Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
File:                     7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer (raw, json)
Hash identifier:          yPQ7Qa9EzoB6WsyBjKXOXEIOTBgKUn/zksh4FanQETw=
Subject key identifier:   7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       4E286D0AEF58E8FB01FB23B0C714835FC7ECFBC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:49:20 +0000
Certificate not after:    Mon 10 May 2027 15:54:20 +0000
Subordinate resources:    AS: 63898
                          AS: 131664 -- 131665
                          IP: 103.144.32.0/23
                          IP: 103.158.78.0/23
                          IP: 2406:b4c0::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:28:6d:0a:ef:58:e8:fb:01:fb:23:b0:c7:14:83:5f:c7:ec:fb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:49:20 2026 GMT
            Not After : May 10 15:54:20 2027 GMT
        Subject: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:21:5f:a9:1b:74:9b:ce:4f:db:dd:fd:01:
                    f2:b8:ee:0d:25:bc:f4:77:41:5e:6d:c9:76:08:40:
                    59:82:b8:ee:1a:96:61:5d:01:d6:c0:4d:fe:7b:4f:
                    9b:e2:cc:6c:73:58:47:17:73:52:fc:ef:84:48:18:
                    61:41:46:74:98:87:5d:6d:fd:08:5d:ec:07:8d:09:
                    53:11:fe:11:0b:c6:67:fb:b6:c2:c7:75:63:fa:c5:
                    cb:bf:4f:46:e5:4e:3a:c0:ac:a8:62:84:5d:8e:4c:
                    b3:f1:5a:47:a9:3c:57:4d:ae:f0:14:7c:a5:08:5b:
                    a7:65:5c:f1:ef:f6:7b:53:b9:2a:ae:c1:03:ae:49:
                    04:8c:8c:22:02:1f:11:12:9d:1e:2d:15:87:be:25:
                    20:36:a8:3d:9e:a2:46:ce:d5:b7:c0:46:0c:d5:2f:
                    b6:bd:ed:25:ad:ff:f2:f7:0c:f3:58:39:6f:a2:9d:
                    a1:c6:a0:ff:b7:3c:fc:66:fb:45:6c:74:2b:99:bb:
                    7a:73:0b:d9:2e:a7:6f:30:68:87:94:78:ec:f7:54:
                    ac:2a:a3:25:65:4b:5f:44:a2:e9:27:20:c4:b5:e1:
                    80:db:68:b4:d4:1f:c4:83:1e:21:61:2b:62:e6:16:
                    35:cd:ca:99:5a:ca:b2:a8:a2:3f:4f:64:e9:b5:11:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.32.0/23
                  103.158.78.0/23
                IPv6:
                  2406:b4c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63898
                  131664-131665

    Signature Algorithm: sha256WithRSAEncryption
         7f:72:43:2d:d2:3c:ee:e3:5d:4a:03:5f:82:f4:dd:0b:a2:89:
         7e:32:1e:ba:b6:d7:bd:f0:9c:6c:29:28:01:d6:d9:da:a7:23:
         b4:06:66:73:7f:60:4b:23:43:a2:06:6a:08:7e:8a:60:b4:53:
         98:22:03:c0:6b:2e:34:73:6f:1d:e8:ea:82:da:fe:60:4b:56:
         ad:d5:0e:a2:7c:11:80:04:4d:f2:ab:0e:43:62:fb:ef:44:2c:
         2b:4b:4e:eb:cb:8a:e4:c8:4f:16:4e:9a:3e:6e:09:3e:57:31:
         e0:5f:ed:64:b6:f6:90:e0:6c:b8:20:8b:ac:50:bc:e2:01:bc:
         ea:08:10:60:d1:62:d3:6b:76:c2:7b:76:8b:da:f0:54:c0:a7:
         ca:45:40:cf:bf:2d:10:91:5f:cc:4e:9c:9b:e0:21:d1:11:03:
         f0:46:0f:14:2f:93:44:c9:e5:68:b1:3b:9d:ae:96:73:3b:26:
         06:88:ee:50:15:d0:31:2f:41:96:64:98:3c:1f:fb:f0:93:a9:
         29:08:14:97:af:81:69:bc:f2:ac:eb:0a:cb:36:3d:7d:21:3b:
         bb:6b:58:12:64:12:54:db:19:20:3e:be:82:e6:25:59:ff:6a:
         9b:4a:f2:59:4a:3c:90:33:cb:98:27:90:67:c6:9b:19:3f:b4:
         6d:ea:9c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:34 2026 by rpki-client