
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
File: 1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer (raw, json)
Hash identifier: v2B3vs8RtMxTlAYPJJwv32lOmBSGdYqdO/Q2+XZelMY=
Subject key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 15F8BCD1114CDD1C97178578B630AB845215A53B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
caRepository: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:44:03 +0000
Certificate not after: Mon 10 May 2027 15:49:03 +0000
Subordinate resources: AS: 24169
AS: 24172
IP: 101.0.224.0/19
IP: 103.234.224.0/22
IP: 121.50.176.0/20
IP: 122.200.152.0/21
IP: 150.129.36.0/22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f8:bc:d1:11:4c:dd:1c:97:17:85:78:b6:30:ab:84:52:15:a5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:44:03 2026 GMT
Not After : May 10 15:49:03 2027 GMT
Subject: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:90:d9:6b:10:c8:e8:3c:b8:b8:68:87:df:75:
af:5f:ba:13:23:db:39:d4:50:cd:15:97:69:26:e4:
f1:ae:ef:5f:26:3b:a8:0a:cf:9a:07:04:da:de:99:
5b:11:c7:a6:70:52:21:e3:f1:82:4c:3a:72:85:1b:
7d:8c:91:f2:8f:5e:3a:2d:fd:88:b2:82:c0:9b:4c:
1b:e1:00:37:3d:aa:fa:ca:02:70:ab:10:be:d3:c0:
05:70:67:58:a0:92:f3:41:f9:2d:62:07:86:e0:58:
14:9e:8c:94:91:bb:c8:77:d1:29:5c:f9:0c:1f:89:
e7:32:5a:c9:06:75:d5:89:e9:31:cc:4a:53:3e:67:
ee:bd:e4:ca:05:9a:5b:ca:ff:fe:6e:05:3a:24:e6:
fd:93:e0:4f:62:57:03:1e:2f:8b:6b:25:e5:26:76:
f4:ab:de:93:ec:d1:fc:09:93:d7:79:d0:04:25:20:
3a:4a:6e:ee:5d:8a:00:25:47:1f:08:88:1c:d2:da:
8e:dd:58:e7:b9:31:aa:e1:fa:af:51:7e:c8:e6:e1:
2b:60:85:34:09:59:b3:6c:40:49:b3:ec:a7:84:6c:
02:e5:05:c1:87:18:b2:0b:2c:86:5b:81:d7:f0:a5:
39:cb:28:f9:b8:92:a4:d8:79:cd:0a:7a:83:0a:1d:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.0.224.0/19
103.234.224.0/22
121.50.176.0/20
122.200.152.0/21
150.129.36.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24169
24172
Signature Algorithm: sha256WithRSAEncryption
8a:09:29:9e:4f:74:36:e5:fe:e1:00:d6:13:cb:2f:2a:07:2d:
66:ec:93:02:72:b4:d9:49:c9:0b:61:37:28:40:58:ac:d1:a4:
a3:00:57:8b:2f:97:ba:ef:73:df:ca:ec:69:17:5e:e4:22:40:
6a:82:1c:d7:46:24:cf:5d:48:41:c5:a7:54:44:89:25:30:db:
cf:d3:51:85:87:3c:51:4f:12:82:db:f9:9a:da:10:85:bb:29:
c3:59:63:3b:b2:45:8c:66:f5:a4:69:c8:10:86:87:f8:d5:e0:
d5:b1:f1:41:07:d4:25:8d:71:0f:d6:6c:33:27:64:a4:cf:fd:
56:48:e2:44:cf:61:55:97:36:ce:48:51:b0:62:c5:76:9f:99:
af:18:32:7f:b7:6c:86:aa:df:2a:33:7e:a1:63:f5:f5:71:ed:
49:a0:67:76:c1:d6:2b:b7:df:5b:ab:c6:3f:74:e3:ea:5d:1e:
66:59:32:68:ec:81:4b:d2:61:53:83:d9:bf:54:6c:25:87:3d:
b0:e3:42:68:05:fc:fe:48:d9:fe:80:76:12:57:d2:35:54:11:
ae:97:89:76:e9:4b:3a:46:51:5b:4a:d0:b0:22:f8:bf:97:e5:
83:6b:e3:ab:2b:1d:53:c6:aa:1b:c5:ec:8e:13:67:3f:10:fa:
66:a0:89:d7
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUFfi80RFM3RyXF4V4tjCrhFIVpTswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDQwM1oX
DTI3MDUxMDE1NDkwM1owMzExMC8GA1UEAxMoMUNDQjc4MDdDQTgzMjBENjQ2Q0FD
OTQ1RjlBNDVBNzI1QkM1RUMwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPCQ2WsQyOg8uLhoh991r1+6EyPbOdRQzRWXaSbk8a7vXyY7qArPmgcE2t6Z
WxHHpnBSIePxgkw6coUbfYyR8o9eOi39iLKCwJtMG+EANz2q+soCcKsQvtPABXBn
WKCS80H5LWIHhuBYFJ6MlJG7yHfRKVz5DB+J5zJayQZ11YnpMcxKUz5n7r3kygWa
W8r//m4FOiTm/ZPgT2JXAx4vi2sl5SZ29Kvek+zR/AmT13nQBCUgOkpu7l2KACVH
HwiIHNLajt1Y57kxquH6r1F+yObhK2CFNAlZs2xASbPsp4RsAuUFwYcYsgsshluB
1/ClOcso+biSpNh5zQp6gwodym8CAwEAAaOCAqUwggKhMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFBzLeAfKgyDWRsrJRfmkWnJbxewFMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr
BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSFVBTi1DSEFO
LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NI
VUFOLUNIQU4vMC8xQ0NCNzgwN0NBODMyMEQ2NDZDQUM5NDVGOUE0NUE3MjVCQzVF
QzA1Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsG
AQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFZQDgAwQCZ+rgAwQEeTKwAwQDesiYAwQC
loEkMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAl5pAgJebDANBgkqhkiG9w0BAQsF
AAOCAQEAigkpnk90NuX+4QDWE8svKgctZuyTAnK02UnJC2E3KEBYrNGkowBXiy+X
uu9z38rsaRde5CJAaoIc10Ykz11IQcWnVESJJTDbz9NRhYc8UU8Sgtv5mtoQhbsp
w1ljO7JFjGb1pGnIEIaH+NXg1bHxQQfUJY1xD9ZsMydkpM/9VkjiRM9hVZc2zkhR
sGLFdp+Zrxgyf7dshqrfKjN+oWP19XHtSaBndsHWK7ffW6vGP3Tj6l0eZlkyaOyB
S9JhU4PZv1RsJYc9sONCaAX8/kjZ/oB2ElfSNVQRrpeJdulLOkZRW0rQsCL4v5fl
g2vjqysdU8aqG8XsjhNnPxD6ZqCJ1w==
-----END CERTIFICATE-----
Generated at Tue May 12 22:32:02 2026 by rpki-client