
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer
File: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer (raw, json)
Hash identifier: RYrmEAOko4U5QgykRLNvZ01tXHkcCCqbAbsQLOeMLBU=
Subject key identifier: 4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 63668B3ADEBC870AF1DAD96574ADC45E6ED17200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft
caRepository: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:43:12 +0000
Certificate not after: Mon 10 May 2027 15:48:12 +0000
Subordinate resources: IP: 103.6.126.0/23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:66:8b:3a:de:bc:87:0a:f1:da:d9:65:74:ad:c4:5e:6e:d1:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:43:12 2026 GMT
Not After : May 10 15:48:12 2027 GMT
Subject: CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:2f:73:81:1d:81:9e:e3:cf:42:5c:61:06:
60:53:3d:cf:69:7e:4f:6a:3a:07:0b:67:57:e0:eb:
5b:5a:8d:7c:39:ad:b4:7c:26:ad:d9:9b:69:8a:99:
86:68:ab:03:4f:cf:8f:37:ae:d9:74:51:c5:6e:b9:
38:79:8b:3b:ba:a2:a9:8c:fd:c6:19:d6:59:79:9f:
4d:55:9d:a9:ee:d2:f5:b7:02:07:8a:b6:00:c4:2f:
7f:5f:29:50:7c:1a:93:54:18:d1:87:d0:8d:e5:2e:
c8:9f:03:c2:ef:22:14:3d:00:7d:39:e9:0c:dc:cb:
e7:2d:9f:84:f2:99:aa:4d:38:04:b7:57:d7:4f:a4:
e1:65:eb:d3:b8:98:71:16:20:3e:d0:66:c5:6e:87:
60:70:e9:6f:1f:7c:cb:db:a3:a6:07:e6:d8:8e:b7:
09:e7:ed:e4:d3:8c:66:49:0f:94:1a:19:fe:75:78:
cb:43:db:f1:94:26:4a:99:1e:e4:92:36:75:85:52:
cb:34:51:04:3a:01:8e:1a:f2:26:8c:85:83:cf:7c:
7e:a3:9c:16:23:f2:fc:01:1f:4d:95:18:84:c3:5e:
2d:b9:c4:3b:b9:7d:3c:9a:42:40:2d:0d:84:b4:ed:
32:88:1f:3c:e1:99:68:d8:79:3f:8e:6f:f6:eb:e8:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.6.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:3e:b8:98:46:2e:d5:16:e0:b4:5b:62:ea:f6:17:0e:08:8a:
df:85:12:1a:1c:2c:f6:83:a2:21:2f:a2:83:35:d5:4d:9d:95:
7d:a7:1a:8b:1d:0d:be:9d:72:32:a8:a5:e8:c7:10:1a:ec:1f:
e8:d3:c5:1f:e7:cf:9c:7b:26:90:4f:70:05:01:71:ac:2a:8b:
0d:9d:99:d3:f5:70:2d:1c:12:33:6d:94:ff:33:e9:60:69:06:
7d:a8:99:ef:08:0a:9d:bd:68:5e:7d:bd:ac:f4:90:2d:70:69:
35:48:73:4d:0e:5c:a1:14:8c:22:b9:f3:ba:42:bc:8c:99:90:
53:39:dc:ee:36:ef:c7:87:a7:36:52:ad:e1:0a:af:a8:7c:41:
80:c8:55:d2:0a:98:df:c5:96:0a:c4:9a:c1:af:94:2f:f7:88:
e0:1e:49:08:a6:5f:03:1d:11:68:7f:3b:58:25:b8:9b:92:3b:
e5:88:c4:c6:a1:f1:cf:a8:f6:50:44:9b:7a:d8:1f:d0:c6:f2:
40:e6:f9:b7:5b:fd:cc:21:d2:53:4d:42:58:aa:11:f1:a0:58:
97:72:a9:7f:06:0d:35:f1:30:81:d2:f3:9b:e8:ef:ad:f1:38:
87:5d:6a:0a:9d:d7:52:4f:79:fb:9c:64:22:8d:31:a4:5c:fe:
1f:61:2b:8e
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUY2aLOt68hwrx2tlldK3EXm7RcgAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDMxMloX
DTI3MDUxMDE1NDgxMlowMzExMC8GA1UEAxMoNEZCNDU5NUQ4Njk3RkQxQUI3RDIx
NkRFMDc5RUJBNTk3NzM2NDNENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALS0L3OBHYGe489CXGEGYFM9z2l+T2o6BwtnV+DrW1qNfDmttHwmrdmbaYqZ
hmirA0/Pjzeu2XRRxW65OHmLO7qiqYz9xhnWWXmfTVWdqe7S9bcCB4q2AMQvf18p
UHwak1QY0YfQjeUuyJ8Dwu8iFD0AfTnpDNzL5y2fhPKZqk04BLdX10+k4WXr07iY
cRYgPtBmxW6HYHDpbx98y9ujpgfm2I63Ceft5NOMZkkPlBoZ/nV4y0Pb8ZQmSpke
5JI2dYVSyzRRBDoBjhryJoyFg898fqOcFiPy/AEfTZUYhMNeLbnEO7l9PJpCQC0N
hLTtMogfPOGZaNh5P45v9uvohzcCAwEAAaOCAmwwggJoMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFE+0WV2Gl/0at9IW3geeull3NkPVMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr
BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9CRVNUQkFTSVMv
MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVT
VEJBU0lTLzAvNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNE
NS5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v
dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcGfjANBgkqhkiG9w0BAQsFAAOCAQEAPz64
mEYu1RbgtFti6vYXDgiK34USGhws9oOiIS+igzXVTZ2Vfacaix0Nvp1yMqil6McQ
Guwf6NPFH+fPnHsmkE9wBQFxrCqLDZ2Z0/VwLRwSM22U/zPpYGkGfaiZ7wgKnb1o
Xn29rPSQLXBpNUhzTQ5coRSMIrnzukK8jJmQUznc7jbvx4enNlKt4QqvqHxBgMhV
0gqY38WWCsSawa+UL/eI4B5JCKZfAx0RaH87WCW4m5I75YjExqHxz6j2UESbetgf
0MbyQOb5t1v9zCHSU01CWKoR8aBYl3KpfwYNNfEwgdLzm+jvrfE4h11qCp3XUk95
+5xkIo0xpFz+H2Erjg==
-----END CERTIFICATE-----
Generated at Tue May 12 22:33:01 2026 by rpki-client