Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
File:                     8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer (raw, json)
Hash identifier:          GETlNNYnQz26Qnwnao2LrcnOcZC2nkHXNGnsmUwdJNc=
Subject key identifier:   8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       719D3994D1A2AC2AE31A08997AE67C3AFD91414B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:43:30 +0000
Certificate not after:    Mon 10 May 2027 15:48:30 +0000
Subordinate resources:    IP: 163.128.172.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9d:39:94:d1:a2:ac:2a:e3:1a:08:99:7a:e6:7c:3a:fd:91:41:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:43:30 2026 GMT
            Not After : May 10 15:48:30 2027 GMT
        Subject: CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d0:88:ef:61:4e:1e:03:dd:0d:5a:a6:c5:f4:
                    c4:bc:07:dc:02:44:1b:03:73:64:c1:c0:4e:fa:ab:
                    e3:9c:65:41:38:42:57:22:99:7b:4e:f5:fb:76:26:
                    f3:37:7b:f8:00:ea:56:2a:98:f4:af:a5:96:5f:07:
                    d8:76:29:59:6e:52:d8:c1:3c:5d:a3:c8:7f:9c:2b:
                    1a:8d:e4:ab:0a:92:64:14:bc:0a:d5:2b:44:43:ec:
                    13:e0:8e:96:d1:ab:1e:e9:a4:58:30:d9:c7:31:52:
                    81:6b:90:bc:a1:f0:ef:99:59:c2:29:0b:26:69:c5:
                    77:4d:99:07:30:a4:86:0f:ac:b1:bd:f6:a0:44:dc:
                    cb:0e:30:1e:a4:8e:25:c5:eb:02:ab:26:13:32:f7:
                    b2:31:c8:62:5d:58:18:7b:9e:1f:17:c2:f3:e3:04:
                    33:17:32:8e:ec:a6:d0:d3:ff:9f:cb:bb:1c:02:3c:
                    f9:ff:b3:9e:fa:93:7a:9f:03:df:20:fc:37:d3:c8:
                    e5:ff:d7:7f:b9:bd:6a:2e:ca:fe:75:12:24:e7:2f:
                    54:f9:43:2e:b9:76:bd:c6:fa:49:92:96:95:b4:86:
                    d2:e4:c9:93:53:18:3f:be:2f:8f:9a:3f:12:18:1d:
                    9c:c6:9e:ca:09:92:f6:6a:3b:51:3e:1d:b9:a6:5c:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:11:65:0f:9a:f5:d1:c2:ec:81:9a:09:60:ca:73:fa:a0:01:
         7a:c4:1a:f8:a2:4c:09:7f:49:17:ea:bd:13:77:d7:3f:db:d4:
         a9:ef:05:af:e2:ef:d5:a9:ad:3d:39:42:9a:3b:42:13:80:cb:
         b0:94:d4:5c:10:74:59:8f:24:64:a7:a1:5e:ac:8d:74:27:dd:
         ed:09:80:7b:56:f6:45:a4:4b:03:9f:5b:6d:ef:9c:32:28:08:
         83:b8:02:4b:e6:6d:42:64:1a:61:bd:60:b9:f9:97:34:0c:74:
         ef:2c:a1:7b:ef:f2:ba:f0:c9:5c:27:93:d3:ca:83:df:73:a3:
         46:d3:ca:4b:75:6f:c4:95:a7:b4:78:e1:5e:57:18:7a:10:9b:
         da:41:3b:cb:e6:b8:8b:29:c1:28:cd:11:d3:20:e3:97:5f:a3:
         61:0d:3d:f8:ef:03:7f:a5:28:9c:6e:2d:05:c1:8e:8c:72:21:
         51:39:f4:b8:20:8b:82:c8:f9:34:b7:3a:c2:68:f6:fa:34:ee:
         e3:7b:d7:0b:78:bf:26:40:3d:a2:3d:1f:57:21:25:74:f8:b3:
         3a:b0:b9:e6:88:37:88:e0:37:00:30:e0:a8:e9:ee:7c:7b:06:
         79:63:da:72:90:59:5b:0d:97:39:33:4a:83:34:e4:62:a7:47:
         76:3a:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:00 2026 by rpki-client