Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer (raw, json)
Hash identifier: quFKI68SgrtVUFS0Iqd1aXfx5wiZLTdtcWJfK8Mkhs0=
Subject key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 7B3BBD5C0AEFD62C240EA67BCA441104DE6817AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
caRepository: rsync://rpkica.twnic.tw/rpki/SONET/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:57:04 +0000
Certificate not after: Mon 10 May 2027 16:02:04 +0000
Subordinate resources: AS: 18182
IP: 27.105.0.0/16
IP: 39.1.0.0/16
IP: 61.56.128.0/19
IP: 61.62.0.0/16
IP: 61.64.64.0 -- 61.64.255.255
IP: 219.84.0.0/15
IP: 2404:80::/28
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:3b:bd:5c:0a:ef:d6:2c:24:0e:a6:7b:ca:44:11:04:de:68:17:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:57:04 2026 GMT
Not After : May 10 16:02:04 2027 GMT
Subject: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:23:b9:1e:51:13:d0:58:cd:84:7f:12:87:
a9:62:94:cc:08:22:76:15:85:74:4d:94:99:95:36:
34:d6:f7:5f:93:f2:f1:87:58:8e:82:95:0e:1b:31:
bc:73:6c:17:b4:13:d4:25:fb:98:cb:76:fd:7e:d3:
8b:fd:4a:47:a2:d4:49:b3:9b:62:f2:48:92:6c:91:
14:a8:86:5c:6a:ef:43:2e:73:ba:79:d1:6d:3a:7f:
33:71:c6:76:28:85:3e:b2:70:7a:e3:cf:42:4c:6f:
61:5c:fc:89:f5:9b:78:00:18:d6:b0:93:87:b5:46:
2f:ff:46:0c:47:fe:f2:89:17:39:c0:d5:e3:81:9b:
cc:10:19:b7:a6:d3:54:d2:d1:91:93:8e:38:f5:51:
5d:c4:79:3b:44:ff:78:ba:0c:b1:53:43:2e:40:da:
3b:e4:06:b9:d5:c1:b3:b8:e2:b4:ac:a2:83:a1:0f:
a3:6b:36:d9:f8:d3:67:75:eb:bb:a8:cc:6b:b2:2f:
56:19:5b:87:6f:90:cd:42:22:b7:9a:48:de:13:df:
1b:b2:77:32:48:92:c5:ad:c5:64:25:aa:be:e4:e1:
d4:3c:ae:0e:6c:5f:8f:81:43:d9:14:55:c2:d2:02:
d8:58:35:33:cb:9f:be:84:5f:64:3a:59:06:59:e8:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.105.0.0/16
39.1.0.0/16
61.56.128.0/19
61.62.0.0/16
61.64.64.0-61.64.255.255
219.84.0.0/15
IPv6:
2404:80::/28
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18182
Signature Algorithm: sha256WithRSAEncryption
90:4e:b1:04:04:1e:ca:32:d5:8b:99:e6:49:6c:b5:14:45:cb:
c8:3b:d6:87:12:c0:5d:69:68:7a:24:8a:24:09:bf:67:56:09:
d6:31:a8:6c:5b:d0:5a:08:ae:95:d1:3e:66:67:fc:cb:22:86:
87:cf:df:77:c1:bf:82:14:36:1c:82:6e:33:82:fa:71:97:6f:
52:1c:ba:39:60:f4:a3:54:9b:13:3f:27:a2:b1:a6:f5:a8:48:
8d:ea:80:63:ed:50:ac:5c:b8:cb:06:18:a2:8d:70:a5:37:8b:
58:64:7b:1a:f5:6c:cb:7f:8b:a7:91:02:f1:0a:89:c1:bb:32:
56:32:34:76:47:00:35:d9:2d:b0:7b:46:c3:87:35:9b:25:e6:
21:b4:b5:e1:7d:19:55:d7:10:e5:7b:5e:5f:59:29:d4:b1:2e:
3d:30:0c:27:f5:62:86:96:ac:96:fe:c9:d5:bc:9d:97:54:af:
57:9a:47:f9:5d:c8:4e:5f:12:f2:49:1e:53:02:c1:88:b7:bb:
08:7a:58:1f:c9:11:71:d9:34:c2:63:31:16:99:5d:8a:8f:df:
66:39:1c:47:ac:9a:ca:11:82:77:d2:88:71:b4:21:71:c3:c2:
e2:22:d4:32:48:56:49:9e:90:33:82:e9:51:6f:61:fd:92:dc:
6a:b0:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:36 2026 by rpki-client