Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer
File: 97D4884F986D543782ED0796247DD5237461E32E.cer (raw, json)
Hash identifier: bK8prT2jn155aX5VFjyBpjNQFBlqFvQYPI7sVYhfLEU=
Subject key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 043AB8F2554A237CA4C4BCA2C464063E10AED613
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft
caRepository: rsync://rpkica.twnic.tw/rpki/NCREE/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:48:59 +0000
Certificate not after: Mon 10 May 2027 15:53:59 +0000
Subordinate resources: AS: 18183
IP: 103.189.132.0/23
IP: 202.5.12.0/22
IP: 2400:85a0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:3a:b8:f2:55:4a:23:7c:a4:c4:bc:a2:c4:64:06:3e:10:ae:d6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:48:59 2026 GMT
Not After : May 10 15:53:59 2027 GMT
Subject: CN=97D4884F986D543782ED0796247DD5237461E32E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:30:90:ba:88:ce:1a:6e:06:48:8b:e9:bd:
20:22:c9:ca:52:e2:98:40:ee:df:4f:82:5b:4c:13:
a3:45:5b:ee:26:2e:ca:28:1b:58:94:bf:d5:43:b6:
96:11:fd:f6:b5:07:69:27:9f:3f:c9:3a:92:a1:e4:
b1:1b:35:a4:90:5a:6f:f1:0f:65:25:0f:6f:0c:5e:
c6:2a:46:c9:4f:af:f1:d0:ae:a4:b6:31:f5:c8:e7:
f3:28:f0:96:49:f8:62:3d:e3:fe:0a:36:c8:6a:a8:
2f:52:e6:1b:0c:61:54:f0:9c:15:cd:94:38:78:38:
f7:4c:a4:d3:a8:a8:11:32:65:3b:34:c2:d7:98:c9:
28:57:0d:91:fa:8c:a2:96:19:b7:0d:3a:4c:33:c4:
2e:e5:e7:48:ea:ef:f3:8b:ca:35:89:f4:58:85:04:
72:61:ae:3a:c1:93:7d:ca:7c:1f:c2:8f:4e:ec:1b:
3e:b2:c4:ea:d7:3b:de:5d:cf:72:7d:63:93:cf:de:
6e:da:f4:b6:bd:13:54:b1:9e:f8:cc:e7:80:13:14:
dd:ba:20:c7:18:75:6d:1d:8b:22:88:fe:12:47:48:
47:eb:e5:ba:f4:2a:40:1d:20:4d:c6:98:e7:0d:1a:
fe:a2:3d:aa:eb:31:06:b2:9c:bc:c0:81:bc:68:d3:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.132.0/23
202.5.12.0/22
IPv6:
2400:85a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18183
Signature Algorithm: sha256WithRSAEncryption
4d:f6:d4:b7:54:27:35:f5:63:33:37:f2:34:fb:30:da:52:41:
bc:83:d1:02:6f:f6:06:fd:8b:97:46:7c:96:ad:ca:d5:32:1b:
83:ff:0b:2f:35:fc:8d:1b:96:d0:5f:9d:a4:82:67:aa:d4:5e:
85:48:c2:11:db:d7:28:1a:52:b3:45:00:91:4f:30:28:97:4a:
47:6e:56:a1:52:2e:99:89:b0:1c:1c:a7:8f:57:a7:fc:cb:56:
d3:79:ea:b9:af:cb:df:2a:c0:ea:b3:89:ee:ff:05:f6:d6:71:
a2:06:28:39:5e:55:61:9b:28:8e:57:81:61:a3:e5:eb:c4:1c:
99:08:aa:fe:f0:76:6d:96:07:c8:49:e6:26:b4:6e:04:07:1d:
52:e3:f0:8b:e9:1a:cc:7d:22:69:aa:d3:4c:d6:c6:98:5c:c8:
fa:d2:4c:56:6b:41:94:2e:ac:d6:d8:53:67:c8:cd:3e:f9:8c:
ab:b3:5b:c1:6f:d0:28:b7:43:c2:13:ce:22:fc:03:eb:18:7c:
eb:56:c5:7c:cf:19:bf:42:cc:06:f4:8f:71:3b:d5:0b:94:eb:
b9:db:51:42:33:bb:12:17:d3:60:0e:db:08:97:87:4d:f5:c5:
fa:1e:1e:a3:88:1d:00:bc:f3:1a:59:63:f4:38:f7:78:26:6a:
9f:59:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:52 2026 by rpki-client