Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
File:                     1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer (raw, json)
Hash identifier:          v2B3vs8RtMxTlAYPJJwv32lOmBSGdYqdO/Q2+XZelMY=
Subject key identifier:   1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       15F8BCD1114CDD1C97178578B630AB845215A53B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:44:03 +0000
Certificate not after:    Mon 10 May 2027 15:49:03 +0000
Subordinate resources:    AS: 24169
                          AS: 24172
                          IP: 101.0.224.0/19
                          IP: 103.234.224.0/22
                          IP: 121.50.176.0/20
                          IP: 122.200.152.0/21
                          IP: 150.129.36.0/22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f8:bc:d1:11:4c:dd:1c:97:17:85:78:b6:30:ab:84:52:15:a5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:44:03 2026 GMT
            Not After : May 10 15:49:03 2027 GMT
        Subject: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:90:d9:6b:10:c8:e8:3c:b8:b8:68:87:df:75:
                    af:5f:ba:13:23:db:39:d4:50:cd:15:97:69:26:e4:
                    f1:ae:ef:5f:26:3b:a8:0a:cf:9a:07:04:da:de:99:
                    5b:11:c7:a6:70:52:21:e3:f1:82:4c:3a:72:85:1b:
                    7d:8c:91:f2:8f:5e:3a:2d:fd:88:b2:82:c0:9b:4c:
                    1b:e1:00:37:3d:aa:fa:ca:02:70:ab:10:be:d3:c0:
                    05:70:67:58:a0:92:f3:41:f9:2d:62:07:86:e0:58:
                    14:9e:8c:94:91:bb:c8:77:d1:29:5c:f9:0c:1f:89:
                    e7:32:5a:c9:06:75:d5:89:e9:31:cc:4a:53:3e:67:
                    ee:bd:e4:ca:05:9a:5b:ca:ff:fe:6e:05:3a:24:e6:
                    fd:93:e0:4f:62:57:03:1e:2f:8b:6b:25:e5:26:76:
                    f4:ab:de:93:ec:d1:fc:09:93:d7:79:d0:04:25:20:
                    3a:4a:6e:ee:5d:8a:00:25:47:1f:08:88:1c:d2:da:
                    8e:dd:58:e7:b9:31:aa:e1:fa:af:51:7e:c8:e6:e1:
                    2b:60:85:34:09:59:b3:6c:40:49:b3:ec:a7:84:6c:
                    02:e5:05:c1:87:18:b2:0b:2c:86:5b:81:d7:f0:a5:
                    39:cb:28:f9:b8:92:a4:d8:79:cd:0a:7a:83:0a:1d:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.224.0/19
                  103.234.224.0/22
                  121.50.176.0/20
                  122.200.152.0/21
                  150.129.36.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24169
                  24172

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:29:9e:4f:74:36:e5:fe:e1:00:d6:13:cb:2f:2a:07:2d:
         66:ec:93:02:72:b4:d9:49:c9:0b:61:37:28:40:58:ac:d1:a4:
         a3:00:57:8b:2f:97:ba:ef:73:df:ca:ec:69:17:5e:e4:22:40:
         6a:82:1c:d7:46:24:cf:5d:48:41:c5:a7:54:44:89:25:30:db:
         cf:d3:51:85:87:3c:51:4f:12:82:db:f9:9a:da:10:85:bb:29:
         c3:59:63:3b:b2:45:8c:66:f5:a4:69:c8:10:86:87:f8:d5:e0:
         d5:b1:f1:41:07:d4:25:8d:71:0f:d6:6c:33:27:64:a4:cf:fd:
         56:48:e2:44:cf:61:55:97:36:ce:48:51:b0:62:c5:76:9f:99:
         af:18:32:7f:b7:6c:86:aa:df:2a:33:7e:a1:63:f5:f5:71:ed:
         49:a0:67:76:c1:d6:2b:b7:df:5b:ab:c6:3f:74:e3:ea:5d:1e:
         66:59:32:68:ec:81:4b:d2:61:53:83:d9:bf:54:6c:25:87:3d:
         b0:e3:42:68:05:fc:fe:48:d9:fe:80:76:12:57:d2:35:54:11:
         ae:97:89:76:e9:4b:3a:46:51:5b:4a:d0:b0:22:f8:bf:97:e5:
         83:6b:e3:ab:2b:1d:53:c6:aa:1b:c5:ec:8e:13:67:3f:10:fa:
         66:a0:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:02 2026 by rpki-client