Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
File: 049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer (raw, json)
Hash identifier: zkWAthJnVCDpyB4F1NUAYDd+I150lxwTQIJVpgMDPTU=
Subject key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 54CEA104C7008EC9531B711726B69F8F7591C00C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
caRepository: rsync://rpkica.twnic.tw/rpki/KE-ING/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:47:27 +0000
Certificate not after: Mon 10 May 2027 15:52:27 +0000
Subordinate resources: AS: 24166
AS: 38838
IP: 115.43.0.0/16
IP: 119.14.0.0/16
IP: 122.99.0.0/18
IP: 123.252.0.0/17
IP: 124.155.128.0/19
IP: 202.151.48.0/20
IP: 203.118.224.0/20
IP: 220.157.112.0/20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ce:a1:04:c7:00:8e:c9:53:1b:71:17:26:b6:9f:8f:75:91:c0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:47:27 2026 GMT
Not After : May 10 15:52:27 2027 GMT
Subject: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:98:dd:48:81:80:2c:5a:11:85:58:ca:cc:
10:4d:29:30:9a:50:63:76:88:1a:dd:4d:cc:06:ec:
ee:0d:ad:95:bc:79:1e:cf:52:3a:85:fd:4d:4c:89:
da:4f:18:4c:aa:d6:d9:64:2b:2f:a6:76:0e:ff:36:
20:0c:ea:f6:5f:06:8b:c5:f1:56:84:3f:d7:1f:9c:
8d:ba:3a:25:45:fe:bb:82:95:d4:76:93:c3:f3:78:
f6:b7:5e:58:df:ca:84:ea:e0:21:c7:f1:18:9e:73:
84:98:dd:f9:06:1b:29:b4:cf:8b:4d:8c:3f:9e:b4:
54:80:51:8d:c7:2f:f1:39:50:2e:16:ae:11:ab:5b:
0c:be:ba:b4:04:5d:a2:44:1d:37:fe:90:bc:c3:d9:
85:e3:8c:fd:d2:3d:a2:14:21:22:98:1c:50:ae:e8:
44:eb:f0:f7:88:7c:61:64:d0:dc:9b:ac:cb:f2:51:
11:90:12:86:5b:82:40:33:03:32:c0:23:bf:ae:8d:
f8:95:ad:d1:c4:26:fd:2c:78:51:0e:eb:52:48:0b:
53:2a:7e:7a:8f:2c:e1:c4:96:1b:1d:aa:06:de:73:
b7:dd:e2:6e:ab:f6:c6:6a:d2:79:10:48:ce:27:dc:
8c:00:96:c4:85:81:f3:45:b0:15:05:99:85:01:3a:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
119.14.0.0/16
122.99.0.0/18
123.252.0.0/17
124.155.128.0/19
202.151.48.0/20
203.118.224.0/20
220.157.112.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24166
38838
Signature Algorithm: sha256WithRSAEncryption
2b:ab:d5:be:6b:0e:87:54:0f:30:42:9e:ac:fa:39:a2:7a:c5:
d1:80:1a:af:15:d7:fb:39:86:8d:5f:01:0c:fc:64:d5:b0:e1:
db:b8:bb:1e:4a:a5:a4:8e:cf:3e:e0:14:d6:3c:b5:6c:c3:e8:
8e:2e:e9:54:4d:8b:5e:a2:7f:d1:62:81:03:b8:d0:65:50:60:
62:c8:b3:a3:5d:ba:2a:ce:fe:8f:44:16:9d:7c:36:84:d0:2e:
61:7b:da:05:c0:79:15:ef:8b:a9:ee:a6:9f:35:4b:04:cc:2d:
f4:de:82:70:2b:2d:19:ac:e7:8d:4d:8b:f5:24:3b:b7:c6:9f:
f7:ab:21:6e:b7:0f:e9:7d:d3:87:d1:49:da:8d:5a:af:5f:96:
4a:f5:f4:44:c4:42:ad:44:ac:5c:71:37:0a:54:a3:d5:71:45:
3d:e1:bd:bc:fe:55:dc:7e:73:ea:21:80:66:e6:04:5f:0c:68:
bf:13:e4:42:64:3f:ae:86:12:e8:cb:17:63:f9:d7:a0:fc:e1:
8e:26:44:ab:ef:97:bc:3e:50:50:9d:04:b3:59:73:81:94:53:
a7:99:cc:3e:20:8f:37:f6:45:84:36:81:41:e5:c3:1a:c1:81:
2e:57:ca:87:a2:b8:6f:f1:08:97:8b:1e:f0:3e:76:09:ad:20:
cb:f4:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:18 2026 by rpki-client