Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
File: 39FBFF134ABD193CAEA4AAB003503031F998187D.cer (raw, json)
Hash identifier: cdzcfA5GsAh7rs1bhWfr5gXlrCaQnW8P3kVB4f01jT8=
Subject key identifier: 39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 4C8AF7741CCE49C1F9254CC283A211F0A4F8A902
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
caRepository: rsync://rpkica.twnic.tw/rpki/DCT/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:44:59 +0000
Certificate not after: Mon 10 May 2027 15:49:59 +0000
Subordinate resources: AS: 131601
IP: 103.252.196.0/22
IP: 114.29.244.0/22
IP: 2403:2640::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8a:f7:74:1c:ce:49:c1:f9:25:4c:c2:83:a2:11:f0:a4:f8:a9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:44:59 2026 GMT
Not After : May 10 15:49:59 2027 GMT
Subject: CN=39FBFF134ABD193CAEA4AAB003503031F998187D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:86:dc:ad:9b:bc:6c:2a:d2:35:15:30:c8:
26:5e:c8:7d:5c:83:2c:1d:81:a4:87:af:a9:ff:d5:
85:25:d6:86:81:eb:3c:3a:14:eb:55:7f:d2:6d:c0:
c0:90:dd:47:9b:b6:a8:c0:1d:36:8c:4e:2b:6c:0d:
9a:f4:4f:14:d1:12:25:bb:e4:ce:b0:b7:06:7c:4d:
eb:0b:04:30:56:87:ac:40:60:40:1a:4d:2b:4d:8e:
d6:b8:dc:50:8c:8c:9d:53:86:1e:cf:e7:79:85:b8:
0c:0c:5e:85:ae:86:f3:a1:76:e8:a4:3d:e6:5a:2c:
c6:28:e1:9a:a5:5e:9a:63:f7:e0:d0:31:31:40:6d:
6a:b1:8f:29:e5:58:22:47:4e:cf:8d:30:37:5e:02:
4d:73:04:f7:2a:a1:e4:d5:ac:d5:eb:32:b8:fe:7a:
f5:b4:6b:56:6d:18:b5:09:ba:e1:09:01:b8:4d:5f:
88:d3:cc:d7:06:8b:31:b1:4b:df:d2:d0:5d:77:05:
c2:8f:9d:66:62:df:28:7c:ac:c3:b8:58:eb:5b:10:
05:90:18:f3:50:0f:a8:32:c5:1b:3c:56:0a:ba:b2:
a3:93:85:30:03:42:cd:03:06:4a:31:c4:6b:0a:b4:
7b:8b:fe:68:c5:a2:99:d6:a5:61:2b:ea:01:20:31:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DCT/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.252.196.0/22
114.29.244.0/22
IPv6:
2403:2640::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131601
Signature Algorithm: sha256WithRSAEncryption
7d:fa:95:48:72:de:f7:b5:5f:c2:20:9b:a3:d7:38:af:5f:c0:
23:c6:96:96:51:3f:c0:8c:9e:aa:c4:79:a4:65:0e:a7:57:fa:
98:e6:cc:11:72:be:0d:f8:4a:30:bd:84:b2:65:96:91:c4:f4:
3e:0e:b0:a7:4f:0a:e1:fb:3b:f9:bc:05:66:df:89:eb:77:a4:
5f:7b:02:ad:1c:9f:c3:05:d9:37:2c:84:73:81:eb:cc:d3:5a:
7c:a3:68:15:0c:39:a7:75:77:9a:23:9c:66:27:b6:d0:f7:f6:
4a:ab:15:32:49:72:3f:d2:f7:c9:4a:5f:2d:8d:23:9b:c1:46:
a6:17:39:bf:a1:84:ff:14:59:03:a9:cc:f8:66:a1:76:5f:df:
e3:52:7a:f5:76:60:85:7d:cc:1b:e6:1a:55:fb:e3:d2:30:3f:
98:13:07:5e:50:85:c7:f7:f1:aa:10:19:29:dc:f4:ce:b2:8f:
1f:f0:60:be:9b:3d:03:95:18:f1:8b:f5:d4:0c:4d:a8:67:b0:
d5:a0:df:c5:78:8c:73:da:83:f2:fb:2b:64:82:31:32:f6:98:
50:b9:be:60:b4:41:49:ea:06:10:1f:59:6a:60:c1:1e:bb:e4:
7a:f9:a0:28:aa:0f:b0:ff:60:7b:62:f8:e3:c1:9e:34:b8:23:
1b:4c:ad:15
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUTIr3dBzOScH5JUzCg6IR8KT4qQIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDQ1OVoX
DTI3MDUxMDE1NDk1OVowMzExMC8GA1UEAxMoMzlGQkZGMTM0QUJEMTkzQ0FFQTRB
QUIwMDM1MDMwMzFGOTk4MTg3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK5whtytm7xsKtI1FTDIJl7IfVyDLB2BpIevqf/VhSXWhoHrPDoU61V/0m3A
wJDdR5u2qMAdNoxOK2wNmvRPFNESJbvkzrC3BnxN6wsEMFaHrEBgQBpNK02O1rjc
UIyMnVOGHs/neYW4DAxeha6G86F26KQ95losxijhmqVemmP34NAxMUBtarGPKeVY
IkdOz40wN14CTXME9yqh5NWs1esyuP569bRrVm0YtQm64QkBuE1fiNPM1waLMbFL
39LQXXcFwo+dZmLfKHysw7hY61sQBZAY81APqDLFGzxWCrqyo5OFMANCzQMGSjHE
awq0e4v+aMWimdalYSvqASAxLN8CAwEAAaOCApEwggKNMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFDn7/xNKvRk8rqSqsANQMDH5mBh9MB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHXBggrBgEFBQcBCwSByjCBxzAvBggr
BgEFBQcwBYYjcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9EQ1QvMC8wWwYI
KwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENULzAvMzlG
QkZGMTM0QUJEMTkzQ0FFQTRBQUIwMDM1MDMwMzFGOTk4MTg3RC5tZnQwNwYIKwYB
BQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNhdGlvbi54
bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMw
EgQCAAEwDAMEAmf8xAMEAnId9DANBAIAAjAHAwUAJAMmQDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMCAhEwDQYJKoZIhvcNAQELBQADggEBAH36lUhy3ve1X8Igm6PX
OK9fwCPGlpZRP8CMnqrEeaRlDqdX+pjmzBFyvg34SjC9hLJllpHE9D4OsKdPCuH7
O/m8BWbfiet3pF97Aq0cn8MF2TcshHOB68zTWnyjaBUMOad1d5ojnGYnttD39kqr
FTJJcj/S98lKXy2NI5vBRqYXOb+hhP8UWQOpzPhmoXZf3+NSevV2YIV9zBvmGlX7
49IwP5gTB15Qhcf38aoQGSnc9M6yjx/wYL6bPQOVGPGL9dQMTahnsNWg38V4jHPa
g/L7K2SCMTL2mFC5vmC0QUnqBhAfWWpgwR675Hr5oCiqD7D/YHti+OPBnjS4IxtM
rRU=
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:53 2026 by rpki-client