Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.cer
File: 7667D2C6587BAA9DDECBA87F630031641DB1CA0C.cer (raw, json)
Hash identifier: rOrkdOi0zUxwQsBydTpSGmN0zf90KsKL5ktgKnyD/00=
Subject key identifier: 76:67:D2:C6:58:7B:AA:9D:DE:CB:A8:7F:63:00:31:64:1D:B1:CA:0C
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 43B8B9EB5BF4B32F34C8E6B7D9CA8FEC4BBF5708
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft
caRepository: rsync://rpkica.twnic.tw/rpki/ASUS/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:43:04 +0000
Certificate not after: Mon 10 May 2027 15:48:04 +0000
Subordinate resources: AS: 131144
IP: 103.10.4.0/22
IP: 2402:2080::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b8:b9:eb:5b:f4:b3:2f:34:c8:e6:b7:d9:ca:8f:ec:4b:bf:57:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:43:04 2026 GMT
Not After : May 10 15:48:04 2027 GMT
Subject: CN=7667D2C6587BAA9DDECBA87F630031641DB1CA0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:a4:d9:7f:bd:90:07:70:cf:01:97:6b:11:
7a:43:21:96:fe:a2:0c:95:cd:e3:c2:f5:cd:8c:56:
26:5b:81:39:93:a8:f6:e2:ba:72:01:65:ea:54:81:
f4:08:69:98:16:aa:1a:65:8e:8a:c8:c9:f4:bb:f4:
f0:f3:b1:dd:b7:9f:a2:e3:b0:ce:b8:81:3b:a0:83:
fd:3b:9d:18:4c:b8:0c:36:a8:64:69:29:49:96:24:
ee:34:36:10:6e:05:60:dd:4a:21:4c:24:9d:4b:15:
3b:62:07:35:f1:cd:a5:4a:22:30:22:4f:7f:62:b7:
35:4b:c9:44:8c:27:dc:db:7a:d1:cf:14:e3:b9:85:
f3:29:36:09:6c:7e:65:6c:a1:b8:99:a4:ef:09:bb:
91:11:41:f5:74:f8:0c:bb:91:26:9a:f9:a4:d5:29:
05:fe:65:56:87:61:21:fd:b1:cb:58:3c:a5:45:ab:
30:2d:8e:39:da:09:6e:92:8d:41:9b:1d:52:63:82:
83:39:e6:e0:2a:0a:c0:19:8a:14:af:18:ce:f1:34:
40:ba:47:16:f7:08:b5:00:71:0e:d3:23:0a:43:d5:
8c:a7:ae:26:c6:e2:fe:eb:c5:ff:35:71:86:f4:7f:
fd:a0:29:e2:d5:09:c2:54:d4:f0:fa:29:c3:94:79:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
76:67:D2:C6:58:7B:AA:9D:DE:CB:A8:7F:63:00:31:64:1D:B1:CA:0C
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ASUS/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.4.0/22
IPv6:
2402:2080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131144
Signature Algorithm: sha256WithRSAEncryption
9c:cb:03:af:74:5c:8b:5e:9e:87:2c:b8:c2:1c:80:53:b5:40:
ef:20:56:f0:da:73:c3:20:a2:61:cc:61:60:87:c3:c0:06:98:
aa:e5:d9:11:93:28:e2:85:80:d0:64:e9:5e:88:de:65:c9:a2:
49:7a:a7:7c:25:5b:8f:06:04:1f:d6:09:63:64:46:81:e0:dc:
3a:10:c8:92:0f:cf:f1:43:e4:47:29:b1:c5:e7:7c:22:6d:42:
26:1a:dc:b5:dd:df:36:b4:fc:a4:55:a1:9b:60:83:11:2b:e2:
c1:9d:66:5a:4b:56:83:c6:be:13:c3:be:f8:d2:df:46:8b:db:
3d:1a:d5:86:61:88:e8:25:11:b3:a1:ad:23:db:4a:43:cd:69:
f9:fc:e8:8e:a5:d7:74:86:dd:90:aa:2d:65:3b:84:34:9a:94:
9b:b0:61:e5:2a:ad:24:0f:b3:3d:10:9d:3d:9e:3f:94:c2:30:
b8:19:f5:05:63:d4:f8:6a:18:ef:5a:00:a5:1e:d4:4b:61:c5:
1c:6f:9b:c3:29:4b:ee:d3:0b:22:99:da:34:37:46:f8:f7:08:
2c:f1:4e:77:19:2a:c2:d8:23:d3:9c:3c:f9:53:37:57:7f:54:
b9:c6:62:d4:68:8a:b8:39:e9:a9:24:14:ab:6b:4c:c1:1e:3c:
2e:b7:63:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 12 22:47:22 2026 by rpki-client