
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer
File: 0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer (raw, json)
Hash identifier: P8vctvDT/N5VS/CPX5o/roAY9J9T1gXRTfuJfDOSPtM=
Subject key identifier: 0F:DD:56:6F:6E:A3:D6:76:06:4C:1A:79:11:4B:46:74:9D:7D:15:B7
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 73003A7F800CD7A331876D8C6D13D8B3A33C63FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
caRepository: rsync://rpkica.twnic.tw/rpki/CWTW/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:44:39 +0000
Certificate not after: Mon 10 May 2027 15:49:39 +0000
Subordinate resources: AS: 131646
AS: 131679
IP: 103.161.78.0/23
IP: 2406:fcc0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:00:3a:7f:80:0c:d7:a3:31:87:6d:8c:6d:13:d8:b3:a3:3c:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:44:39 2026 GMT
Not After : May 10 15:49:39 2027 GMT
Subject: CN=0FDD566F6EA3D676064C1A79114B46749D7D15B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:0d:75:70:54:ed:2f:fb:48:96:d0:65:51:
10:b4:95:86:94:c9:56:0f:16:fd:88:10:8a:fa:5d:
ee:e8:d4:75:0e:d9:a4:39:49:1a:bf:34:89:f7:2f:
19:33:be:d9:a1:70:4c:4e:1a:ee:7f:46:17:24:27:
b6:91:ba:bc:4c:f1:70:51:bf:07:5c:f8:79:da:1d:
83:87:28:b3:0a:5b:e2:dd:24:b5:8b:62:1d:af:e4:
33:85:95:71:13:25:e2:7f:44:bc:a1:b9:3b:b3:1d:
2a:58:82:7b:d6:d2:1d:24:f3:89:76:1d:9f:ed:03:
09:f6:be:ef:99:98:f8:16:87:6d:d5:ff:e2:25:01:
21:c6:f6:93:a5:ef:1d:c8:99:60:6a:65:55:b4:45:
00:8c:4b:5b:ca:6d:0a:0c:ce:f0:93:aa:34:9a:e0:
d9:7e:fb:1e:81:0d:7b:00:61:4b:fd:d2:56:50:f4:
8d:18:06:61:ab:af:e7:77:60:f9:85:35:6f:e1:bf:
15:67:04:1c:21:d5:e2:ff:95:d7:5a:d9:e4:57:53:
6d:c7:0b:53:27:1f:e0:53:1b:c5:54:a0:f9:ba:a7:
dd:6f:65:90:77:19:ac:8a:c4:3c:13:24:fc:db:fe:
1c:3c:ed:99:b0:64:4b:0e:b8:ac:ba:e5:01:b3:ab:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0F:DD:56:6F:6E:A3:D6:76:06:4C:1A:79:11:4B:46:74:9D:7D:15:B7
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CWTW/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.78.0/23
IPv6:
2406:fcc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131646
131679
Signature Algorithm: sha256WithRSAEncryption
26:38:c7:1d:c3:e0:fd:ea:5f:6f:af:60:b3:99:2a:fb:c0:88:
09:3d:8e:04:3d:db:f7:ab:c4:be:39:b2:6b:2b:3a:f5:6a:c8:
74:bb:63:5d:c4:4b:87:6b:4d:75:5e:df:9f:90:83:17:cd:e0:
44:47:00:f2:c0:aa:11:f2:8b:39:17:e7:71:31:5b:9b:e9:07:
09:a2:42:04:91:f3:23:2f:8d:f0:99:51:de:d2:5a:fa:37:71:
1f:6a:48:2a:2d:0c:dd:59:0d:fa:1e:c8:a5:08:5e:4b:a5:39:
2f:91:18:28:9e:35:95:7f:e1:f6:08:15:d7:0c:ea:84:44:6e:
f3:fb:b7:da:75:17:53:1a:f2:18:42:ed:55:b8:89:e0:b2:d3:
44:22:33:e7:4d:52:49:66:c8:4c:3d:1e:ab:98:0d:41:d2:01:
ea:30:f7:34:29:59:cf:8d:44:46:07:e1:a8:d9:49:cf:89:83:
8d:49:3f:30:e6:a0:95:d7:63:27:fb:7e:a5:18:16:b0:6c:39:
4a:1b:0e:36:ea:e2:87:3e:ea:54:f3:e1:45:5f:8d:00:49:54:
d1:10:cd:36:1d:42:34:9d:34:8e:76:f3:75:77:b5:ba:7e:92:
b2:c4:b0:17:a2:b2:07:08:41:75:45:b2:02:e5:f5:46:20:99:
54:66:7a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:21 2026 by rpki-client