Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
File: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer (raw, json)
Hash identifier: gdg+B2e9BpqGOd81JDmgjNBLWntj2NWhj+gQx4Q+FQE=
Subject key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 488204BCF175CBA17706919012611CE308A94D5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft
caRepository: rsync://rpkica.twnic.tw/rpki/VOCOM/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 16:00:36 +0000
Certificate not after: Mon 10 May 2027 16:05:36 +0000
Subordinate resources: AS: 63897
IP: 103.127.236.0/22
IP: 103.178.36.0/23
IP: 2400:4460::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:82:04:bc:f1:75:cb:a1:77:06:91:90:12:61:1c:e3:08:a9:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 16:00:36 2026 GMT
Not After : May 10 16:05:36 2027 GMT
Subject: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:ed:1f:9b:f3:dd:8d:0b:a5:24:25:ba:8e:
0b:e6:12:9e:1b:e9:02:5e:e8:1a:5c:2a:b9:ae:e6:
20:b4:b5:86:af:1e:ce:6c:0c:e6:29:ab:49:ab:40:
f6:50:23:ff:0b:96:26:83:79:40:e2:bd:c2:57:c4:
c5:2c:5b:5a:ac:78:73:cf:4b:93:d1:27:8b:be:97:
ab:30:78:56:c4:1b:22:74:ef:ee:ff:39:ec:68:f0:
70:60:ed:48:2f:23:48:86:0d:ec:eb:d8:bf:8b:ae:
89:b9:cd:d5:e7:7b:bd:4b:51:ad:21:41:6b:d5:10:
95:7e:40:c5:97:de:ff:63:c2:0d:60:c9:6c:29:2b:
ba:76:5c:e9:22:e0:ed:be:62:bd:4b:d0:37:b2:91:
e1:cd:c5:38:27:c0:3e:73:c2:3b:5b:28:3a:25:8f:
23:59:7e:e5:6e:64:5d:a1:a5:3a:76:b6:03:61:45:
51:e8:0a:af:c8:46:52:8e:0a:30:ec:93:34:51:62:
da:34:32:cf:60:5e:50:6b:83:e7:68:13:55:9f:85:
a8:d0:42:11:47:5a:4c:6c:9a:f8:f6:d3:70:7e:65:
28:b5:16:4c:65:61:8b:5d:13:e3:85:9f:77:90:cb:
85:cc:40:63:8e:af:3e:8c:d7:43:98:67:bb:a1:01:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.127.236.0/22
103.178.36.0/23
IPv6:
2400:4460::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63897
Signature Algorithm: sha256WithRSAEncryption
ae:55:19:f3:04:99:ff:51:d2:5e:59:5f:ff:4f:f6:29:08:ac:
d0:cf:24:65:59:d5:4a:b4:85:fa:be:e5:6a:07:5f:b2:39:df:
50:a3:3f:e0:2f:cf:b7:42:88:e5:35:b4:b6:f5:8e:90:a9:bf:
c7:ef:cb:64:b8:88:db:59:d7:5d:a6:aa:7d:f4:1f:f4:33:8e:
27:b0:b8:81:54:83:f7:cc:29:3a:b1:a0:ac:d0:dd:ea:40:a2:
7a:96:52:e0:48:95:e9:8e:18:fe:9d:37:5b:8b:3d:aa:14:5a:
4a:68:75:a0:08:d7:e5:7f:6b:c1:0c:2b:a8:d0:a5:1f:60:a3:
b6:1b:40:45:8d:a6:4c:92:4a:d3:4d:cc:2c:7f:75:f3:b0:c1:
9d:e3:e0:e1:ff:19:0f:fa:be:b4:a0:9f:f4:fc:4a:cf:16:4d:
b3:b4:aa:b0:c3:34:2f:8f:33:6e:95:6d:09:cf:37:3b:21:9a:
e0:bf:42:65:32:fc:c4:68:37:33:5f:ec:65:af:8a:6c:29:62:
4b:9c:f9:7a:47:ec:6b:a0:c2:01:63:2e:cb:81:0a:1f:8a:de:
59:23:27:80:b1:ea:7a:9f:bf:bb:33:07:4c:19:53:bf:02:0c:
98:c8:62:49:b6:bc:53:d0:ee:b2:7d:49:a1:ea:04:48:b5:db:
39:49:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:21 2026 by rpki-client