
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
File: 56C0B74262A19F328983C278635DE9570AFEB948.cer (raw, json)
Hash identifier: hCM9dmGCrV8g34NbdesRtEjhzDtudomwMSLNFbdAgtA=
Subject key identifier: 56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 0B396534D077295EE0DE8CE2CFAF9096B3C47754
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
caRepository: rsync://rpkica.twnic.tw/rpki/KANRAYS/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:47:21 +0000
Certificate not after: Mon 10 May 2027 15:52:21 +0000
Subordinate resources: AS: 18044
IP: 2402:4920::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:39:65:34:d0:77:29:5e:e0:de:8c:e2:cf:af:90:96:b3:c4:77:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:47:21 2026 GMT
Not After : May 10 15:52:21 2027 GMT
Subject: CN=56C0B74262A19F328983C278635DE9570AFEB948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:01:88:80:c8:6e:1e:0e:6e:db:bc:cb:7b:
ca:f7:69:ed:13:9d:d8:f5:3f:13:5c:76:0c:89:5f:
e8:b5:4b:c2:2c:fe:62:4c:4b:06:a2:c7:1e:47:03:
39:89:0f:a6:aa:9a:42:5b:dd:a3:7a:4a:6e:47:f3:
2f:32:28:87:7b:2d:1d:1d:fc:5c:79:8c:d8:c2:6e:
79:2b:6c:e9:3f:ad:ce:78:b2:9b:05:f2:ad:38:15:
b8:da:54:2e:3f:7f:68:a4:4f:dd:a3:7e:63:5d:c1:
ed:7a:11:56:8e:12:90:04:71:65:e0:00:9e:5e:35:
b8:f9:cb:51:a6:b9:7a:12:5b:20:e8:af:9f:6f:33:
2e:28:f4:64:1b:46:6c:94:d8:7f:04:1b:83:d2:6b:
48:eb:a9:4b:d6:19:18:d3:f0:f1:98:02:c1:fc:91:
01:77:4d:47:a4:cc:0b:69:5f:2c:47:c0:55:26:cf:
3d:bc:ea:71:31:19:88:42:86:be:08:f6:52:4e:4c:
eb:cc:9a:c2:e0:65:69:ff:fe:72:16:94:c6:89:24:
f0:23:80:17:e3:a2:b8:a1:41:95:b9:30:a6:02:97:
d7:eb:8f:02:c5:6a:f6:9b:09:72:c2:e6:dd:47:99:
5c:0b:6b:7f:79:8e:06:03:06:3c:dc:81:2a:45:3f:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4920::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18044
Signature Algorithm: sha256WithRSAEncryption
14:6d:03:b5:1f:3e:71:a6:47:df:c1:60:a6:1a:ce:62:e6:5e:
08:a8:df:0c:42:7f:c9:59:37:d1:dd:1b:2e:a3:03:df:29:52:
27:8e:c2:e1:36:87:11:ed:7d:6c:64:cb:ec:0e:73:53:54:f7:
fe:8e:53:e9:97:4e:b4:4a:18:ca:1f:df:f7:0f:09:bc:eb:47:
42:16:07:fe:51:11:47:b4:ec:cf:e0:0d:98:4e:11:c1:1d:6f:
22:99:86:61:8a:5f:48:ac:d2:5e:71:cb:c9:4e:db:7c:b4:43:
38:72:9b:c7:30:71:13:0f:28:4f:37:7e:1c:8e:1d:ee:8e:82:
79:3f:b0:d4:e4:ff:91:4b:c9:ed:d0:e7:28:f3:69:52:88:a4:
87:d5:ea:27:e3:0c:96:2b:c0:10:4c:a4:82:ea:84:da:11:70:
2e:78:81:bf:29:e3:1c:11:2b:2a:80:68:76:76:04:55:a0:b5:
f3:92:3b:b2:99:bf:9a:36:61:84:fb:30:85:c8:18:b2:af:2b:
b7:ed:7b:7f:dd:7e:05:03:8c:9e:54:91:95:ba:cd:5c:49:b4:
86:d1:82:0a:58:29:96:d7:13:c1:0f:88:ae:c3:1f:01:57:38:
4e:dd:81:b4:1b:00:14:e9:4c:ea:78:ca:33:88:9d:a5:d3:88:
88:91:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:55 2026 by rpki-client