3:5f:bc:8c:9d:6b:94:
ae:b7:c8:d5:ea:80:7b:c4:57:c3:6b:b6:02:cc:32:
35:92:9f:85:33:c9:51:6f:13:a2:12:3f:34:e7:ad:
c9:9a:db:b8:3f:c4:2e:f8:d0:26:8e:55:c6:bb:fd:
14:50:3e:e3:c0:9b:87:04:2b:07:54:7e:68:4b:9f:
3d:49:9e:78:0a:92:df:c5:fe:9c:72:46:ca:d5:1d:
d4:45:51:86:12:e6:f9:d7:d7:91:eb:1f:31:59:3a:
b8:3c:ce:95:27:8f:6c:6e:36:8b:b8:e9:86:29:d4:
71:34:25:5f:e8:08:2a:3e:e9:68:24:e0:ee:3c:f9:
f0:34:c9:05:6b:d6:4e:0d:06:01:c6:56:4a:82:dc:
49:c5:41:9f:8e:82:83:2e:a0:63:d5:2a:b9:87:6d:
8e:ce:18:54:f4:71:84:94:69:7d:9d:06:d2:96:40:
a7:77:05:2e:c9:a2:52:ba:5b:70:e4:68:f9:77:60:
0f:e3:60:4f:65:57:55:c0:44:7e:94:5b:9d:c5:c1:
4c:da:a9:fa:23:8b:f9:7d:84:e0:57:7c:92:78:60:
59:c0:ed:d9:b6:83:20:7d:86:32:07:81:6b:6a:44:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F8:B8:4F:8B:B1:B1:2A:40:60:31:B7:DA:BB:53:66:E2:DE:2F:AC:A5
X509v3 Authority Key Identifier:
keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/XINANG/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/XINANG/0/F8B84F8BB1B12A406031B7DABB5366E2DE2FACA5.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.168.0/23
Signature Algorithm: sha256WithRSAEncryption
22:7a:2d:40:0c:cf:df:4b:b4:54:1b:0a:13:5c:a7:d6:63:d1:
ee:d6:d6:9f:35:19:82:3c:99:95:34:46:fa:e9:b8:c6:d5:2a:
0c:d5:7c:af:3e:36:3a:f4:48:c2:c6:0f:de:c1:38:61:4f:14:
9a:bd:12:c4:eb:19:73:50:ce:46:01:51:c8:b9:eb:5c:53:3c:
ac:49:c2:0b:83:e8:8a:6a:8b:1d:6d:69:97:34:02:ea:a4:c1:
de:c1:53:a4:94:b4:16:73:e6:18:81:c2:4a:96:d8:3d:ae:76:
dd:bf:2e:ff:bb:b9:7d:dc:4a:a2:a8:d5:3b:5c:ba:27:42:f5:
b2:6c:cd:20:ef:c0:79:65:9a:02:6e:62:e3:2e:22:32:b3:91:
fe:7a:2e:87:30:c7:e7:61:bf:5e:23:63:f9:3b:3b:14:0e:db:
c5:d6:b2:7a:ec:83:9b:6c:02:89:69:74:26:71:e8:ac:51:67:
db:2b:99:35:5d:72:d9:fb:d8:f8:43:b0:06:ed:72:2f:20:cf:
e4:8b:b9:d6:e7:0f:69:39:16:9d:87:7f:70:33:58:06:52:19:
ba:a6:d4:5d:61:75:85:5f:60:65:73:e4:32:a3:b6:d8:3f:22:
5d:19:47:6a:76:02:f8:c1:5f:4e:59:e7:f0:18:74:9b:04:5b:
dc:65:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:25 2026 by rpki-client