
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer
File: 9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer (raw, json)
Hash identifier: AuHtVIiDu67oUHyMgLqKWjAiHvo0wAcPBLCOj3wHgzs=
Subject key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 65B681D0DE8304B69402E9C1DD019EE7535B571C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
caRepository: rsync://rpkica.twnic.tw/rpki/NSS/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:49:18 +0000
Certificate not after: Mon 10 May 2027 15:54:18 +0000
Subordinate resources: AS: 131626
IP: 103.118.24.0/22
IP: 2403:f3c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b6:81:d0:de:83:04:b6:94:02:e9:c1:dd:01:9e:e7:53:5b:57:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:49:18 2026 GMT
Not After : May 10 15:54:18 2027 GMT
Subject: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:3d:5b:67:47:e3:39:29:0f:68:e9:5c:c1:
b6:bf:9a:e8:b6:c9:ca:dc:d6:a6:e0:e6:f3:22:a3:
44:1f:00:3b:ed:7d:d1:fc:89:ae:25:94:cb:72:3c:
57:e7:3a:c9:92:e5:58:96:49:81:32:b7:e6:f8:a3:
b8:d6:a4:ee:a6:fe:ac:08:f6:25:34:6e:d1:b1:1b:
d0:c7:a0:56:10:86:99:7d:3d:2f:ae:41:ab:b2:db:
e9:82:89:63:1f:ed:e3:c5:2b:34:d7:56:ef:68:4d:
44:9f:50:d2:3b:69:54:e2:da:9b:20:b6:ac:fa:b5:
46:79:5a:02:64:65:5f:b2:69:58:7b:33:2b:e1:2c:
c1:f0:b1:eb:9f:07:6a:21:56:b8:52:88:6c:28:b2:
67:52:93:67:a2:4c:7d:44:7d:69:18:25:79:01:1c:
88:8b:ee:c1:ec:b2:cd:9b:f4:db:4d:21:3d:a5:78:
6d:61:f5:4c:d3:61:b0:a7:18:ff:f6:6b:56:0f:bc:
57:87:0c:45:fd:fe:a3:d1:5a:5a:68:b0:e4:a6:51:
0f:4f:88:74:44:60:ff:79:06:58:ba:2c:8f:0a:c1:
32:4c:a2:48:09:88:fc:ff:5b:90:2e:8e:9b:27:31:
eb:a9:b9:f1:b3:27:49:d2:09:15:33:e7:4b:bf:96:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.24.0/22
IPv6:
2403:f3c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131626
Signature Algorithm: sha256WithRSAEncryption
5b:34:60:cb:f1:4e:57:67:ec:09:a8:d8:f1:52:e4:8c:69:21:
a9:d4:c7:c5:22:2c:05:d7:8f:c6:c8:99:ca:5b:87:ef:db:ac:
c6:60:e4:bc:aa:94:04:f7:b2:b1:69:9d:8d:0d:c5:8f:ee:19:
7e:94:e3:71:c2:d7:3f:8b:96:a5:b6:ee:a7:1d:e2:e1:fe:2b:
6d:c4:51:6d:c0:11:05:e5:54:7f:cc:65:db:60:6c:89:1a:09:
e4:31:6c:1d:bc:f0:1a:36:96:89:c9:18:40:40:8e:ca:5f:70:
9f:ef:fe:7b:66:32:31:0c:74:74:91:a7:4d:7a:38:9f:6b:ee:
f4:c1:3f:f0:3e:bb:7b:fa:cb:54:12:1d:2b:83:2a:4f:39:55:
82:d6:54:93:c3:bc:0c:9b:d7:3e:39:57:1d:f7:40:f7:2d:41:
4b:62:f9:82:10:14:86:ed:60:6d:14:ce:e1:1d:51:69:f8:5c:
97:fa:70:f8:89:33:24:1e:a3:56:28:23:ad:13:56:60:55:50:
8d:04:12:28:27:48:e7:25:63:ab:49:fc:1c:ad:30:80:0d:9a:
b0:85:19:9d:c6:1c:36:e2:69:ff:65:ff:ff:01:3a:f3:04:58:
8c:38:0b:33:95:5c:5c:55:9e:1d:81:74:c7:52:78:df:28:4c:
17:65:5e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:24 2026 by rpki-client