Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
File: 059E0652FCBAC895061A57FE0566CF353F3E43CA.cer (raw, json)
Hash identifier: o4h+dufvE+5FZfSrw59pAFWuQzjV4wMDvirRlCtZeLg=
Subject key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 7CCEE8C598CE3411FA816626D0E58E835774C297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
caRepository: rsync://rpkica.twnic.tw/rpki/DENPAIO/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:45:03 +0000
Certificate not after: Mon 10 May 2027 15:50:03 +0000
Subordinate resources: AS: 131662
IP: 103.123.128.0/22
IP: 103.135.16.0/22
IP: 2403:a2c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ce:e8:c5:98:ce:34:11:fa:81:66:26:d0:e5:8e:83:57:74:c2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:45:03 2026 GMT
Not After : May 10 15:50:03 2027 GMT
Subject: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:5e:30:34:d5:e7:9c:3c:94:3e:ec:0d:d6:
0c:47:46:e1:07:b3:ee:33:e8:f1:13:6e:d7:2a:e4:
0e:29:ca:87:76:12:bd:65:9d:ec:a3:1b:4a:74:1b:
43:80:8f:a4:7d:b8:0c:34:ea:4a:7a:8e:d8:c3:ca:
a4:6a:01:b3:a7:dc:b3:39:ae:31:52:b4:28:13:83:
4a:b5:92:69:54:52:ce:69:63:6d:98:47:19:e5:96:
0b:40:c3:ab:65:a6:20:d6:7d:6f:01:d3:bc:12:12:
f5:86:b1:a6:32:1b:39:22:ee:68:bf:06:0a:e1:56:
ea:49:09:5e:f5:a5:06:fe:7a:77:f6:e8:bd:fb:49:
af:95:05:8c:44:75:d3:39:74:bd:a5:45:79:ea:90:
21:65:8c:d0:5d:b2:5e:75:aa:d7:23:68:04:0f:8b:
32:28:c8:08:38:1a:c8:12:e1:d2:ac:e8:86:7e:ad:
eb:cb:8f:3d:17:1b:2f:87:b7:0d:e1:d8:6c:02:a5:
1d:e5:a0:e0:cf:3d:1c:23:d9:3a:9e:94:8e:3f:b3:
80:6d:4e:31:b7:dc:2e:fc:66:32:38:40:d6:5d:c0:
00:18:f9:a1:d7:de:7d:dc:7e:f5:c9:1a:2d:7a:09:
cf:ec:14:5a:bb:09:4f:06:05:ef:17:0e:37:93:42:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.128.0/22
103.135.16.0/22
IPv6:
2403:a2c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131662
Signature Algorithm: sha256WithRSAEncryption
ae:f3:70:b5:e0:21:bb:2e:65:f0:61:93:88:03:8b:ee:ba:f2:
86:63:39:33:a1:7c:6c:de:14:50:e8:bd:f9:ac:28:3d:d3:e3:
c5:59:82:b2:77:b5:67:68:c4:20:49:0c:d1:fd:59:97:6d:cb:
01:cf:c3:d0:1e:1c:1d:be:ad:cd:24:85:95:b3:92:74:77:f9:
0e:3a:a9:cc:ef:f4:e1:d2:bb:a4:d4:fd:58:d8:8d:da:9a:2f:
b0:d5:e4:55:e3:fd:c3:f4:d9:a3:cd:5c:04:4d:a3:7e:cd:14:
0a:0d:bf:e8:06:79:1a:40:f9:60:94:11:a4:7d:83:43:83:97:
3a:a9:a0:95:de:fc:81:12:16:03:2c:bb:5a:86:ed:3e:76:1e:
e6:28:be:b5:8e:ea:3d:03:c7:f9:ed:48:87:29:45:73:bf:15:
69:96:58:75:14:24:73:89:f6:2a:5f:63:ec:34:fb:1d:5a:12:
a7:59:33:e0:31:12:5d:6e:ff:5e:e2:7b:a2:13:ca:54:8b:fb:
df:06:e6:e7:95:57:0d:ef:5a:dd:c4:b3:e0:67:bb:77:26:2c:
8e:e0:bc:c9:ed:9d:1d:86:92:2d:c0:39:67:c6:d4:32:02:19:
54:03:fa:89:fc:16:b2:53:ea:d3:ea:96:c7:9f:17:97:d2:6d:
65:4d:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:52 2026 by rpki-client