
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
File: 8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer (raw, json)
Hash identifier: GETlNNYnQz26Qnwnao2LrcnOcZC2nkHXNGnsmUwdJNc=
Subject key identifier: 8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 719D3994D1A2AC2AE31A08997AE67C3AFD91414B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
caRepository: rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:43:30 +0000
Certificate not after: Mon 10 May 2027 15:48:30 +0000
Subordinate resources: IP: 163.128.172.0/23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9d:39:94:d1:a2:ac:2a:e3:1a:08:99:7a:e6:7c:3a:fd:91:41:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:43:30 2026 GMT
Not After : May 10 15:48:30 2027 GMT
Subject: CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d0:88:ef:61:4e:1e:03:dd:0d:5a:a6:c5:f4:
c4:bc:07:dc:02:44:1b:03:73:64:c1:c0:4e:fa:ab:
e3:9c:65:41:38:42:57:22:99:7b:4e:f5:fb:76:26:
f3:37:7b:f8:00:ea:56:2a:98:f4:af:a5:96:5f:07:
d8:76:29:59:6e:52:d8:c1:3c:5d:a3:c8:7f:9c:2b:
1a:8d:e4:ab:0a:92:64:14:bc:0a:d5:2b:44:43:ec:
13:e0:8e:96:d1:ab:1e:e9:a4:58:30:d9:c7:31:52:
81:6b:90:bc:a1:f0:ef:99:59:c2:29:0b:26:69:c5:
77:4d:99:07:30:a4:86:0f:ac:b1:bd:f6:a0:44:dc:
cb:0e:30:1e:a4:8e:25:c5:eb:02:ab:26:13:32:f7:
b2:31:c8:62:5d:58:18:7b:9e:1f:17:c2:f3:e3:04:
33:17:32:8e:ec:a6:d0:d3:ff:9f:cb:bb:1c:02:3c:
f9:ff:b3:9e:fa:93:7a:9f:03:df:20:fc:37:d3:c8:
e5:ff:d7:7f:b9:bd:6a:2e:ca:fe:75:12:24:e7:2f:
54:f9:43:2e:b9:76:bd:c6:fa:49:92:96:95:b4:86:
d2:e4:c9:93:53:18:3f:be:2f:8f:9a:3f:12:18:1d:
9c:c6:9e:ca:09:92:f6:6a:3b:51:3e:1d:b9:a6:5c:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.172.0/23
Signature Algorithm: sha256WithRSAEncryption
86:11:65:0f:9a:f5:d1:c2:ec:81:9a:09:60:ca:73:fa:a0:01:
7a:c4:1a:f8:a2:4c:09:7f:49:17:ea:bd:13:77:d7:3f:db:d4:
a9:ef:05:af:e2:ef:d5:a9:ad:3d:39:42:9a:3b:42:13:80:cb:
b0:94:d4:5c:10:74:59:8f:24:64:a7:a1:5e:ac:8d:74:27:dd:
ed:09:80:7b:56:f6:45:a4:4b:03:9f:5b:6d:ef:9c:32:28:08:
83:b8:02:4b:e6:6d:42:64:1a:61:bd:60:b9:f9:97:34:0c:74:
ef:2c:a1:7b:ef:f2:ba:f0:c9:5c:27:93:d3:ca:83:df:73:a3:
46:d3:ca:4b:75:6f:c4:95:a7:b4:78:e1:5e:57:18:7a:10:9b:
da:41:3b:cb:e6:b8:8b:29:c1:28:cd:11:d3:20:e3:97:5f:a3:
61:0d:3d:f8:ef:03:7f:a5:28:9c:6e:2d:05:c1:8e:8c:72:21:
51:39:f4:b8:20:8b:82:c8:f9:34:b7:3a:c2:68:f6:fa:34:ee:
e3:7b:d7:0b:78:bf:26:40:3d:a2:3d:1f:57:21:25:74:f8:b3:
3a:b0:b9:e6:88:37:88:e0:37:00:30:e0:a8:e9:ee:7c:7b:06:
79:63:da:72:90:59:5b:0d:97:39:33:4a:83:34:e4:62:a7:47:
76:3a:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:00 2026 by rpki-client