Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer
File: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer (raw, json)
Hash identifier: KyseNhCwEpdHtfh0W6KkVyADAgZM59oLFvAVY0GWE7Q=
Subject key identifier: 85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 2C7F95E686D29B129FE0C44BE924502BCC2AEA60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft
caRepository: rsync://rpkica.twnic.tw/rpki/PIINET/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:55:51 +0000
Certificate not after: Mon 10 May 2027 16:00:51 +0000
Subordinate resources: AS: 17710
IP: 61.57.224.0/20
IP: 103.234.80.0/22
IP: 150.107.64.0/22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7f:95:e6:86:d2:9b:12:9f:e0:c4:4b:e9:24:50:2b:cc:2a:ea:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:55:51 2026 GMT
Not After : May 10 16:00:51 2027 GMT
Subject: CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:78:0a:58:f8:27:d8:24:e9:58:6e:24:b4:
94:96:08:02:2b:9b:90:f7:6f:81:37:b1:b3:f8:b4:
a7:0e:00:ec:2d:ef:74:8d:cf:e5:a8:94:10:45:fa:
db:b6:fa:68:21:30:93:b9:12:0f:0d:9a:c6:56:96:
f0:a8:23:fb:50:3e:0d:59:cb:46:3a:db:d0:37:2c:
7f:2e:d0:54:07:cf:59:f2:8c:92:b1:47:ba:f8:c0:
c2:07:a8:fd:ea:2b:8d:7f:9e:80:12:14:3e:c0:a3:
e1:b7:1e:86:4f:10:cc:ce:26:e5:a7:52:b2:6a:0d:
42:8b:14:64:fb:dc:36:b9:27:a1:09:4a:d9:a3:c4:
8c:bb:a2:44:18:b3:8a:9d:2c:92:26:3e:c2:77:a4:
01:a3:d5:47:6e:7d:ec:b2:d9:3c:28:15:62:96:48:
ca:00:e8:f1:8f:e0:7a:8a:b2:8b:d7:18:dc:0c:d0:
3b:a8:63:28:6f:22:83:ff:e8:94:a1:d4:34:e6:34:
a8:4a:79:b5:76:e5:d7:11:08:66:3b:eb:78:11:21:
fd:74:d7:fb:59:61:1a:f3:9c:2f:a4:a3:f5:46:96:
b7:40:93:be:be:97:1c:5a:fe:4c:29:a8:0a:c5:88:
04:e5:2b:b7:84:d2:43:ea:c9:c3:99:29:1b:8a:a5:
cc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.57.224.0/20
103.234.80.0/22
150.107.64.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17710
Signature Algorithm: sha256WithRSAEncryption
0e:0a:14:47:25:31:da:41:ec:0a:17:1a:0a:ca:e1:ad:30:ff:
0a:dc:19:81:d4:9c:c4:c1:05:bb:4e:3b:a4:bd:2b:1c:8a:ea:
7c:08:48:9a:61:e4:8b:ec:a7:8c:7b:7a:01:06:7b:83:5c:f0:
65:83:7b:8e:fe:1a:f0:2a:ba:d7:c8:7c:56:43:60:de:8c:16:
f9:01:7a:24:c1:db:b8:5c:b8:4f:84:5c:0a:75:da:c0:3a:2c:
dd:c9:b6:52:70:72:4e:57:60:f7:78:1d:16:52:d2:20:9b:81:
d3:62:18:29:b1:4e:49:3c:ec:4e:9b:09:0d:42:bf:21:75:d3:
aa:86:55:77:be:30:16:bc:55:ae:e8:87:44:15:26:8c:83:4f:
bf:ea:0d:de:a0:6b:a3:92:1a:41:34:5d:d6:7d:4a:a4:70:8a:
07:a4:e3:94:c0:8e:24:dc:b3:71:29:95:9d:1b:b0:03:b0:75:
60:16:95:eb:be:ad:59:34:dd:1d:3e:1b:38:c0:12:2d:8d:2c:
14:f0:58:92:27:88:c4:10:72:71:12:4d:df:24:35:51:7f:51:
3f:e8:d8:5b:28:26:4f:9b:c4:1c:45:0f:8f:38:15:2d:21:95:
32:ef:8a:5e:1d:b1:1d:f3:34:04:75:82:0c:be:9c:ae:81:b3:
f5:d6:00:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 12 22:32:38 2026 by rpki-client