
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
File: 130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer (raw, json)
Hash identifier: i7An+Rc6FiqkHIQuxpL6SVMw3RHpxIl/LYly5KDOuWY=
Subject key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 27C93EE0BC573CAFB5FF869ACDE373E9B9B1CF0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
caRepository: rsync://rpkica.twnic.tw/rpki/PAGIC/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:55:43 +0000
Certificate not after: Mon 10 May 2027 16:00:43 +0000
Subordinate resources: AS: 4781
IP: 203.65.192.0/19
IP: 210.63.64.0/18
IP: 210.67.64.0/19
IP: 210.241.128.0/19
IP: 211.73.192.0/18
IP: 2403:9f00::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c9:3e:e0:bc:57:3c:af:b5:ff:86:9a:cd:e3:73:e9:b9:b1:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:55:43 2026 GMT
Not After : May 10 16:00:43 2027 GMT
Subject: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:ac:ec:cb:af:1b:2c:08:03:31:f5:7e:bb:
18:85:0b:62:8c:60:a5:a4:70:27:e6:85:d4:c3:2b:
94:dc:09:84:8a:5a:1f:b0:69:c4:7b:94:7e:4b:43:
da:a2:bc:1b:ce:f8:9a:fb:30:05:1e:e8:95:46:3e:
d7:c1:da:8f:a6:82:de:ba:10:d2:a2:f3:eb:f1:b0:
03:7a:e3:68:42:e4:9d:18:8e:d0:75:77:b0:dd:90:
cb:41:fe:95:1a:2d:d3:e3:a5:ac:bd:96:ac:89:ec:
a5:09:24:50:64:0d:0b:6b:c4:10:65:f6:53:b5:c4:
c7:49:49:bb:e5:e1:ea:ad:ea:63:43:7d:f3:c8:1d:
73:f0:98:7c:ff:44:d2:b0:e8:b8:e1:ac:af:3d:95:
38:f8:74:49:8c:2a:fc:f0:a3:89:0b:cb:d0:b3:e4:
72:08:6d:46:78:28:36:63:a7:0f:ae:b3:ca:06:49:
53:f4:42:81:4f:fd:81:53:d2:22:56:a8:87:fe:db:
21:d6:be:d7:9e:c6:53:1c:c1:db:de:fc:e4:fb:a9:
20:db:b3:58:34:6f:b2:9e:32:81:dd:4f:74:22:61:
96:af:22:25:5b:68:0c:6c:f4:d9:af:50:50:f0:c8:
31:51:be:75:e1:e4:02:3e:03:81:04:7f:3d:57:44:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.65.192.0/19
210.63.64.0/18
210.67.64.0/19
210.241.128.0/19
211.73.192.0/18
IPv6:
2403:9f00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4781
Signature Algorithm: sha256WithRSAEncryption
75:f3:3e:a4:4a:45:cc:a9:6c:de:bc:9f:78:d2:48:7a:92:35:
7b:c8:2d:8d:2b:79:94:82:6b:94:13:7d:d7:c6:fb:fe:28:05:
03:83:09:85:ce:4a:d4:34:b4:9e:d3:91:d8:da:48:d3:d3:8a:
cf:09:af:d1:60:bb:fa:08:ac:07:ed:05:c4:da:fc:fe:08:89:
f6:d1:8c:ab:8e:8f:1c:7a:c8:34:c9:8d:e2:96:f6:00:86:42:
84:f8:7b:d7:1e:61:33:f0:d3:7b:f0:8a:59:19:a9:60:1f:dd:
7f:75:66:e2:29:59:15:3c:5f:d5:62:cf:6e:35:82:4b:78:ea:
31:72:0b:79:3e:cb:02:a8:b0:3b:1f:14:ef:e8:1e:5b:88:1a:
87:26:40:5c:34:a3:be:e8:72:0d:1f:ea:c2:bd:b1:b8:fb:a6:
79:f5:b6:eb:c1:d3:0b:7c:33:5c:10:0c:77:21:b3:9e:21:c7:
60:87:ab:ae:92:fe:3f:31:80:00:6d:04:aa:63:e0:ea:f3:03:
ad:ce:e7:f8:fb:9b:72:55:5d:24:12:dc:a7:f2:21:de:fb:e5:
bf:d5:f5:e0:ab:dc:c8:21:cf:d5:14:09:27:27:85:0a:5a:93:
2b:5e:d6:48:16:6a:2d:82:e9:1a:fa:76:1e:05:89:4f:3f:47:
c4:4c:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:58 2026 by rpki-client