Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer (raw, json)
Hash identifier: 4V28VbHBrK7oNZm3DAyfKna9uzc4E+sMo9KT3fccRcs=
Subject key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 38AE45C30FC38C582B5A7992A2688724F669D8E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
caRepository: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:49:21 +0000
Certificate not after: Mon 10 May 2027 15:54:21 +0000
Subordinate resources: AS: 38851
IP: 43.227.24.0/22
IP: 103.46.188.0/22
IP: 103.131.172.0/22
IP: 2403:ce40::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ae:45:c3:0f:c3:8c:58:2b:5a:79:92:a2:68:87:24:f6:69:d8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:49:21 2026 GMT
Not After : May 10 15:54:21 2027 GMT
Subject: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:8e:ed:b0:ab:24:3d:4e:72:b8:77:c4:68:
d7:5d:7e:cc:ed:ea:55:f0:86:3d:6e:a7:a8:ed:e0:
15:21:d7:c9:d2:31:f2:34:65:a2:ee:6e:cd:bc:b3:
01:02:3b:92:88:20:79:4a:db:11:0c:7a:b1:69:ba:
4d:e0:3e:cb:81:cf:37:f6:61:33:05:49:dc:50:b8:
67:14:fb:d3:57:bf:ce:84:21:93:2c:c4:52:23:66:
51:af:09:f8:79:0c:cb:92:36:b1:bb:49:6a:20:16:
01:9a:c6:29:d5:ae:15:72:3a:10:04:ea:2e:aa:1d:
58:fd:61:d0:fd:41:71:f2:03:2f:79:ef:6e:ea:91:
c7:e5:84:1b:73:9e:18:6f:3d:3a:2e:cb:87:b8:1f:
a6:4e:01:7a:83:ac:c6:08:2e:dc:89:4d:b7:e4:49:
ae:70:2c:fa:5b:6c:52:08:0f:ab:72:7c:77:b6:25:
d1:70:5b:bc:66:1c:54:c6:c5:59:99:7d:59:e9:a0:
4c:6e:13:20:63:40:f4:68:fe:0d:80:75:f3:32:21:
d2:af:18:6f:0d:6b:57:51:fe:d0:b6:36:d3:70:e1:
7c:d5:64:a7:72:37:dc:2d:d3:e7:b1:aa:0f:7d:83:
60:58:c3:55:3c:e1:63:ae:2e:74:69:74:6a:24:ef:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.24.0/22
103.46.188.0/22
103.131.172.0/22
IPv6:
2403:ce40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38851
Signature Algorithm: sha256WithRSAEncryption
7f:1d:6e:57:07:6c:4c:56:57:7e:8d:2a:b1:52:3c:55:88:21:
4a:26:c5:26:b3:d6:70:a8:2d:f2:e4:df:2f:d3:22:ea:10:81:
86:89:b2:79:6f:79:92:4f:3d:01:2c:b1:77:3a:9b:41:04:16:
3a:9e:ab:a5:96:6f:41:1c:93:1e:54:7a:44:96:91:b8:8a:d7:
fc:05:ca:a8:ae:a4:6f:7d:a5:4c:36:11:06:ff:c8:0f:66:c0:
16:49:3e:e9:d6:b9:14:c9:bd:a1:a4:44:5e:34:1b:56:48:32:
04:ca:35:2a:50:33:9e:e1:c5:f2:97:16:0a:40:64:94:0a:18:
db:09:3f:50:e2:82:42:f2:de:59:c5:53:41:6d:65:2b:01:0d:
81:14:16:47:20:2b:4c:35:dc:d6:b3:b5:71:7c:30:f9:66:27:
5f:05:fd:1e:12:db:38:80:3e:95:f2:c4:08:ac:1f:20:55:80:
66:8a:14:83:8a:c1:f0:0d:dc:66:06:04:d5:43:69:3e:ea:58:
59:5f:06:bf:4e:03:3c:a0:08:ee:fb:4f:ca:5e:8c:a1:11:e3:
72:30:22:bf:11:9f:22:ea:b6:21:01:04:9c:e1:e6:95:76:49:
f4:7e:01:25:e1:88:2c:38:f9:0a:a9:d7:77:36:3a:69:55:7d:
1d:37:d9:53
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIUOK5Fww/DjFgrWnmSomiHJPZp2OUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDkyMVoX
DTI3MDUxMDE1NTQyMVowMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURE
NzVENEVEODgxNUUwOENEMjVBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM38ju2wqyQ9TnK4d8Ro111+zO3qVfCGPW6nqO3gFSHXydIx8jRlou5uzbyz
AQI7koggeUrbEQx6sWm6TeA+y4HPN/ZhMwVJ3FC4ZxT701e/zoQhkyzEUiNmUa8J
+HkMy5I2sbtJaiAWAZrGKdWuFXI6EATqLqodWP1h0P1BcfIDL3nvbuqRx+WEG3Oe
GG89Oi7Lh7gfpk4BeoOsxggu3IlNt+RJrnAs+ltsUggPq3J8d7Yl0XBbvGYcVMbF
WZl9WemgTG4TIGNA9Gj+DYB18zIh0q8Ybw1rV1H+0LY203DhfNVkp3I33C3T57Gq
D32DYFjDVTzhY64udGl0aiTvSNUCAwEAAaOCAp8wggKbMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLYhc14yQEb//B3XXU7YgV4IzSWuMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr
BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OVENDQVRWLzAv
MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NB
VFYvMC9CNjIxNzM1RTMyNDA0NkZGRkMxREQ3NUQ0RUQ4ODE1RTA4Q0QyNUFFLm1m
dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCK+MYAwQCZy68AwQCZ4OsMA0EAgACMAcDBQAkA85A
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCXwzANBgkqhkiG9w0BAQsFAAOCAQEA
fx1uVwdsTFZXfo0qsVI8VYghSibFJrPWcKgt8uTfL9Mi6hCBhomyeW95kk89ASyx
dzqbQQQWOp6rpZZvQRyTHlR6RJaRuIrX/AXKqK6kb32lTDYRBv/ID2bAFkk+6da5
FMm9oaREXjQbVkgyBMo1KlAznuHF8pcWCkBklAoY2wk/UOKCQvLeWcVTQW1lKwEN
gRQWRyArTDXc1rO1cXww+WYnXwX9HhLbOIA+lfLECKwfIFWAZooUg4rB8A3cZgYE
1UNpPupYWV8Gv04DPKAI7vtPyl6MoRHjcjAivxGfIuq2IQEEnOHmlXZJ9H4BJeGI
LDj5CqnXdzY6aVV9HTfZUw==
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:12 2026 by rpki-client