
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer
File: 6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer (raw, json)
Hash identifier: yU/rsIhAw9/OPWTa1b1J86Ehl1jhmgdq7ysp1Fifadw=
Subject key identifier: 62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 1275E8EA47A188743DF857AAC63BEDDBD1D23FEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
caRepository: rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 16:01:14 +0000
Certificate not after: Mon 10 May 2027 16:06:14 +0000
Subordinate resources: IP: 163.227.172.0/23
IP: 2402:4a0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:75:e8:ea:47:a1:88:74:3d:f8:57:aa:c6:3b:ed:db:d1:d2:3f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 16:01:14 2026 GMT
Not After : May 10 16:06:14 2027 GMT
Subject: CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:3e:d3:17:c1:9c:40:92:b3:15:72:9f:90:
ad:a3:3f:60:cd:25:90:a2:10:bf:07:1c:c3:7b:8a:
98:ed:6b:c4:64:84:95:6d:86:68:aa:0e:3c:95:70:
bc:f0:48:4a:94:22:74:79:4d:5d:cf:22:f1:d3:bc:
2f:b0:6e:1b:d7:6e:71:15:ae:39:b8:83:f8:92:04:
de:0d:59:66:9f:74:3b:2e:bc:ba:4d:a7:f9:3f:00:
56:d6:26:e3:d7:c4:de:60:e4:3d:ae:7c:e3:c8:4c:
99:f3:9d:58:8a:dc:43:7b:2b:90:8d:de:ca:68:07:
88:a8:af:56:c5:55:79:b6:69:65:3e:f8:07:50:16:
64:02:50:c4:17:5f:f3:ab:3e:12:72:67:12:64:f9:
2a:52:d8:c8:16:a6:7c:ec:55:35:04:e6:3f:4b:6b:
1d:b0:91:a7:36:7a:e1:69:cb:a1:25:4a:60:a5:17:
19:fc:c4:29:21:b7:4f:79:4a:87:3d:26:0d:f4:38:
ec:c5:2c:53:28:ad:b2:3b:c2:1d:e5:38:78:b7:d7:
e0:59:8d:2d:d3:ee:2e:15:dc:8c:e5:1c:7c:0c:b5:
dc:3b:e7:ae:ad:19:20:06:51:18:b3:11:bc:2e:2b:
2f:2b:6b:60:fd:32:25:83:ce:78:66:b2:ae:35:04:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.227.172.0/23
IPv6:
2402:4a0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:dd:f4:94:aa:12:1f:50:88:30:f4:a8:ae:64:d8:07:93:76:
ba:a0:f0:25:50:28:5d:92:f6:87:67:c9:2f:54:7e:34:9d:f7:
b9:6c:16:5a:d8:09:d4:25:7c:7e:b6:ce:27:1b:73:b8:cb:05:
16:f3:14:e0:d8:a3:82:f6:60:ca:7e:06:fd:e2:c7:0a:81:ec:
31:fe:e3:bf:05:ac:fd:bf:9f:25:2b:2b:db:a3:80:6f:ee:1f:
e1:bd:de:96:21:6a:d3:b1:7a:af:42:d6:1c:2f:80:bc:e4:1a:
e8:f4:0e:11:cb:99:91:03:78:ff:a4:94:ca:a9:a4:da:06:22:
9c:e0:57:c6:2c:31:fa:ee:bf:34:8d:b7:47:78:4d:c2:52:13:
13:27:3b:93:03:ce:27:73:ba:5e:31:dc:2e:e0:6d:27:5f:2e:
64:5d:04:6e:37:78:57:78:56:67:7b:3f:86:2a:3d:b8:4f:de:
36:01:d7:bf:83:51:3b:48:18:83:89:1c:82:6f:78:ae:18:5a:
e6:47:8d:ac:41:10:41:f4:ef:75:15:60:be:ac:64:7d:4a:41:
81:51:0b:de:67:51:65:9e:a2:cf:b9:15:ab:f8:e0:42:b3:67:
26:5d:cc:76:3e:00:ce:63:66:9e:67:31:99:2a:de:7c:e1:97:
f2:30:d0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:21 2026 by rpki-client