Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
File: 91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer (raw, json)
Hash identifier: etOoThhR5vXrAyrihG8/YrCqBYGQ+nY1tLGOQETkFuU=
Subject key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 52AAC600B879934376EBDDFF354719EC094BD8DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft
caRepository: rsync://rpkica.twnic.tw/rpki/KBT/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 00:59:32 +0000
Certificate not after: Tue 11 May 2027 01:04:32 +0000
Subordinate resources: AS: 18042
IP: 58.86.0.0/16
IP: 61.63.0.0 -- 61.63.95.255
IP: 61.67.128.0/17
IP: 2400:df40::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:aa:c6:00:b8:79:93:43:76:eb:dd:ff:35:47:19:ec:09:4b:d8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 12 00:59:32 2026 GMT
Not After : May 11 01:04:32 2027 GMT
Subject: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:ab:3f:84:3e:fd:f3:b9:d6:eb:03:10:30:
69:8a:b4:ec:f5:ba:00:6f:27:33:9d:31:0f:2e:d6:
98:49:e0:99:4e:3a:2c:91:13:ef:37:66:c8:3a:45:
3c:a2:db:a8:62:44:47:a6:89:dd:43:34:d9:5d:f1:
03:86:f6:fd:a4:76:a0:6d:9b:5c:8f:72:b7:1e:eb:
25:b9:ca:3c:7d:73:6d:e8:ce:42:d2:89:70:c2:e6:
32:1e:90:13:00:0a:3e:4b:c5:fa:d3:42:aa:9a:17:
94:50:83:f7:46:c9:27:04:14:9b:45:f4:b2:32:e7:
1a:31:e2:a7:48:c4:0c:42:75:7e:c6:da:43:05:b7:
24:84:14:87:56:cb:5a:d3:6b:08:21:04:31:0c:ef:
c4:ea:a0:6b:1b:29:c5:1d:4e:f3:4a:55:d3:67:59:
50:25:ae:ed:55:62:5f:5d:b0:cb:2b:8f:42:d5:ac:
38:87:a7:82:88:e8:b3:98:8c:73:3a:df:e9:23:66:
7a:5a:86:c9:97:5f:a8:4c:ed:2c:b8:7f:e3:3a:cb:
b8:fd:84:f4:4f:b3:72:15:7a:cd:23:6a:bb:4b:6b:
6e:da:e6:0c:0f:5b:d8:9c:68:e6:af:51:c2:e9:51:
d0:e0:eb:cb:bd:1c:47:c7:45:dc:77:72:46:c9:56:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.86.0.0/16
61.63.0.0-61.63.95.255
61.67.128.0/17
IPv6:
2400:df40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18042
Signature Algorithm: sha256WithRSAEncryption
2b:77:bd:20:49:5c:59:6a:ea:93:0f:e4:d5:26:ca:87:ec:da:
9b:90:e2:66:4b:66:6c:a3:61:f6:ef:91:ee:9b:e5:7b:a6:e3:
be:df:c4:81:3c:e4:ec:08:f7:43:32:a7:b0:93:ea:33:4a:ba:
69:65:5b:97:bd:d2:82:65:d8:4d:04:b9:06:70:eb:31:ca:39:
46:e6:c6:37:6b:b0:80:d3:02:52:78:84:da:36:c1:b5:96:30:
91:09:46:d1:bf:7c:bc:73:b9:f8:a9:e6:a3:0b:18:03:b7:fb:
af:49:00:7c:f0:c3:3e:88:8d:79:03:08:f5:49:df:3a:51:72:
29:50:94:68:4f:72:7f:a1:71:3f:33:69:96:88:97:60:09:d4:
20:d3:62:b8:69:90:e2:1d:2e:e4:b4:90:a4:3c:87:39:66:8d:
db:77:10:ea:81:a5:e1:5d:df:95:5d:b7:88:1e:ae:d5:39:c5:
73:14:91:15:1b:f3:1e:12:e4:10:63:8d:2c:c5:da:fb:9a:e3:
4d:67:a4:1a:0b:eb:10:a2:2c:a6:a6:0c:aa:d5:24:91:43:e7:
c3:e5:5e:62:65:7f:f4:1d:08:29:aa:27:5a:e0:7b:fb:c4:7a:
79:ff:0f:67:c9:65:7d:60:27:6b:fc:ff:cc:f6:2f:52:13:82:
68:cd:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:25 2026 by rpki-client