Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
File:                     2332F45F8367B079CBBF58331B603792B98FE14C.cer (raw, json)
Hash identifier:          hgs2s7hoZSuOJo+w4kQz9NIxm8SRSwSSo2foAzv8MHA=
Subject key identifier:   23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       7F0B2EB8A3601EB3E89372393B4EA7394CE79FF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/LEOLCY/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:47:51 +0000
Certificate not after:    Mon 10 May 2027 15:52:51 +0000
Subordinate resources:    AS: 63904
                          IP: 43.240.44.0/22
                          IP: 103.17.240.0/22
                          IP: 211.76.184.0/23
                          IP: 211.79.110.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0b:2e:b8:a3:60:1e:b3:e8:93:72:39:3b:4e:a7:39:4c:e7:9f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:47:51 2026 GMT
            Not After : May 10 15:52:51 2027 GMT
        Subject: CN=2332F45F8367B079CBBF58331B603792B98FE14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:15:95:ae:fd:b1:c7:17:c7:00:79:6d:8e:
                    5c:81:03:8f:f7:ad:bf:3f:9a:60:a1:4d:2a:29:29:
                    6f:26:46:ed:9e:9f:de:7d:ee:7b:9a:44:8b:91:c2:
                    1d:dd:c0:03:6c:92:3e:71:db:2b:d4:6c:90:2e:79:
                    44:d6:d8:e0:16:6a:56:c4:1e:f0:61:cb:26:b0:6f:
                    29:3b:8b:da:b8:ab:e2:c7:d0:26:d9:db:0c:4c:8c:
                    a7:61:3d:18:0a:cc:9a:91:28:38:c9:72:57:49:a4:
                    9c:b1:7e:63:e4:86:9f:4c:1d:24:4c:85:ff:97:1c:
                    bd:c4:cd:3d:b0:b7:b5:83:5a:e4:cc:f9:e7:fc:82:
                    6b:fa:77:d5:03:d6:3c:d9:ae:54:33:e4:79:ce:c1:
                    ab:56:95:88:e6:d6:df:7c:85:34:39:53:61:fc:8c:
                    35:35:02:3f:b3:5c:53:f5:5c:79:17:65:7b:0f:68:
                    9a:08:1d:8e:91:6c:99:f6:7f:52:71:59:13:6d:46:
                    3d:7b:9d:60:e6:94:78:7f:3c:83:31:72:36:90:07:
                    6a:29:02:c0:f4:3d:64:6e:68:c0:73:7b:7f:7d:f8:
                    b4:c9:57:b1:69:7f:f3:4f:b5:00:63:ef:6d:eb:06:
                    52:73:8b:32:19:b3:66:83:64:3c:23:0c:1f:ea:69:
                    3f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.44.0/22
                  103.17.240.0/22
                  211.76.184.0/23
                  211.79.110.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63904

    Signature Algorithm: sha256WithRSAEncryption
         82:02:7f:d9:5c:66:df:ff:78:f5:db:26:b4:20:0f:b0:68:9b:
         16:51:0f:67:18:37:d0:91:14:de:9b:3b:7c:c3:e5:97:01:68:
         93:31:54:1b:39:b6:8e:6b:78:5e:42:0b:65:59:68:44:66:86:
         7c:cd:ef:46:e8:1d:93:e1:55:71:66:8c:38:98:17:2e:f1:d9:
         d7:14:18:3d:d0:67:35:90:06:27:71:82:b8:80:55:1d:ef:5a:
         a3:5d:ee:0d:e6:97:50:af:09:c3:d7:bc:1e:86:ce:60:59:2e:
         c4:ed:53:3c:ba:44:3d:f7:15:71:6b:95:6e:de:fa:6d:f4:b8:
         da:ee:3c:04:bf:64:75:c4:00:1e:4c:74:0e:77:94:d6:70:b5:
         91:13:03:0d:a1:4a:88:c2:bf:48:8b:c8:66:58:e2:f7:6a:07:
         01:e6:c1:61:54:4e:3a:bf:c7:04:79:0f:ae:4a:ae:76:80:d8:
         ca:b5:02:dd:d2:25:d1:9b:88:b6:a0:0c:88:df:82:74:fa:8d:
         63:88:1d:14:58:6b:36:68:16:bd:9f:5f:ed:00:bf:ec:43:c4:
         7a:16:16:51:30:ad:64:7a:20:bc:73:72:48:5c:89:b6:7e:7a:
         d1:30:25:2b:c7:e5:4a:e1:93:0d:75:07:f8:58:8c:e0:99:50:
         31:54:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:00 2026 by rpki-client