
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer
File: 390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer (raw, json)
Hash identifier: aIVM6MZEchNbaEXm2dVDwdMHCSMQFFbH3Dsn5cyaurU=
Subject key identifier: 39:01:37:F4:F0:6E:5F:34:38:EF:F9:5A:B8:C6:47:F7:D7:D6:D7:05
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 758D65B9AB863B8FF232FF391737F06AE679CC18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
caRepository: rsync://rpkica.twnic.tw/rpki/LIBO/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:47:52 +0000
Certificate not after: Mon 10 May 2027 15:52:52 +0000
Subordinate resources: IP: 103.237.48.0/23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:8d:65:b9:ab:86:3b:8f:f2:32:ff:39:17:37:f0:6a:e6:79:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:47:52 2026 GMT
Not After : May 10 15:52:52 2027 GMT
Subject: CN=390137F4F06E5F3438EFF95AB8C647F7D7D6D705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:ef:f9:1c:64:0a:d1:40:2b:ce:05:ed:21:
f3:50:a2:b8:77:3e:05:90:e2:80:83:81:ac:b4:32:
5b:60:50:22:74:84:51:95:6f:40:78:60:5d:b6:d7:
a4:c0:92:26:02:ff:fe:aa:86:33:66:e7:56:23:b8:
66:f2:7e:a1:99:bc:46:5e:0c:0b:e3:3c:06:3b:31:
97:62:89:18:dd:de:c8:80:9b:fc:bb:98:d7:3e:17:
d4:cf:d0:e1:e7:03:81:f6:38:c4:f5:59:2d:be:15:
9a:6c:e2:d9:02:e5:35:4d:04:a5:10:94:90:92:9d:
82:d9:94:ce:36:32:46:37:49:1c:08:67:26:e7:32:
a5:32:29:80:85:87:b9:85:46:ed:ec:27:9b:16:9c:
7d:a3:53:46:c6:55:ec:a3:63:73:1e:ff:4f:36:bf:
04:b3:c5:d1:b1:2d:66:86:81:c3:ee:75:f0:68:04:
8a:15:b4:22:91:a8:13:08:3b:41:1e:4c:b9:7f:ac:
de:66:19:66:90:5e:a4:a0:90:ff:86:f8:b0:84:69:
3b:9d:7a:f6:78:8d:51:a4:d1:b9:e2:4d:d8:5e:69:
40:c1:ee:fa:25:e7:9d:36:80:27:55:2c:30:90:c4:
1d:d3:03:a2:c5:b1:6a:e9:4b:89:2c:8c:50:19:d2:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
39:01:37:F4:F0:6E:5F:34:38:EF:F9:5A:B8:C6:47:F7:D7:D6:D7:05
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LIBO/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.237.48.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:a5:e8:a7:18:19:fa:69:3f:0f:a5:d5:10:59:64:fb:55:be:
1c:55:d8:5d:7d:56:89:f9:50:ca:f7:1c:66:69:12:fa:8f:50:
ee:71:2a:2b:ae:a2:0c:7f:c5:5a:51:ad:1e:93:f0:0c:a0:f8:
55:2e:c6:08:fc:99:e6:2a:d2:0c:06:b7:9e:69:36:b8:29:db:
16:61:10:a0:3b:43:54:73:ce:bc:d2:d7:cd:c7:2f:ea:6f:80:
ba:09:11:8f:81:e9:a0:ee:9a:05:7f:55:31:51:a2:7e:ca:ea:
07:55:71:50:3e:4f:69:24:1a:48:b7:0f:23:a2:a8:26:36:f9:
de:55:cc:6a:cc:37:dc:bf:68:54:c4:00:27:c7:29:6f:db:94:
25:c3:4c:ce:0c:7b:f9:23:fa:a0:f7:c2:35:84:59:da:a3:ea:
81:9b:e4:92:27:4c:c0:ca:ce:ea:a9:64:6f:47:af:e3:4c:d8:
2e:51:3a:b2:07:a1:7b:2f:48:10:e5:63:46:9a:32:8a:d8:b9:
dd:8a:48:d7:1d:71:31:1e:e1:5c:b7:85:95:98:35:bb:1e:8d:
04:75:92:c3:a6:28:c5:52:b0:11:dd:7a:d8:05:13:e9:cc:7f:
fb:02:4f:20:c2:d5:c4:e6:29:04:ae:50:b1:5d:20:00:d6:f4:
07:80:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:54 2026 by rpki-client