Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
File: 5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer (raw, json)
Hash identifier: dVL0cUSSNQ1zeSnR4iFR+nGxitvF4GD3/FR+VsUvwsY=
Subject key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 32F7EE8EA34BED45B31E564D8CA0462EE2FABA15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
caRepository: rsync://rpkica.twnic.tw/rpki/HONGDA/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:46:37 +0000
Certificate not after: Mon 10 May 2027 15:51:37 +0000
Subordinate resources: AS: 17418
AS: 131657
IP: 103.122.188.0/22
IP: 103.153.176.0/23
IP: 223.26.2.0/23
IP: 2406:48c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f7:ee:8e:a3:4b:ed:45:b3:1e:56:4d:8c:a0:46:2e:e2:fa:ba:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:46:37 2026 GMT
Not After : May 10 15:51:37 2027 GMT
Subject: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:02:b2:d1:66:1b:c1:3d:60:27:e1:ba:bd:
3c:c3:60:d6:22:c2:39:69:42:1c:29:75:ab:7f:07:
80:ce:50:8e:bc:ae:4d:44:51:aa:46:16:ec:0b:4d:
ea:54:b9:07:c8:de:97:0c:62:fd:d0:94:33:76:dc:
66:9f:86:f1:b6:83:cc:18:ce:36:c6:8d:c9:d5:42:
a6:f4:ac:54:0e:12:9e:b7:13:7d:b4:f9:f7:89:93:
33:9d:e6:4b:b3:ef:e3:c5:aa:d2:a0:8c:5b:82:6d:
f6:0c:5c:29:e6:3d:ed:25:3b:af:e5:d6:86:a2:c0:
3f:90:97:fb:36:68:ea:73:02:fa:a7:8e:52:97:82:
40:1f:07:e5:66:ea:b2:33:90:7b:69:82:06:89:0e:
1c:46:15:57:37:d1:b6:ac:dd:57:e3:7d:8c:ca:56:
5d:48:42:ea:b8:bb:a1:85:8d:7a:4f:f3:b2:27:42:
18:58:a3:6c:2b:4e:d4:7d:e7:e0:12:28:82:d5:fc:
4f:fb:84:98:40:fe:31:60:a2:1a:3b:6e:c3:e1:17:
06:7b:56:da:46:ac:e4:7e:a6:a2:15:b2:e5:07:ff:
27:fc:eb:1d:48:f9:a9:75:93:45:89:19:72:d1:4f:
f4:14:93:2e:e8:68:fa:bb:2c:8f:4a:b3:f4:f7:ca:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.188.0/22
103.153.176.0/23
223.26.2.0/23
IPv6:
2406:48c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17418
131657
Signature Algorithm: sha256WithRSAEncryption
13:52:55:4c:eb:db:5c:84:13:1b:b8:a6:37:54:59:09:02:89:
a0:78:ef:77:fe:b8:24:74:84:08:86:f3:07:89:72:fc:8b:62:
dd:fb:26:ee:36:39:83:9e:d1:36:a8:b2:2c:a5:75:9d:1e:fc:
9d:c6:41:41:83:10:3a:dc:6a:72:e2:ae:d6:6e:a4:00:82:af:
7e:33:87:f3:7a:29:8d:e9:bb:2d:d5:93:f1:dd:3e:eb:1b:7b:
ca:76:cb:fa:24:e1:5a:64:ea:9e:b5:6c:3c:97:ef:54:6f:07:
dd:b3:16:fa:c2:f2:41:59:1c:21:d9:68:b0:5b:03:1d:9b:d1:
78:29:e8:15:8f:19:4f:03:2d:45:bc:16:2a:b3:0c:ef:59:34:
36:ae:66:98:fd:f1:9f:a6:9d:44:75:00:f7:5e:8c:1f:18:8d:
47:25:1c:89:ed:a1:cb:7c:41:44:95:ad:19:d4:4a:dc:46:ad:
9c:b7:fd:18:1d:fa:21:f4:07:54:df:8d:10:1e:c9:dd:7d:e0:
0f:91:f5:01:a4:af:f5:f0:4d:43:8f:2e:69:19:6f:79:5b:bb:
e1:3b:e9:50:b3:e1:95:25:2d:ae:b8:62:e1:e5:ac:27:b5:0f:
93:7a:88:00:ab:25:7d:07:78:a2:85:60:23:ae:fe:05:9b:4d:
84:1d:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:45:07 2026 by rpki-client