Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer
File:                     4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer (raw, json)
Hash identifier:          RYrmEAOko4U5QgykRLNvZ01tXHkcCCqbAbsQLOeMLBU=
Subject key identifier:   4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       63668B3ADEBC870AF1DAD96574ADC45E6ED17200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:43:12 +0000
Certificate not after:    Mon 10 May 2027 15:48:12 +0000
Subordinate resources:    IP: 103.6.126.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:66:8b:3a:de:bc:87:0a:f1:da:d9:65:74:ad:c4:5e:6e:d1:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:43:12 2026 GMT
            Not After : May 10 15:48:12 2027 GMT
        Subject: CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:2f:73:81:1d:81:9e:e3:cf:42:5c:61:06:
                    60:53:3d:cf:69:7e:4f:6a:3a:07:0b:67:57:e0:eb:
                    5b:5a:8d:7c:39:ad:b4:7c:26:ad:d9:9b:69:8a:99:
                    86:68:ab:03:4f:cf:8f:37:ae:d9:74:51:c5:6e:b9:
                    38:79:8b:3b:ba:a2:a9:8c:fd:c6:19:d6:59:79:9f:
                    4d:55:9d:a9:ee:d2:f5:b7:02:07:8a:b6:00:c4:2f:
                    7f:5f:29:50:7c:1a:93:54:18:d1:87:d0:8d:e5:2e:
                    c8:9f:03:c2:ef:22:14:3d:00:7d:39:e9:0c:dc:cb:
                    e7:2d:9f:84:f2:99:aa:4d:38:04:b7:57:d7:4f:a4:
                    e1:65:eb:d3:b8:98:71:16:20:3e:d0:66:c5:6e:87:
                    60:70:e9:6f:1f:7c:cb:db:a3:a6:07:e6:d8:8e:b7:
                    09:e7:ed:e4:d3:8c:66:49:0f:94:1a:19:fe:75:78:
                    cb:43:db:f1:94:26:4a:99:1e:e4:92:36:75:85:52:
                    cb:34:51:04:3a:01:8e:1a:f2:26:8c:85:83:cf:7c:
                    7e:a3:9c:16:23:f2:fc:01:1f:4d:95:18:84:c3:5e:
                    2d:b9:c4:3b:b9:7d:3c:9a:42:40:2d:0d:84:b4:ed:
                    32:88:1f:3c:e1:99:68:d8:79:3f:8e:6f:f6:eb:e8:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:b8:98:46:2e:d5:16:e0:b4:5b:62:ea:f6:17:0e:08:8a:
         df:85:12:1a:1c:2c:f6:83:a2:21:2f:a2:83:35:d5:4d:9d:95:
         7d:a7:1a:8b:1d:0d:be:9d:72:32:a8:a5:e8:c7:10:1a:ec:1f:
         e8:d3:c5:1f:e7:cf:9c:7b:26:90:4f:70:05:01:71:ac:2a:8b:
         0d:9d:99:d3:f5:70:2d:1c:12:33:6d:94:ff:33:e9:60:69:06:
         7d:a8:99:ef:08:0a:9d:bd:68:5e:7d:bd:ac:f4:90:2d:70:69:
         35:48:73:4d:0e:5c:a1:14:8c:22:b9:f3:ba:42:bc:8c:99:90:
         53:39:dc:ee:36:ef:c7:87:a7:36:52:ad:e1:0a:af:a8:7c:41:
         80:c8:55:d2:0a:98:df:c5:96:0a:c4:9a:c1:af:94:2f:f7:88:
         e0:1e:49:08:a6:5f:03:1d:11:68:7f:3b:58:25:b8:9b:92:3b:
         e5:88:c4:c6:a1:f1:cf:a8:f6:50:44:9b:7a:d8:1f:d0:c6:f2:
         40:e6:f9:b7:5b:fd:cc:21:d2:53:4d:42:58:aa:11:f1:a0:58:
         97:72:a9:7f:06:0d:35:f1:30:81:d2:f3:9b:e8:ef:ad:f1:38:
         87:5d:6a:0a:9d:d7:52:4f:79:fb:9c:64:22:8d:31:a4:5c:fe:
         1f:61:2b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:01 2026 by rpki-client