Certificate

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/1E6D0DD4B6DA4E5AD5C24DD0F69F0C332A1824F5.cer
File:                     1E6D0DD4B6DA4E5AD5C24DD0F69F0C332A1824F5.cer (raw, json)
Hash identifier:          9tztQ0PBIR3KsasYNL0o9URsYZEJHaEVglbHNJVgMe8=
Subject key identifier:   1E:6D:0D:D4:B6:DA:4E:5A:D5:C2:4D:D0:F6:9F:0C:33:2A:18:24:F5
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       3D065C005835BC8120E6FBC5C45407D5C7E4ED36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/WIWYNN/0/1E6D0DD4B6DA4E5AD5C24DD0F69F0C332A1824F5.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/WIWYNN/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Tue 22 Sep 2026 11:46:41 +0000
Certificate not after:    Tue 21 Sep 2027 11:51:41 +0000
Subordinate resources:    IP: 163.52.217.0/24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 02:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:06:5c:00:58:35:bc:81:20:e6:fb:c5:c4:54:07:d5:c7:e4:ed:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: Sep 22 11:46:41 2026 GMT
            Not After : Sep 21 11:51:41 2027 GMT
        Subject: CN=1E6D0DD4B6DA4E5AD5C24DD0F69F0C332A1824F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:8b:5d:97:9c:7a:6f:63:2c:67:83:b1:b9:
                    55:62:be:5a:c2:f2:83:e1:39:2f:9d:6e:95:d4:ef:
                    64:9b:63:8d:28:f9:66:d6:3b:96:0b:a8:a5:5e:8f:
                    73:1a:56:ff:3f:2a:24:82:3d:81:d9:84:f1:7a:82:
                    62:ea:2a:a1:96:e7:4e:13:40:62:07:1d:b5:a8:bd:
                    d8:a9:1b:da:f1:39:4b:3e:22:c1:1c:49:ed:81:63:
                    4e:e8:d1:13:b2:b5:d2:3b:3b:fc:46:ed:1d:e9:f2:
                    fd:0b:0b:16:3e:5e:25:bf:59:fa:ee:c5:28:c7:1f:
                    f7:98:57:9f:1d:6f:43:73:75:6a:7a:13:50:33:5b:
                    b5:05:6a:3c:55:49:77:b2:12:99:9f:05:b2:75:6b:
                    97:34:3e:93:6f:13:1f:f1:76:b2:45:a1:94:30:df:
                    4f:07:7c:0e:18:a8:f6:96:91:39:d1:28:69:e6:83:
                    2b:78:df:4f:63:d0:8d:68:d6:18:56:16:e4:f5:ec:
                    bd:cb:a5:67:3a:5c:a7:c3:9e:e4:c6:73:c0:13:7a:
                    2d:a1:19:4e:ce:52:f3:bf:17:64:7b:22:28:40:69:
                    05:9b:c6:8d:26:90:a5:46:c5:9f:2b:ea:7f:a7:60:
                    5f:aa:1d:52:13:56:9f:d8:c9:05:cf:95:b5:f9:b5:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:6D:0D:D4:B6:DA:4E:5A:D5:C2:4D:D0:F6:9F:0C:33:2A:18:24:F5
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/WIWYNN/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/WIWYNN/0/1E6D0DD4B6DA4E5AD5C24DD0F69F0C332A1824F5.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:62:58:39:3f:b3:8f:dd:b9:77:06:0f:73:39:d6:96:74:75:
         97:86:79:7a:98:06:4f:d6:ce:d9:22:2a:48:d2:98:d9:88:5a:
         b8:7c:d6:be:6d:17:2d:4c:78:50:d8:8f:07:ff:33:7c:0b:6c:
         7e:5e:3a:fb:c8:68:9e:b7:56:ec:3a:ba:20:c2:d6:f0:2d:9e:
         94:02:29:6d:ac:b6:20:a3:19:47:01:49:7e:c3:0a:e4:e3:34:
         69:a3:27:c6:f2:52:6e:e0:da:ae:8f:28:7d:59:32:ed:28:d9:
         aa:c0:d5:73:82:a1:c8:fb:5c:c5:2f:3c:8f:24:79:d6:9b:bb:
         f8:c0:c5:bf:67:40:2c:68:c1:31:8c:46:2c:c2:8d:cf:9c:5f:
         74:7d:47:ec:b8:6e:ac:02:78:4a:c7:42:b7:57:46:f0:d3:f1:
         9d:2f:44:7b:3d:f1:9a:c2:96:09:a4:59:2f:12:25:87:b4:a0:
         81:64:2f:f3:c2:19:dd:cc:b4:4f:4f:2d:93:13:5f:a4:92:72:
         bf:ed:23:09:87:4b:6b:41:82:74:d8:ed:5c:d5:fc:15:9a:d1:
         55:78:d5:93:6a:fb:f5:b4:25:12:ce:5d:8c:fb:c2:ec:1d:5c:
         ed:e6:9c:31:47:c8:7c:c8:01:f6:1a:93:cf:6a:d6:cb:15:0f:
         51:5e:54:fd
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIUPQZcAFg1vIEg5vvFxFQH1cfk7TYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkyMjExNDY0MVoX
DTI3MDkyMTExNTE0MVowMzExMC8GA1UEAxMoMUU2RDBERDRCNkRBNEU1QUQ1QzI0
REQwRjY5RjBDMzMyQTE4MjRGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALUTi12XnHpvYyxng7G5VWK+WsLyg+E5L51uldTvZJtjjSj5ZtY7lguopV6P
cxpW/z8qJII9gdmE8XqCYuoqoZbnThNAYgcdtai92Kkb2vE5Sz4iwRxJ7YFjTujR
E7K10js7/EbtHeny/QsLFj5eJb9Z+u7FKMcf95hXnx1vQ3N1anoTUDNbtQVqPFVJ
d7ISmZ8FsnVrlzQ+k28TH/F2skWhlDDfTwd8Dhio9paROdEoaeaDK3jfT2PQjWjW
GFYW5PXsvculZzpcp8Oe5MZzwBN6LaEZTs5S878XZHsiKEBpBZvGjSaQpUbFnyvq
f6dgX6odUhNWn9jJBc+Vtfm1ihkCAwEAAaOCAmYwggJiMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFB5tDdS22k5a1cJN0PafDDMqGCT1MB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr
BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XSVdZTk4vMC8w
XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0lXWU5O
LzAvMUU2RDBERDRCNkRBNEU1QUQ1QzI0REQwRjY5RjBDMzMyQTE4MjRGNS5tZnQw
NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKM02TANBgkqhkiG9w0BAQsFAAOCAQEAuGJYOT+zj925
dwYPcznWlnR1l4Z5epgGT9bO2SIqSNKY2YhauHzWvm0XLUx4UNiPB/8zfAtsfl46
+8honrdW7Dq6IMLW8C2elAIpbay2IKMZRwFJfsMK5OM0aaMnxvJSbuDaro8ofVky
7SjZqsDVc4KhyPtcxS88jyR51pu7+MDFv2dALGjBMYxGLMKNz5xfdH1H7LhurAJ4
SsdCt1dG8NPxnS9Eez3xmsKWCaRZLxIlh7SggWQv88IZ3cy0T08tkxNfpJJyv+0j
CYdLa0GCdNjtXNX8FZrRVXjVk2r79bQlEs5djPvC7B1c7eacMUfIfMgB9hqTz2rW
yxUPUV5U/Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:28:29 2026 by rpki-client