
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.cer
File: 6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.cer (raw, json)
Hash identifier: 3v12WGgOHt7xRr0YOGZtadCLZsugua6PS5Oj+GXiCHE=
Subject key identifier: 6B:95:C6:B7:D1:D7:23:82:DF:E9:5F:9E:71:54:79:7A:4E:1F:F0:5D
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 70FECCDFD455D7536EB7C26F06287ED29E44F4B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.mft
caRepository: rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 16:00:22 +0000
Certificate not after: Mon 10 May 2027 16:05:22 +0000
Subordinate resources: IP: 103.131.112.0/22
IP: 2403:c940::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fe:cc:df:d4:55:d7:53:6e:b7:c2:6f:06:28:7e:d2:9e:44:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 16:00:22 2026 GMT
Not After : May 10 16:05:22 2027 GMT
Subject: CN=6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:49:3a:b4:ab:d2:02:b7:32:8a:a5:88:73:
10:f6:b1:62:b5:cd:a9:87:58:2f:af:c3:ec:36:81:
f5:95:5b:6a:79:ee:af:76:a1:64:48:c7:14:9e:9f:
5b:cf:99:e5:cf:54:4e:ac:db:28:42:2d:d7:88:dd:
82:aa:59:e6:a7:3e:88:c1:d0:22:24:66:b8:56:46:
74:5f:5e:d3:28:b4:5b:f0:25:98:0f:9e:5f:dc:79:
3e:84:64:98:92:8e:83:e1:22:a3:67:22:08:57:c4:
82:b6:69:4c:58:81:99:a1:ca:0c:cc:00:8b:61:90:
7b:92:fc:dc:0c:fd:95:7d:6a:52:54:2d:cc:c7:59:
2c:64:6a:9b:a3:d7:5a:2b:a4:89:db:4b:81:30:ae:
87:14:f6:26:6c:4f:4c:87:9a:95:b0:0d:c2:d5:ef:
e6:3b:83:3c:02:ea:0f:71:d4:32:39:dd:42:d0:61:
cb:f1:c3:1f:ee:d7:2d:b1:8c:16:3a:e6:53:a5:66:
98:fa:3b:96:af:d0:25:6c:7e:0c:8d:e9:a4:96:27:
b0:76:a7:81:37:ca:aa:2f:0d:7a:1a:49:d0:ee:b0:
96:e2:64:9e:d6:1b:b7:7f:7f:18:65:98:e6:ca:e3:
79:f2:33:89:b4:ae:7a:21:50:aa:74:e5:36:a5:4b:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6B:95:C6:B7:D1:D7:23:82:DF:E9:5F:9E:71:54:79:7A:4E:1F:F0:5D
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.112.0/22
IPv6:
2403:c940::/32
Signature Algorithm: sha256WithRSAEncryption
43:ff:fa:d3:9c:4c:29:55:61:2a:8a:c6:84:d3:31:c8:b7:a8:
c6:cd:38:0a:44:79:2a:72:b5:ad:33:89:8f:ad:77:e6:11:60:
02:46:7f:d0:12:1c:81:80:e8:2f:70:d5:6b:c7:a2:75:92:6d:
dc:a0:a7:34:33:5c:8f:bc:5c:5c:76:fc:ae:bc:e7:51:6c:e5:
7d:a2:a3:9c:b3:25:08:54:b4:05:95:21:63:a9:84:1e:3b:b9:
e5:16:ae:f7:8d:61:e7:e7:bb:3f:c4:a5:78:31:fe:12:0f:79:
8f:bf:0f:bf:1d:0a:6e:a6:59:3c:a8:64:31:6c:f7:f9:2d:87:
87:3d:ff:6f:d2:3f:21:2d:c6:4e:ec:21:66:75:b9:dd:fa:58:
f4:98:34:51:ec:a0:80:30:d8:0e:7a:93:ee:48:be:4f:b1:dd:
0f:f3:5b:6c:a8:fa:48:04:8f:b2:88:b9:a4:c3:2c:9b:1a:89:
84:b5:d5:1f:da:af:6d:4a:2e:0b:25:61:ab:10:ab:e3:8f:76:
a7:b6:ab:e0:c9:45:e3:3b:9d:c3:88:c6:31:4f:8a:17:b6:79:
47:5c:78:2a:a7:fd:d7:c7:01:21:4a:85:02:e1:0d:55:73:bb:
cc:f9:26:cc:b4:22:ff:22:65:3c:b2:93:c6:93:35:9c:0c:bd:
07:af:55:48
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUcP7M39RV11Nut8JvBih+0p5E9LMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDAyMloX
DTI3MDUxMDE2MDUyMlowMzExMC8GA1UEAxMoNkI5NUM2QjdEMUQ3MjM4MkRGRTk1
RjlFNzE1NDc5N0E0RTFGRjA1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMRWSTq0q9ICtzKKpYhzEPaxYrXNqYdYL6/D7DaB9ZVbannur3ahZEjHFJ6f
W8+Z5c9UTqzbKEIt14jdgqpZ5qc+iMHQIiRmuFZGdF9e0yi0W/AlmA+eX9x5PoRk
mJKOg+Eio2ciCFfEgrZpTFiBmaHKDMwAi2GQe5L83Az9lX1qUlQtzMdZLGRqm6PX
WiukidtLgTCuhxT2JmxPTIealbANwtXv5juDPALqD3HUMjndQtBhy/HDH+7XLbGM
FjrmU6VmmPo7lq/QJWx+DI3ppJYnsHangTfKqi8NehpJ0O6wluJkntYbt39/GGWY
5srjefIzibSueiFQqnTlNqVLNK8CAwEAAaOCAn0wggJ5MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGuVxrfR1yOC3+lfnnFUeXpOH/BdMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr
BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9VTklURURTT0ZU
LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1VO
SVRFRFNPRlQvMC82Qjk1QzZCN0QxRDcyMzgyREZFOTVGOUU3MTU0Nzk3QTRFMUZG
MDVELm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG
AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ4NwMA0EAgACMAcDBQAkA8lAMA0GCSqG
SIb3DQEBCwUAA4IBAQBD//rTnEwpVWEqisaE0zHIt6jGzTgKRHkqcrWtM4mPrXfm
EWACRn/QEhyBgOgvcNVrx6J1km3coKc0M1yPvFxcdvyuvOdRbOV9oqOcsyUIVLQF
lSFjqYQeO7nlFq73jWHn57s/xKV4Mf4SD3mPvw+/HQpuplk8qGQxbPf5LYeHPf9v
0j8hLcZO7CFmdbnd+lj0mDRR7KCAMNgOepPuSL5Psd0P81tsqPpIBI+yiLmkwyyb
GomEtdUf2q9tSi4LJWGrEKvjj3antqvgyUXjO53DiMYxT4oXtnlHXHgqp/3XxwEh
SoUC4Q1Vc7vM+SbMtCL/ImU8spPGkzWcDL0Hr1VI
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:29 2026 by rpki-client