Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
File: 61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer (raw, json)
Hash identifier: Dwk/gKzK8sng/btOQM1/RS2GNWBWnzXW1zagXe4cFYg=
Subject key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 52A19AD00B68F90307EA50E10EAA8F3A283A9B8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft
caRepository: rsync://rpkica.twnic.tw/rpki/SIGMA/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:56:43 +0000
Certificate not after: Mon 10 May 2027 16:01:43 +0000
Subordinate resources: AS: 18419
IP: 61.60.192.0/20
IP: 103.234.204.0/22
IP: 103.234.228.0/22
IP: 124.109.112.0/20
IP: 150.129.72.0/22
IP: 150.129.228.0/22
IP: 180.214.176.0/20
IP: 202.148.218.0/23
IP: 203.121.224.0/19
IP: 2402:2580::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a1:9a:d0:0b:68:f9:03:07:ea:50:e1:0e:aa:8f:3a:28:3a:9b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:56:43 2026 GMT
Not After : May 10 16:01:43 2027 GMT
Subject: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:c5:51:76:36:02:0a:fe:34:08:a4:4b:8e:
89:f1:fd:bf:55:5b:4e:d4:c7:66:e3:27:18:24:ae:
fc:21:b9:b7:c0:f0:66:81:1f:aa:95:e0:4e:2e:4f:
4c:3f:dd:4d:c7:3d:d1:61:14:a7:76:aa:cf:8b:e8:
c8:3d:5f:81:9e:e8:c6:38:00:47:b6:ed:93:3f:cc:
46:8b:e1:c9:40:ca:74:81:0f:a4:bb:c9:0e:e6:27:
f9:8e:30:12:e9:e8:29:03:8f:e7:ca:92:21:65:1a:
93:36:7f:2c:1b:4a:5b:92:9d:75:d7:a6:16:8b:5a:
e5:ec:7f:ed:33:8e:c6:50:d3:d5:d5:b3:50:4f:76:
0a:c3:a6:1b:fc:e0:77:11:66:85:e1:a4:3c:27:2d:
eb:88:65:60:41:1e:21:fb:5c:20:e0:c7:fe:0c:45:
22:1c:85:87:e8:2a:90:90:d9:86:05:c5:93:ef:a8:
ad:91:af:79:56:69:c8:27:f7:81:12:e1:54:78:1b:
90:14:36:d0:41:48:e2:be:14:54:19:3c:79:8c:66:
50:ac:89:c5:70:8e:22:92:fc:35:b1:cb:ed:14:73:
eb:f4:ce:29:12:bb:c7:63:0a:34:88:34:2b:33:1c:
e9:ac:e6:be:5f:ce:20:9f:ae:42:df:7e:aa:bc:45:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.60.192.0/20
103.234.204.0/22
103.234.228.0/22
124.109.112.0/20
150.129.72.0/22
150.129.228.0/22
180.214.176.0/20
202.148.218.0/23
203.121.224.0/19
IPv6:
2402:2580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18419
Signature Algorithm: sha256WithRSAEncryption
4e:c1:e1:e7:e6:66:1d:06:5f:d0:a2:79:15:18:d1:11:9f:03:
ab:44:28:b5:ba:d3:0c:8a:89:ae:60:60:4d:eb:16:0a:a7:e7:
97:20:3f:17:25:ad:51:4a:98:32:f6:a8:29:9b:3d:73:d8:0d:
d4:c4:6e:c6:e3:86:47:7b:a5:69:ec:dc:41:26:e5:72:d8:6d:
42:a8:db:9e:c1:a1:c9:56:1c:d4:df:65:91:84:e8:1c:4f:fb:
b7:b2:a6:a9:1b:7d:ea:e6:88:92:0c:ac:6e:c4:7b:62:c9:bb:
a5:a2:5d:38:36:f5:a5:52:10:39:22:23:88:61:13:8e:67:9c:
72:bb:9d:c5:9b:86:92:6a:6d:c9:c1:b4:3c:e8:a9:c2:1d:b4:
70:92:4f:e7:80:50:74:2c:e6:bc:b9:60:32:ca:4b:74:aa:0a:
7e:44:0c:f1:eb:68:46:0b:ae:0e:eb:c1:4d:5a:3f:c6:e1:df:
5a:a7:f2:8d:54:cd:0e:7f:02:f3:6a:2c:3c:0b:93:83:7c:91:
cd:eb:5d:91:1e:f7:51:db:ac:e6:85:66:22:3b:49:f2:7a:39:
62:6b:85:28:41:4d:ff:13:90:88:0f:31:6b:27:cd:22:93:23:
e0:c2:7d:cf:43:95:9a:21:e2:64:3e:20:e1:82:27:54:52:09:
d1:9f:a6:5f
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUUqGa0Ato+QMH6lDhDqqPOig6m4swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTY0M1oX
DTI3MDUxMDE2MDE0M1owMzExMC8GA1UEAxMoNjFCOTBGREVDQzFERUE3Mzc1MjI2
OEY5QTZEN0Y5RDlGOEY4NzkzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALxVxVF2NgIK/jQIpEuOifH9v1VbTtTHZuMnGCSu/CG5t8DwZoEfqpXgTi5P
TD/dTcc90WEUp3aqz4voyD1fgZ7oxjgAR7btkz/MRovhyUDKdIEPpLvJDuYn+Y4w
EunoKQOP58qSIWUakzZ/LBtKW5KdddemFota5ex/7TOOxlDT1dWzUE92CsOmG/zg
dxFmheGkPCct64hlYEEeIftcIODH/gxFIhyFh+gqkJDZhgXFk++orZGveVZpyCf3
gRLhVHgbkBQ20EFI4r4UVBk8eYxmUKyJxXCOIpL8NbHL7RRz6/TOKRK7x2MKNIg0
KzMc6azmvl/OIJ+uQt9+qrxFoc0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGG5D97MHepzdSJo+abX+dn4+Hk9MB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr
BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzBd
BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8w
LzYxQjkwRkRFQ0MxREVBNzM3NTIyNjhGOUE2RDdGOUQ5RjhGODc5M0QubWZ0MDcG
CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp
b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXgYIKwYBBQUHAQcBAf8E
TzBNMDwEAgABMDYDBAQ9PMADBAJn6swDBAJn6uQDBAR8bXADBAKWgUgDBAKWgeQD
BAS01rADBAHKlNoDBAXLeeAwDQQCAAIwBwMFACQCJYAwGQYIKwYBBQUHAQgBAf8E
CjAIoAYwBAICR/MwDQYJKoZIhvcNAQELBQADggEBAE7B4efmZh0GX9CieRUY0RGf
A6tEKLW60wyKia5gYE3rFgqn55cgPxclrVFKmDL2qCmbPXPYDdTEbsbjhkd7pWns
3EEm5XLYbUKo257BoclWHNTfZZGE6BxP+7eypqkbfermiJIMrG7Ee2LJu6WiXTg2
9aVSEDkiI4hhE45nnHK7ncWbhpJqbcnBtDzoqcIdtHCST+eAUHQs5ry5YDLKS3Sq
Cn5EDPHraEYLrg7rwU1aP8bh31qn8o1UzQ5/AvNqLDwLk4N8kc3rXZEe91HbrOaF
ZiI7SfJ6OWJrhShBTf8TkIgPMWsnzSKTI+DCfc9DlZoh4mQ+IOGCJ1RSCdGfpl8=
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:01 2026 by rpki-client