Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer
File:                     3135985A244571EE521F17A73A1F0D6341A35ED5.cer (raw, json)
Hash identifier:          D5B160kOxo4KmEyjtqUkeEd4ZTLX8/LqatJvJp7YrTU=
Subject key identifier:   31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       6EB3E5282F534948DFB18615601BFD86D0809BE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/COLIN/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:44:31 +0000
Certificate not after:    Mon 10 May 2027 15:49:31 +0000
Subordinate resources:    IP: 103.6.124.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b3:e5:28:2f:53:49:48:df:b1:86:15:60:1b:fd:86:d0:80:9b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:44:31 2026 GMT
            Not After : May 10 15:49:31 2027 GMT
        Subject: CN=3135985A244571EE521F17A73A1F0D6341A35ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:33:8a:3a:37:50:af:4c:b4:eb:c0:48:ed:4a:
                    33:c4:19:4b:29:70:19:6d:a4:f1:b6:e9:56:f3:0f:
                    03:f5:28:ce:03:30:11:d8:0d:ca:d3:bb:2a:a4:88:
                    c3:93:97:fb:2a:48:c3:90:56:bc:8f:d8:84:10:96:
                    ed:12:d2:95:28:42:f2:76:4a:a7:15:dd:8c:30:e5:
                    c2:b5:82:e3:65:04:b6:31:f5:a5:3e:97:b5:1b:bb:
                    21:cf:78:5e:ab:be:5b:e0:a1:2d:f6:25:d4:ce:90:
                    7b:3b:91:0d:2e:bb:bc:6e:80:b7:65:7f:31:de:ac:
                    75:63:e8:e1:e1:3c:c4:5f:4c:9f:18:50:4d:c7:9a:
                    2e:bd:6c:11:0b:fb:25:63:dd:1e:e0:b8:c5:58:43:
                    67:2b:9f:06:12:33:36:ec:df:bf:c9:40:2e:cf:82:
                    70:25:94:89:93:aa:72:ac:31:6c:90:e3:ee:e4:a2:
                    79:75:9a:a9:80:fc:1d:b4:da:03:aa:6d:c0:0a:90:
                    5c:ca:49:d7:7c:d4:82:68:be:06:70:d7:44:03:49:
                    21:69:49:70:08:74:65:c4:0d:34:ee:31:d1:3b:04:
                    9f:9b:84:92:02:da:70:54:88:c7:fe:c5:23:c3:28:
                    0a:2a:79:56:bd:ea:09:bf:08:88:b6:95:f5:a8:97:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:d6:3c:38:1a:d9:d4:f7:a5:a6:21:dd:4e:a9:65:0f:01:92:
         8d:e8:48:17:8e:81:82:05:1c:71:b5:2c:10:19:74:ba:3c:11:
         85:8f:2a:5a:e2:49:82:5d:e5:6f:93:96:f1:a8:74:fb:08:8c:
         5e:83:10:d6:f6:6e:fa:ee:e6:04:25:03:58:d4:7b:af:9a:13:
         42:01:11:de:dd:d8:c8:5e:3f:52:d2:95:c7:b7:83:87:a6:1d:
         ae:fc:69:bf:18:65:dc:36:d8:04:a9:5a:90:d4:cd:66:d2:db:
         07:12:22:01:7d:a6:20:c3:4f:37:69:d8:7e:23:07:e7:aa:3b:
         e2:4d:dc:0d:ea:41:b2:01:bc:0c:37:9c:88:ea:aa:86:35:14:
         ba:f9:5a:70:13:0a:04:7e:5c:18:23:11:65:68:84:7c:fd:13:
         22:b0:6f:17:6d:ed:58:ca:a1:ef:f7:10:dc:01:7a:32:78:cd:
         62:76:e9:b1:0a:c8:ac:01:50:73:37:ba:1e:39:81:62:79:2f:
         2a:6d:c2:22:aa:1d:3b:28:0a:d5:7a:95:e6:2f:3d:fb:89:9a:
         d0:e1:8e:63:ec:a7:7d:cb:e1:be:11:69:f9:87:08:e4:a5:cf:
         45:a4:44:06:99:19:e9:5f:da:b9:68:cf:b9:33:da:61:fa:0b:
         0a:b4:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:34 2026 by rpki-client