
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
File: 101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer (raw, json)
Hash identifier: rHSlH7YVUtNmLoVGzTnaZkMIpselB0yeSvSm1y4AjBs=
Subject key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 547AECCE467ECA1BFAB24FA72104A770BDBD6E51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
caRepository: rsync://rpkica.twnic.tw/rpki/WANIN/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 16:00:41 +0000
Certificate not after: Mon 10 May 2027 16:05:41 +0000
Subordinate resources: AS: 131636
IP: 103.130.124.0/22
IP: 211.76.188.0/23
IP: 2403:b9c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7a:ec:ce:46:7e:ca:1b:fa:b2:4f:a7:21:04:a7:70:bd:bd:6e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 16:00:41 2026 GMT
Not After : May 10 16:05:41 2027 GMT
Subject: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:46:e3:87:aa:ca:ff:74:5d:8f:5c:22:7d:
93:c6:6f:70:af:e4:bf:20:f0:f4:e2:80:af:42:f0:
e7:49:a9:19:70:97:ac:df:c9:d2:76:c5:48:b1:38:
e9:ce:1f:c8:51:83:77:e7:23:7b:4f:0d:a4:05:14:
49:13:61:4b:08:34:e6:5c:ae:14:af:78:a1:09:59:
22:00:0b:c8:cc:d5:05:f2:e6:29:5b:18:94:d5:bb:
58:f0:a3:de:5f:56:01:e7:4d:16:b8:f5:bb:6e:65:
23:d9:74:fd:6a:36:52:c7:cd:fb:7d:f9:15:11:cd:
11:f6:cd:f1:f8:dd:a3:4f:ea:bd:62:e1:c1:e9:63:
90:01:dd:23:e5:5f:2e:69:f9:86:eb:e3:2b:53:69:
45:40:0a:46:1d:7c:52:1c:c4:c5:7f:05:5c:fe:a9:
66:e6:41:e5:8b:f7:62:9b:05:f7:fd:d2:24:81:8d:
46:79:1f:a2:85:8e:86:15:62:c1:f9:16:51:5a:14:
25:3e:3f:de:1d:2e:16:c6:d9:c0:16:9d:a7:91:39:
7b:28:b7:6b:55:3f:2b:0a:bd:33:f3:e0:4f:6a:bc:
37:e2:98:c2:e0:1a:1a:b6:cd:61:9a:1d:d7:fc:81:
c0:74:eb:d0:a1:91:b1:74:7f:1f:a2:c0:c6:67:38:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.124.0/22
211.76.188.0/23
IPv6:
2403:b9c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131636
Signature Algorithm: sha256WithRSAEncryption
6f:8e:73:4f:bc:c1:61:f2:cd:30:c9:cc:d5:6b:aa:95:54:88:
6a:31:46:25:50:fa:9a:a2:3a:b0:a1:9d:1a:90:44:14:45:64:
0c:85:9f:0b:a0:d9:da:a3:f7:a5:e2:a2:d2:9f:ce:8f:99:ee:
fe:e5:ae:fb:b7:31:89:9f:a7:88:07:7e:07:da:ec:2c:46:27:
f1:b4:e2:59:21:fc:41:60:9f:67:0a:cb:a6:d1:a7:b0:7a:91:
c5:8c:10:bd:96:09:be:08:26:76:c7:cc:22:63:f3:7f:f5:d0:
d4:df:b7:7e:15:51:30:87:52:70:f1:2a:04:1f:ae:59:42:88:
08:f1:4e:e0:8d:19:5a:43:c3:ec:bb:d3:a6:a1:df:dd:65:d7:
64:f4:07:22:df:a7:43:d1:81:2a:7c:f4:7f:5b:9d:ba:ac:32:
da:8f:f4:9d:63:49:6d:18:e0:db:59:a8:84:5d:35:9d:c2:a4:
d6:59:ca:76:53:ab:14:fa:3a:d4:03:c2:39:8a:2e:04:84:0b:
07:10:44:54:bf:80:89:86:bd:9c:91:a0:f8:6f:83:f0:e1:9e:
84:57:3e:0b:0e:88:a3:18:36:1a:f1:ba:1c:d1:2a:84:f0:a2:
3a:9b:99:de:50:2e:74:d1:72:e7:3c:44:ab:cd:83:b6:b3:a2:
9b:22:05:48
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIUVHrszkZ+yhv6sk+nIQSncL29blEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDA0MVoX
DTI3MDUxMDE2MDU0MVowMzExMC8GA1UEAxMoMTAxQjBBN0Y5MEQ1ODczMUU5NjE4
REM0MzI0MzhDOEJGREIyOEFGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALNRRuOHqsr/dF2PXCJ9k8ZvcK/kvyDw9OKAr0Lw50mpGXCXrN/J0nbFSLE4
6c4fyFGDd+cje08NpAUUSRNhSwg05lyuFK94oQlZIgALyMzVBfLmKVsYlNW7WPCj
3l9WAedNFrj1u25lI9l0/Wo2UsfN+335FRHNEfbN8fjdo0/qvWLhweljkAHdI+Vf
Lmn5huvjK1NpRUAKRh18UhzExX8FXP6pZuZB5Yv3YpsF9/3SJIGNRnkfooWOhhVi
wfkWUVoUJT4/3h0uFsbZwBadp5E5eyi3a1U/Kwq9M/PgT2q8N+KYwuAaGrbNYZod
1/yBwHTr0KGRsXR/H6LAxmc4U/sCAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFBAbCn+Q1Ycx6WGNxDJDjIv9sor0MB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr
BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5JTi8wLzBd
BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5JTi8w
LzEwMUIwQTdGOTBENTg3MzFFOTYxOERDNDMyNDM4QzhCRkRCMjhBRjQubWZ0MDcG
CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp
b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJngnwDBAHTTLwwDQQCAAIwBwMFACQDucAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAgI0MA0GCSqGSIb3DQEBCwUAA4IBAQBvjnNPvMFh8s0w
yczVa6qVVIhqMUYlUPqaojqwoZ0akEQURWQMhZ8LoNnao/el4qLSn86Pme7+5a77
tzGJn6eIB34H2uwsRifxtOJZIfxBYJ9nCsum0aewepHFjBC9lgm+CCZ2x8wiY/N/
9dDU37d+FVEwh1Jw8SoEH65ZQogI8U7gjRlaQ8Psu9Omod/dZddk9Aci36dD0YEq
fPR/W526rDLaj/SdY0ltGODbWaiEXTWdwqTWWcp2U6sU+jrUA8I5ii4EhAsHEERU
v4CJhr2ckaD4b4Pw4Z6EVz4LDoijGDYa8boc0SqE8KI6m5neUC500XLnPESrzYO2
s6KbIgVI
-----END CERTIFICATE-----
Generated at Tue May 12 22:04:05 2026 by rpki-client