Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/86C9B32B2F0D03205B10CE19A4BE619361355AEF.cer
File: 86C9B32B2F0D03205B10CE19A4BE619361355AEF.cer (raw, json)
Hash identifier: p2H7Tfmx0Wzi0FA5Xz6Ua9pXa2T9dfkshIIRlfnxsw0=
Subject key identifier: 86:C9:B3:2B:2F:0D:03:20:5B:10:CE:19:A4:BE:61:93:61:35:5A:EF
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 5EB75E39FDF66333AFE896598527AF74572DAD16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TAICOM/0/86C9B32B2F0D03205B10CE19A4BE619361355AEF.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TAICOM/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:57:22 +0000
Certificate not after: Mon 10 May 2027 16:02:22 +0000
Subordinate resources: AS: 63896
IP: 103.186.142.0/23
IP: 202.5.8.0/23
IP: 2400:71a0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b7:5e:39:fd:f6:63:33:af:e8:96:59:85:27:af:74:57:2d:ad:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:57:22 2026 GMT
Not After : May 10 16:02:22 2027 GMT
Subject: CN=86C9B32B2F0D03205B10CE19A4BE619361355AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:2f:11:84:0b:12:8b:31:74:4f:57:c1:2f:
59:d2:44:11:4c:72:25:12:51:a1:fc:82:25:dc:7d:
8a:4d:8e:67:73:77:21:55:51:ea:cd:b8:3c:78:40:
e2:41:6f:0c:df:69:8d:c7:56:a7:30:6f:9c:4f:db:
d3:81:c4:dd:fa:59:91:d5:56:e4:61:8d:5a:a4:b6:
eb:c5:c0:df:75:b5:ae:bc:da:99:57:ff:19:6f:a2:
82:c1:a1:c7:2c:06:8d:f8:01:9e:ee:3a:80:1e:80:
72:30:3b:65:27:3f:d0:f5:4e:23:46:92:f8:60:48:
92:2c:4d:73:95:da:2b:51:ce:f2:9a:fe:10:dd:c9:
ef:88:80:19:ed:11:80:a0:fc:42:1e:10:38:54:4d:
42:57:26:62:03:74:44:e5:c2:9c:cc:47:21:db:24:
b4:af:46:5d:0c:99:0d:a5:35:fa:cc:72:23:a7:9c:
50:39:34:af:8d:1b:88:bb:b0:af:b3:b8:9b:ab:27:
fc:10:b7:ad:14:16:f7:4a:1e:0e:8e:c8:7e:53:f3:
f6:49:29:9e:54:73:9a:3e:99:61:63:4c:56:77:d4:
76:0f:36:e0:10:07:9b:33:c8:ab:56:88:94:32:98:
07:f6:9f:40:ce:12:f3:9d:8c:d7:c9:eb:51:35:ae:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
86:C9:B3:2B:2F:0D:03:20:5B:10:CE:19:A4:BE:61:93:61:35:5A:EF
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TAICOM/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TAICOM/0/86C9B32B2F0D03205B10CE19A4BE619361355AEF.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.142.0/23
202.5.8.0/23
IPv6:
2400:71a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63896
Signature Algorithm: sha256WithRSAEncryption
2b:48:e4:f2:32:cd:72:86:5a:2a:fb:cd:28:42:bd:42:ec:ea:
58:66:5f:9f:8b:c3:58:9b:44:47:5c:16:56:1f:09:d4:83:6f:
ed:4b:a2:96:c7:af:08:e6:21:cf:fd:ba:24:3b:ed:d6:5c:68:
ff:46:66:21:42:b3:a4:77:b1:ea:1e:a7:29:e4:9d:7d:f2:63:
a5:e3:b8:12:8f:e9:12:46:9a:e7:df:fc:38:41:f9:79:92:d3:
59:07:12:99:75:63:e4:11:2b:ea:04:a2:f8:45:40:25:10:e1:
c2:61:65:36:da:63:7e:c8:5d:53:80:d3:06:43:15:ac:7a:7b:
b9:2a:a4:45:7d:bb:89:6f:34:d3:90:bb:3c:a6:6d:a2:46:ca:
41:bb:5d:cc:de:f4:80:bf:7b:2a:b6:5c:7b:bf:56:e6:a1:4c:
dc:f8:9e:e5:7d:40:12:ef:9d:84:95:fe:62:8e:63:10:45:72:
df:86:2b:5a:3b:d3:3d:da:af:d4:c8:82:6e:82:1e:4b:79:ff:
d2:e6:3c:1d:01:f4:66:9f:e9:b6:b0:fd:68:bc:45:37:b4:f2:
28:ad:7f:d5:4c:83:b2:11:43:ef:ab:ad:fc:4b:3a:34:8a:03:
1f:0d:c6:d0:c0:f6:6e:28:ec:77:f8:a8:24:db:94:45:6e:fa:
26:3a:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:48 2026 by rpki-client