Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
File: 9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer (raw, json)
Hash identifier: yrVJILyzwH2/EiLcApSpWWBU/c0VuU3fUJTobAWU1yI=
Subject key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 0E531EE2342B0D22D24EA6274FC9484BA8AFBD4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
caRepository: rsync://rpkica.twnic.tw/rpki/PROFOND/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:56:01 +0000
Certificate not after: Mon 10 May 2027 16:01:01 +0000
Subordinate resources: AS: 4636
AS: 4747
AS: 7541
AS: 9921
AS: 9924
IP: 43.240.24.0/22
IP: 49.214.0.0 -- 49.219.255.255
IP: 60.198.0.0/15
IP: 61.30.0.0/15
IP: 61.57.0.0/19
IP: 103.224.132.0/22
IP: 124.8.0.0 -- 124.12.255.255
IP: 124.108.128.0/18
IP: 175.96.0.0/14
IP: 202.132.0.0/16
IP: 202.145.32.0 -- 202.145.255.255
IP: 203.65.160.0/19
IP: 203.77.0.0/17
IP: 203.105.224.0/19
IP: 203.211.0.0/19
IP: 210.17.0.0/17
IP: 210.62.0.0/18
IP: 210.62.192.0/19
IP: 210.63.128.0/18
IP: 210.67.144.0 -- 210.67.223.255
IP: 210.192.0.0/18
IP: 210.192.128.0/17
IP: 210.208.96.0/19
IP: 210.208.192.0/18
IP: 210.243.64.0/18
IP: 211.78.208.0/20
IP: 211.79.0.0/19
IP: 219.80.0.0/15
IP: 219.86.0.0/15
IP: 2001:c50::/32
IP: 2001:4540::/27
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:53:1e:e2:34:2b:0d:22:d2:4e:a6:27:4f:c9:48:4b:a8:af:bd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:56:01 2026 GMT
Not After : May 10 16:01:01 2027 GMT
Subject: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:74:a6:e7:fb:72:5b:d4:73:45:93:a3:3e:
9d:c8:aa:48:3d:04:52:1a:2c:07:48:15:7a:e4:81:
b0:eb:8d:e1:35:44:84:94:7b:cc:71:12:11:14:d6:
7f:f6:90:0c:13:d9:6a:b4:38:d1:df:3e:c1:ed:4c:
57:8c:25:6a:1c:25:a0:e6:06:94:49:e3:8c:8f:d1:
28:a4:79:05:1b:48:99:7f:b8:d5:f4:93:8d:83:7e:
c9:ba:36:7f:ae:95:e5:4f:0e:4b:c1:f7:0f:9c:3c:
67:19:49:ab:83:20:4e:ea:28:26:9d:a5:26:04:1f:
b0:99:65:ef:a8:0b:c2:aa:9e:94:3f:79:7e:8d:25:
6d:94:c3:ba:7c:42:68:d5:3e:82:ed:5d:69:19:80:
b3:e3:e3:3e:88:55:86:a2:74:46:bf:67:52:76:57:
f2:15:e2:34:f6:87:a0:7b:34:a3:f0:7f:a6:e9:ad:
97:20:9d:d8:a3:be:59:be:39:60:6b:d5:51:3a:cc:
95:b9:75:32:d1:13:08:5b:7b:f7:5a:45:d9:d5:b8:
16:f5:f1:fe:f0:9b:02:f9:7b:6e:a4:ab:94:79:ff:
f0:34:43:9e:54:b1:92:0b:80:f8:b9:b7:69:41:07:
4d:cb:25:79:5e:91:48:48:fe:e0:fc:fb:12:fe:da:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.24.0/22
49.214.0.0-49.219.255.255
60.198.0.0/15
61.30.0.0/15
61.57.0.0/19
103.224.132.0/22
124.8.0.0-124.12.255.255
124.108.128.0/18
175.96.0.0/14
202.132.0.0/16
202.145.32.0-202.145.255.255
203.65.160.0/19
203.77.0.0/17
203.105.224.0/19
203.211.0.0/19
210.17.0.0/17
210.62.0.0/18
210.62.192.0/19
210.63.128.0/18
210.67.144.0-210.67.223.255
210.192.0.0/18
210.192.128.0/17
210.208.96.0/19
210.208.192.0/18
210.243.64.0/18
211.78.208.0/20
211.79.0.0/19
219.80.0.0/15
219.86.0.0/15
IPv6:
2001:c50::/32
2001:4540::/27
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4636
4747
7541
9921
9924
Signature Algorithm: sha256WithRSAEncryption
08:5e:39:e4:e2:af:81:9e:8b:cd:57:b6:cc:9f:0e:80:0b:9b:
e0:b8:40:65:1e:e1:29:de:af:b5:f6:1e:db:6e:c4:9e:e2:a2:
da:32:9a:7a:f7:11:86:eb:44:d1:0c:3f:cc:86:2b:75:7e:e0:
fa:be:e1:dc:5a:d1:94:fc:21:68:56:59:2a:98:02:a6:f2:f1:
55:2c:c7:b1:a7:c8:85:91:13:68:35:5c:a1:fe:af:68:56:45:
80:a1:30:8c:0d:a1:61:bb:af:95:53:09:80:8b:3b:b5:b7:94:
d5:8b:7f:dd:d6:1e:1e:f1:8b:a8:47:2b:4a:d7:76:6d:1f:6f:
9b:7a:fa:fd:5d:9a:9b:d9:36:52:b8:84:e0:ba:34:0d:48:d2:
d2:d2:a4:c8:c3:3c:0d:57:16:52:f2:4e:18:70:04:3b:eb:5a:
08:44:5a:7f:b7:52:3a:30:03:68:bc:86:b0:49:a8:10:1d:fa:
5f:80:e0:87:a6:14:d1:ed:b3:db:78:f7:79:19:bf:56:04:16:
64:a4:16:f4:40:7d:10:4c:20:9c:8f:35:69:c8:f7:70:3d:f5:
e7:e4:84:c6:86:c8:f5:40:df:a2:a6:41:b7:d9:0b:1a:4e:c5:
94:1f:c2:fd:03:90:94:01:5a:5c:d2:dd:eb:c4:ec:0f:89:af:
1e:0d:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:29 2026 by rpki-client