
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/1E6D0DD4B6DA4E5AD5C24DD0F69F0C332A1824F5.cer
File: 1E6D0DD4B6DA4E5AD5C24DD0F69F0C332A1824F5.cer (raw, json)
Hash identifier: 9tztQ0PBIR3KsasYNL0o9URsYZEJHaEVglbHNJVgMe8=
Subject key identifier: 1E:6D:0D:D4:B6:DA:4E:5A:D5:C2:4D:D0:F6:9F:0C:33:2A:18:24:F5
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 3D065C005835BC8120E6FBC5C45407D5C7E4ED36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/WIWYNN/0/1E6D0DD4B6DA4E5AD5C24DD0F69F0C332A1824F5.mft
caRepository: rsync://rpkica.twnic.tw/rpki/WIWYNN/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Tue 22 Sep 2026 11:46:41 +0000
Certificate not after: Tue 21 Sep 2027 11:51:41 +0000
Subordinate resources: IP: 163.52.217.0/24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:06:5c:00:58:35:bc:81:20:e6:fb:c5:c4:54:07:d5:c7:e4:ed:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: Sep 22 11:46:41 2026 GMT
Not After : Sep 21 11:51:41 2027 GMT
Subject: CN=1E6D0DD4B6DA4E5AD5C24DD0F69F0C332A1824F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:8b:5d:97:9c:7a:6f:63:2c:67:83:b1:b9:
55:62:be:5a:c2:f2:83:e1:39:2f:9d:6e:95:d4:ef:
64:9b:63:8d:28:f9:66:d6:3b:96:0b:a8:a5:5e:8f:
73:1a:56:ff:3f:2a:24:82:3d:81:d9:84:f1:7a:82:
62:ea:2a:a1:96:e7:4e:13:40:62:07:1d:b5:a8:bd:
d8:a9:1b:da:f1:39:4b:3e:22:c1:1c:49:ed:81:63:
4e:e8:d1:13:b2:b5:d2:3b:3b:fc:46:ed:1d:e9:f2:
fd:0b:0b:16:3e:5e:25:bf:59:fa:ee:c5:28:c7:1f:
f7:98:57:9f:1d:6f:43:73:75:6a:7a:13:50:33:5b:
b5:05:6a:3c:55:49:77:b2:12:99:9f:05:b2:75:6b:
97:34:3e:93:6f:13:1f:f1:76:b2:45:a1:94:30:df:
4f:07:7c:0e:18:a8:f6:96:91:39:d1:28:69:e6:83:
2b:78:df:4f:63:d0:8d:68:d6:18:56:16:e4:f5:ec:
bd:cb:a5:67:3a:5c:a7:c3:9e:e4:c6:73:c0:13:7a:
2d:a1:19:4e:ce:52:f3:bf:17:64:7b:22:28:40:69:
05:9b:c6:8d:26:90:a5:46:c5:9f:2b:ea:7f:a7:60:
5f:aa:1d:52:13:56:9f:d8:c9:05:cf:95:b5:f9:b5:
8a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1E:6D:0D:D4:B6:DA:4E:5A:D5:C2:4D:D0:F6:9F:0C:33:2A:18:24:F5
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/WIWYNN/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/WIWYNN/0/1E6D0DD4B6DA4E5AD5C24DD0F69F0C332A1824F5.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.52.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:62:58:39:3f:b3:8f:dd:b9:77:06:0f:73:39:d6:96:74:75:
97:86:79:7a:98:06:4f:d6:ce:d9:22:2a:48:d2:98:d9:88:5a:
b8:7c:d6:be:6d:17:2d:4c:78:50:d8:8f:07:ff:33:7c:0b:6c:
7e:5e:3a:fb:c8:68:9e:b7:56:ec:3a:ba:20:c2:d6:f0:2d:9e:
94:02:29:6d:ac:b6:20:a3:19:47:01:49:7e:c3:0a:e4:e3:34:
69:a3:27:c6:f2:52:6e:e0:da:ae:8f:28:7d:59:32:ed:28:d9:
aa:c0:d5:73:82:a1:c8:fb:5c:c5:2f:3c:8f:24:79:d6:9b:bb:
f8:c0:c5:bf:67:40:2c:68:c1:31:8c:46:2c:c2:8d:cf:9c:5f:
74:7d:47:ec:b8:6e:ac:02:78:4a:c7:42:b7:57:46:f0:d3:f1:
9d:2f:44:7b:3d:f1:9a:c2:96:09:a4:59:2f:12:25:87:b4:a0:
81:64:2f:f3:c2:19:dd:cc:b4:4f:4f:2d:93:13:5f:a4:92:72:
bf:ed:23:09:87:4b:6b:41:82:74:d8:ed:5c:d5:fc:15:9a:d1:
55:78:d5:93:6a:fb:f5:b4:25:12:ce:5d:8c:fb:c2:ec:1d:5c:
ed:e6:9c:31:47:c8:7c:c8:01:f6:1a:93:cf:6a:d6:cb:15:0f:
51:5e:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:28:29 2026 by rpki-client