Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
File:                     130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer (raw, json)
Hash identifier:          i7An+Rc6FiqkHIQuxpL6SVMw3RHpxIl/LYly5KDOuWY=
Subject key identifier:   13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       27C93EE0BC573CAFB5FF869ACDE373E9B9B1CF0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/PAGIC/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:55:43 +0000
Certificate not after:    Mon 10 May 2027 16:00:43 +0000
Subordinate resources:    AS: 4781
                          IP: 203.65.192.0/19
                          IP: 210.63.64.0/18
                          IP: 210.67.64.0/19
                          IP: 210.241.128.0/19
                          IP: 211.73.192.0/18
                          IP: 2403:9f00::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c9:3e:e0:bc:57:3c:af:b5:ff:86:9a:cd:e3:73:e9:b9:b1:cf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:55:43 2026 GMT
            Not After : May 10 16:00:43 2027 GMT
        Subject: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:ac:ec:cb:af:1b:2c:08:03:31:f5:7e:bb:
                    18:85:0b:62:8c:60:a5:a4:70:27:e6:85:d4:c3:2b:
                    94:dc:09:84:8a:5a:1f:b0:69:c4:7b:94:7e:4b:43:
                    da:a2:bc:1b:ce:f8:9a:fb:30:05:1e:e8:95:46:3e:
                    d7:c1:da:8f:a6:82:de:ba:10:d2:a2:f3:eb:f1:b0:
                    03:7a:e3:68:42:e4:9d:18:8e:d0:75:77:b0:dd:90:
                    cb:41:fe:95:1a:2d:d3:e3:a5:ac:bd:96:ac:89:ec:
                    a5:09:24:50:64:0d:0b:6b:c4:10:65:f6:53:b5:c4:
                    c7:49:49:bb:e5:e1:ea:ad:ea:63:43:7d:f3:c8:1d:
                    73:f0:98:7c:ff:44:d2:b0:e8:b8:e1:ac:af:3d:95:
                    38:f8:74:49:8c:2a:fc:f0:a3:89:0b:cb:d0:b3:e4:
                    72:08:6d:46:78:28:36:63:a7:0f:ae:b3:ca:06:49:
                    53:f4:42:81:4f:fd:81:53:d2:22:56:a8:87:fe:db:
                    21:d6:be:d7:9e:c6:53:1c:c1:db:de:fc:e4:fb:a9:
                    20:db:b3:58:34:6f:b2:9e:32:81:dd:4f:74:22:61:
                    96:af:22:25:5b:68:0c:6c:f4:d9:af:50:50:f0:c8:
                    31:51:be:75:e1:e4:02:3e:03:81:04:7f:3d:57:44:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.65.192.0/19
                  210.63.64.0/18
                  210.67.64.0/19
                  210.241.128.0/19
                  211.73.192.0/18
                IPv6:
                  2403:9f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4781

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:3e:a4:4a:45:cc:a9:6c:de:bc:9f:78:d2:48:7a:92:35:
         7b:c8:2d:8d:2b:79:94:82:6b:94:13:7d:d7:c6:fb:fe:28:05:
         03:83:09:85:ce:4a:d4:34:b4:9e:d3:91:d8:da:48:d3:d3:8a:
         cf:09:af:d1:60:bb:fa:08:ac:07:ed:05:c4:da:fc:fe:08:89:
         f6:d1:8c:ab:8e:8f:1c:7a:c8:34:c9:8d:e2:96:f6:00:86:42:
         84:f8:7b:d7:1e:61:33:f0:d3:7b:f0:8a:59:19:a9:60:1f:dd:
         7f:75:66:e2:29:59:15:3c:5f:d5:62:cf:6e:35:82:4b:78:ea:
         31:72:0b:79:3e:cb:02:a8:b0:3b:1f:14:ef:e8:1e:5b:88:1a:
         87:26:40:5c:34:a3:be:e8:72:0d:1f:ea:c2:bd:b1:b8:fb:a6:
         79:f5:b6:eb:c1:d3:0b:7c:33:5c:10:0c:77:21:b3:9e:21:c7:
         60:87:ab:ae:92:fe:3f:31:80:00:6d:04:aa:63:e0:ea:f3:03:
         ad:ce:e7:f8:fb:9b:72:55:5d:24:12:dc:a7:f2:21:de:fb:e5:
         bf:d5:f5:e0:ab:dc:c8:21:cf:d5:14:09:27:27:85:0a:5a:93:
         2b:5e:d6:48:16:6a:2d:82:e9:1a:fa:76:1e:05:89:4f:3f:47:
         c4:4c:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:58 2026 by rpki-client