Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
File: 1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer (raw, json)
Hash identifier: cRTJ7AiL+GBfkKqiXTXYLK9XLc8h1XuWB6VOzPXks3k=
Subject key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 27E013313A98CB9D22FF4C6D95B9B91E6156B4BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft
caRepository: rsync://rpkica.twnic.tw/rpki/PUMO/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:56:03 +0000
Certificate not after: Mon 10 May 2027 16:01:03 +0000
Subordinate resources: AS: 38843
AS: 131585
AS: 131637
IP: 103.20.40.0/22
IP: 103.133.44.0/22
IP: 124.150.128.0/21
IP: 223.27.32.0/19
IP: 2400:b380::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e0:13:31:3a:98:cb:9d:22:ff:4c:6d:95:b9:b9:1e:61:56:b4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:56:03 2026 GMT
Not After : May 10 16:01:03 2027 GMT
Subject: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:bd:0b:e0:bb:1a:d5:85:77:7c:c4:1a:a6:
32:e2:a4:a0:eb:a5:09:fe:cd:65:49:42:72:c7:f8:
07:43:95:e6:bd:b2:06:d2:ef:fa:17:49:69:b4:40:
3c:f0:72:45:52:e5:9d:af:5f:b8:1c:91:43:b7:aa:
47:a6:0b:9e:44:07:63:94:e6:60:d7:5b:28:8c:c8:
d9:9f:97:4a:f1:c1:3a:28:b7:76:d6:c1:20:f8:3d:
f0:5f:71:81:5d:65:38:ce:be:94:1f:88:32:12:f2:
6c:0e:a0:82:3c:37:8f:32:f5:68:64:a8:57:c9:83:
1c:8d:40:23:6c:57:84:35:f9:c6:21:00:b2:64:e2:
4b:4a:b2:84:04:bc:33:37:47:63:82:d0:36:5b:47:
47:59:89:80:98:34:8a:c4:25:fd:fc:61:70:48:1a:
11:2f:30:62:00:e9:dd:ee:76:42:fa:77:22:04:5f:
1b:4e:7b:f7:b6:6d:3a:1a:84:0f:0d:93:b5:3e:58:
e9:3f:b0:45:ab:f5:17:27:c8:b4:29:b4:a9:a7:4b:
fb:09:8c:63:cb:d5:e3:ce:1d:4b:bd:fe:72:03:62:
95:ed:49:e3:b9:d6:34:03:1f:53:52:3f:db:4c:2d:
9e:63:cf:a2:a3:74:d8:90:7f:3d:b8:bd:98:82:06:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.40.0/22
103.133.44.0/22
124.150.128.0/21
223.27.32.0/19
IPv6:
2400:b380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38843
131585
131637
Signature Algorithm: sha256WithRSAEncryption
81:09:b6:41:91:99:36:9e:a8:2a:ab:23:ec:bb:90:17:e9:94:
7e:a1:ad:dd:51:30:85:19:92:eb:a3:d9:57:96:92:c7:89:5e:
3e:a1:d1:4d:28:ea:3f:ae:1c:d2:67:5e:7d:6e:a5:f2:cd:f0:
f0:22:52:51:f3:d5:f2:15:5c:4b:fb:13:0a:04:11:85:eb:f7:
28:12:fc:95:ab:11:06:e2:39:19:2c:50:65:71:13:46:ff:42:
57:93:89:fc:b3:50:e4:10:78:bd:3f:04:00:9d:74:39:43:5b:
33:23:0d:af:b7:6b:3f:98:a5:9d:d4:21:45:f2:a6:67:f3:61:
42:32:f1:ba:b8:31:35:80:f0:2a:69:5d:d0:af:03:4f:cd:2a:
19:a3:97:ac:3e:76:f1:bc:6d:4f:03:a1:58:50:cf:84:85:58:
df:64:1b:61:1f:ac:3c:85:68:29:8d:7b:76:67:84:ab:85:45:
1a:89:1f:bf:9f:df:56:40:da:1c:de:92:4e:5a:05:2f:fa:77:
f7:22:be:c0:61:98:c7:fd:3e:e7:03:6a:d4:fc:00:13:29:57:
ba:58:1a:6f:66:f3:09:69:7b:c3:80:23:49:b4:6b:38:2c:f3:
73:5f:25:d7:fc:58:af:27:25:17:af:fa:a2:bf:23:be:b7:d1:
6d:8b:09:3a
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUJ+ATMTqYy50i/0xtlbm5HmFWtLswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTYwM1oX
DTI3MDUxMDE2MDEwM1owMzExMC8GA1UEAxMoMUVFQzRGQTFBOEY4QUNENDA4MzNC
RDJDM0VFREIyQjcwODJDMTc5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALu7vQvguxrVhXd8xBqmMuKkoOulCf7NZUlCcsf4B0OV5r2yBtLv+hdJabRA
PPByRVLlna9fuByRQ7eqR6YLnkQHY5TmYNdbKIzI2Z+XSvHBOii3dtbBIPg98F9x
gV1lOM6+lB+IMhLybA6ggjw3jzL1aGSoV8mDHI1AI2xXhDX5xiEAsmTiS0qyhAS8
MzdHY4LQNltHR1mJgJg0isQl/fxhcEgaES8wYgDp3e52Qvp3IgRfG05797ZtOhqE
Dw2TtT5Y6T+wRav1FyfItCm0qadL+wmMY8vV484dS73+cgNile1J47nWNAMfU1I/
20wtnmPPoqN02JB/Pbi9mIIG2gMCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFB7sT6Go+KzUCDO9LD7tsrcILBeRMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr
BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QVU1PLzAvMFwG
CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BVTU8vMC8x
RUVDNEZBMUE4RjhBQ0Q0MDgzM0JEMkMzRUVEQjJCNzA4MkMxNzkxLm1mdDA3Bggr
BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u
LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEw
LzAeBAIAATAYAwQCZxQoAwQCZ4UsAwQDfJaAAwQF3xsgMA0EAgACMAcDBQAkALOA
MCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCXuwIDAgIBAgMCAjUwDQYJKoZIhvcN
AQELBQADggEBAIEJtkGRmTaeqCqrI+y7kBfplH6hrd1RMIUZkuuj2VeWkseJXj6h
0U0o6j+uHNJnXn1upfLN8PAiUlHz1fIVXEv7EwoEEYXr9ygS/JWrEQbiORksUGVx
E0b/QleTifyzUOQQeL0/BACddDlDWzMjDa+3az+YpZ3UIUXypmfzYUIy8bq4MTWA
8CppXdCvA0/NKhmjl6w+dvG8bU8DoVhQz4SFWN9kG2EfrDyFaCmNe3ZnhKuFRRqJ
H7+f31ZA2hzekk5aBS/6d/civsBhmMf9PucDatT8ABMpV7pYGm9m8wlpe8OAI0m0
azgs83NfJdf8WK8nJRev+qK/I7630W2LCTo=
-----END CERTIFICATE-----
Generated at Wed May 13 00:21:35 2026 by rpki-client