Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
File: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer (raw, json)
Hash identifier: q9dEHwrhKsumm3DMZrC6s/joZDyzdiMIQa+tItwIAjI=
Subject key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 43A8389078EC985BAE01FBF31D0A70BBCEDD9AF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft
caRepository: rsync://rpkica.twnic.tw/rpki/ISTVC/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:47:07 +0000
Certificate not after: Mon 10 May 2027 15:52:07 +0000
Subordinate resources: AS: 9920
AS: 152614
IP: 103.173.94.0/23
IP: 2407:e4c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:a8:38:90:78:ec:98:5b:ae:01:fb:f3:1d:0a:70:bb:ce:dd:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:47:07 2026 GMT
Not After : May 10 15:52:07 2027 GMT
Subject: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:4a:7d:17:f0:98:25:eb:e5:37:00:b7:c5:
ba:47:37:a1:a7:77:e7:e5:a8:79:ec:9d:83:c5:5e:
ee:16:10:ba:26:46:0a:d5:07:d4:8b:0d:0c:55:b1:
66:fe:b6:b2:f5:f1:32:a5:39:ed:4d:fd:d6:65:d7:
2f:a4:cd:f0:5e:8a:1b:b9:84:20:8f:01:01:5f:94:
fe:f4:81:3f:36:b9:8d:57:5e:b3:d9:1e:36:28:13:
ed:3e:e7:50:0e:50:84:fa:e5:cb:47:06:2f:42:6d:
b2:95:ac:0c:40:50:88:fd:06:12:6a:ea:f8:d1:a6:
b7:67:ec:35:14:05:60:9c:62:c6:05:0b:92:2e:18:
03:f3:d9:ca:1a:a8:5b:74:d1:06:d6:cd:36:37:9d:
5f:58:7c:a0:f3:05:2c:f7:cb:3f:1c:92:93:6a:46:
d8:15:3d:11:fd:ce:32:94:a7:e7:c9:e8:0f:7a:e5:
e5:c4:5b:f7:9b:07:33:72:4d:b2:f8:dc:5d:f2:06:
db:6b:ec:87:ac:48:df:f1:45:59:89:8e:bc:db:e9:
3a:e5:23:7d:6f:5a:fc:31:b8:c4:68:e1:e4:a1:5d:
d9:95:ba:27:b7:fa:92:97:fd:3d:fb:7e:e6:15:df:
ef:89:51:b5:cd:cd:92:8a:8c:1f:ce:51:8c:94:98:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.94.0/23
IPv6:
2407:e4c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9920
152614
Signature Algorithm: sha256WithRSAEncryption
98:50:d6:17:d3:8f:64:16:d8:dc:9c:60:15:9a:30:08:1c:96:
76:ab:56:cb:f1:0a:49:46:e2:8c:8c:bd:f1:f7:a4:ff:e8:69:
ae:17:ef:cc:29:9e:4b:8b:b9:4a:e0:5c:a9:21:c2:18:0e:33:
11:ff:85:5f:9a:6d:42:66:91:be:9b:18:a8:be:9e:bd:7f:3b:
35:d0:72:ca:3a:16:73:26:8c:78:94:5f:52:aa:19:3e:84:df:
07:ac:c1:22:cb:9f:19:0d:83:54:ac:92:43:73:af:92:af:e0:
f3:7b:d7:9c:eb:2b:4a:c7:b8:76:44:64:38:98:b5:7b:73:0b:
d4:2b:60:77:bb:0a:c3:cf:38:41:ef:a8:27:57:27:ee:00:ef:
7e:a5:65:d8:6a:2a:5d:0e:ff:49:43:48:9d:b5:ad:f3:e9:ca:
57:6d:63:98:e8:a1:b7:00:c5:11:45:da:34:09:4f:02:4b:3b:
fb:55:f8:4e:25:42:70:f6:26:a5:5e:31:c1:9b:11:76:1c:2a:
ff:7f:c0:8c:bb:c5:bb:2f:ec:84:36:ab:14:3a:fa:88:67:63:
05:e4:3b:02:0e:14:ee:20:68:f0:b5:1c:54:c0:27:4d:2d:b7:
aa:e5:52:cf:ae:bc:3b:85:32:44:a4:72:3d:48:85:bd:9c:0b:
1f:40:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:06 2026 by rpki-client