Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
File: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer (raw, json)
Hash identifier: iz1f0MRzA91pKoVss1u8Pl+OX7AB2zi8EvGRPZS/W5E=
Subject key identifier: 71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 60804ACE22D8CB2DF26228E5AECB2836C924A6F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
caRepository: rsync://rpkica.twnic.tw/rpki/JGZ/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:47:17 +0000
Certificate not after: Mon 10 May 2027 15:52:17 +0000
Subordinate resources: AS: 150760
IP: 180.94.30.0/23
IP: 2401:5220::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:80:4a:ce:22:d8:cb:2d:f2:62:28:e5:ae:cb:28:36:c9:24:a6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:47:17 2026 GMT
Not After : May 10 15:52:17 2027 GMT
Subject: CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:0e:b0:38:80:29:df:52:15:18:97:de:dd:
eb:ac:67:92:3a:f6:80:50:07:79:a9:eb:a2:36:fc:
fa:fc:41:cf:1c:04:e0:71:a1:a2:0e:9d:ad:ba:24:
8e:91:04:f6:cb:0a:0e:0b:41:9f:e6:cf:0e:83:d1:
1f:66:0d:79:76:9a:82:9a:11:b0:a2:3b:c4:6c:f3:
c4:7c:54:c8:df:0f:6d:0e:44:49:17:31:45:bc:0f:
6f:e3:c0:de:9c:7a:8c:76:2c:fc:a3:03:23:a0:da:
d1:be:1c:5e:56:d6:e4:09:c2:ec:61:f9:34:89:c7:
f9:2b:80:d6:17:a8:d7:24:ea:b6:2b:53:a2:92:52:
55:6f:29:11:7b:61:1d:8a:1e:f7:fc:13:3c:7b:4b:
10:8a:a0:7f:8b:cc:27:45:d2:61:17:85:45:b1:c7:
8c:0e:41:0d:18:94:45:31:9a:53:3b:3d:24:b2:37:
6b:00:d7:7c:e1:51:4b:d2:65:32:51:92:15:27:66:
05:cf:6d:2b:b5:33:f7:2f:80:1b:a5:4a:ee:a6:55:
cb:56:1e:62:a0:60:37:f4:ef:cf:2e:3a:a4:55:43:
06:f7:5f:40:b2:3a:91:46:56:b0:89:7f:59:02:fe:
64:90:88:76:3d:cf:7d:ac:a2:9e:59:b2:cd:57:ba:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.94.30.0/23
IPv6:
2401:5220::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150760
Signature Algorithm: sha256WithRSAEncryption
55:3f:53:be:ac:45:cf:87:bb:e2:37:d8:fd:0e:33:63:32:86:
8a:47:51:1e:14:97:e4:e9:a1:82:8b:49:33:ae:0c:5b:fb:28:
7e:59:09:11:3c:d5:2c:0c:b9:0e:86:f1:c2:cf:d4:f5:dd:ca:
55:de:90:ca:7e:b9:48:4c:83:06:f3:03:5f:b3:1e:01:91:de:
38:a9:e4:0c:38:ea:fe:06:5b:8d:54:91:ee:d5:51:0f:11:83:
63:1f:81:28:85:14:f6:f5:8f:91:d7:c4:be:80:23:38:32:5a:
f6:a0:ac:57:35:2d:78:f5:5a:28:64:3a:44:97:25:2a:2d:cc:
1e:12:ab:fb:3a:c1:b3:8f:59:c6:31:27:0a:30:d2:d4:1e:cc:
19:8d:4d:f2:4b:ba:6f:cd:76:7b:31:b1:97:2b:10:39:75:de:
59:5c:a9:53:af:5c:1b:f7:4b:9b:b0:f6:c4:e1:3f:1f:2b:04:
60:43:4e:71:e2:57:3c:0f:2d:5e:6e:4f:e0:07:ce:54:9b:31:
a4:f6:28:24:31:67:f4:74:f5:9b:78:63:65:ca:f1:c2:c9:47:
a7:8b:5b:00:a4:82:97:1c:ee:32:06:10:08:94:42:37:6e:10:
79:78:3a:4e:ce:2b:6e:4a:2a:f5:7b:6f:74:5d:8e:91:af:6a:
a6:5c:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:16 2026 by rpki-client