
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
File: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer (raw, json)
Hash identifier: 7etDOSuMFZqaOxr4+b8YY4YyO+Momu5pEj4OaWyIcDI=
Subject key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 3AE1DB8498BAF6BBDDFB3EA224F7F6079421C55D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
caRepository: rsync://rpkica.twnic.tw/rpki/ASNET/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:42:59 +0000
Certificate not after: Mon 10 May 2027 15:47:59 +0000
Subordinate resources: AS: 24167
IP: 103.130.252.0/22
IP: 117.103.96.0/20
IP: 202.140.160.0/19
IP: 202.169.160.0/20
IP: 2001:c08::/32
IP: 2400:4500::/32
IP: 2403:c240::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e1:db:84:98:ba:f6:bb:dd:fb:3e:a2:24:f7:f6:07:94:21:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:42:59 2026 GMT
Not After : May 10 15:47:59 2027 GMT
Subject: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:23:d3:f6:09:4d:5a:50:b1:25:38:e8:53:
e2:8b:54:ed:6f:4c:49:44:47:25:fa:87:4b:c5:a4:
32:e2:59:87:9f:ef:06:f4:9d:8a:91:76:79:1b:4b:
31:18:e0:84:fa:01:22:d9:f3:0d:f8:4b:2f:2d:4e:
94:fd:34:c6:ac:7e:29:84:57:ea:30:e4:19:8b:71:
32:56:93:31:86:5c:8a:44:50:62:e4:ca:17:a1:00:
d3:bd:cd:72:3e:f3:36:e7:8b:19:41:0a:eb:7f:d3:
fc:22:f1:8a:e2:eb:23:50:4b:de:f6:29:dc:b6:fe:
bd:01:57:b4:da:dd:da:7c:b7:5e:02:20:28:91:5a:
c2:e0:f6:36:9d:6d:c3:72:e8:a5:d2:29:c9:01:21:
54:54:0c:b0:92:0e:51:c5:e8:8e:ce:54:72:c0:41:
4e:0d:2e:49:32:da:9b:ce:a9:ce:58:7f:61:c4:0a:
07:9c:84:63:68:b5:5f:83:af:df:94:b1:b5:61:b0:
3b:ea:d8:78:12:bf:e4:b7:4b:72:a7:fa:df:d0:70:
38:2f:b9:ed:00:83:c2:c8:76:5e:86:63:72:85:a9:
db:22:08:74:0a:cc:61:ff:51:a4:33:11:c3:82:5a:
ce:30:e2:07:62:50:fe:6e:b9:56:d3:2f:1f:88:a9:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.252.0/22
117.103.96.0/20
202.140.160.0/19
202.169.160.0/20
IPv6:
2001:c08::/32
2400:4500::/32
2403:c240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24167
Signature Algorithm: sha256WithRSAEncryption
55:d0:5b:ed:19:12:6c:16:cb:5c:b5:b0:fa:9a:32:16:89:35:
4c:44:8d:3c:7d:a5:d1:9f:f5:8c:46:23:49:73:c5:92:b2:2e:
f8:a6:67:ba:9e:92:81:a3:0c:5a:26:5e:89:3a:53:ff:16:cd:
93:07:f4:3b:b1:ff:df:50:87:c5:cc:b4:bd:3c:49:60:76:1b:
79:f3:2a:cf:c4:2d:74:49:3c:eb:8d:69:ef:71:11:86:2a:14:
84:ec:c2:e2:5f:fa:e6:9e:c9:d4:25:ca:ae:c3:f2:5a:e7:3f:
22:5d:97:ce:91:a8:9e:e1:19:af:79:31:ca:88:26:64:71:a4:
fb:fe:5e:59:76:71:6f:c1:f8:94:ba:07:84:50:68:dc:07:42:
d7:dc:e9:c2:53:47:58:16:50:db:27:89:29:a8:5c:43:78:2d:
eb:76:f8:d2:6c:50:6e:71:c9:c2:98:68:10:10:1e:7e:16:23:
d4:17:71:4b:44:da:f6:0a:84:68:0c:76:b5:51:4d:09:4c:27:
ef:70:cd:e0:ed:dc:6b:f0:c3:d6:c2:34:7f:33:c6:d2:fc:52:
00:11:de:38:19:bd:31:21:ad:b8:d3:e1:94:e0:7c:f9:88:d6:
76:10:8c:c0:d7:29:85:61:80:fe:95:7f:39:86:33:a1:1d:43:
80:19:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:30 2026 by rpki-client