
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/B78BFB38008F80E2D6A83B3E1E6A721341534AA1.cer
File: B78BFB38008F80E2D6A83B3E1E6A721341534AA1.cer (raw, json)
Hash identifier: 3fxXLO7Qoa6QnNBIfy4zjaVD7iM38Y/wOh2iQe2swRs=
Subject key identifier: B7:8B:FB:38:00:8F:80:E2:D6:A8:3B:3E:1E:6A:72:13:41:53:4A:A1
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 031BC3D951D4636692874FEC217657AD14C68322
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/LINEPAYTW/0/B78BFB38008F80E2D6A83B3E1E6A721341534AA1.mft
caRepository: rsync://rpkica.twnic.tw/rpki/LINEPAYTW/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:47:54 +0000
Certificate not after: Mon 10 May 2027 15:52:54 +0000
Subordinate resources: AS: 152620
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:1b:c3:d9:51:d4:63:66:92:87:4f:ec:21:76:57:ad:14:c6:83:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:47:54 2026 GMT
Not After : May 10 15:52:54 2027 GMT
Subject: CN=B78BFB38008F80E2D6A83B3E1E6A721341534AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:05:da:a4:fe:14:85:76:fe:f4:d1:d6:c9:f8:
a6:df:78:1b:fb:e6:fa:cf:f2:bd:ff:44:b3:66:e7:
a0:fa:7e:21:51:83:0b:25:b3:8f:47:34:93:0a:18:
9b:50:f1:bb:7e:58:7d:7f:ce:72:05:94:ef:a3:92:
cb:7c:ca:d1:9e:36:f4:6c:39:f2:11:5b:1f:ca:cb:
8c:0d:02:0c:3a:36:ec:5d:fc:03:24:ea:75:ca:c1:
67:3f:f2:2d:59:7e:7b:bd:a2:1d:4e:6a:8d:d2:b2:
d4:88:4c:ae:26:d0:78:a3:ac:9e:68:17:4c:af:4e:
f4:8f:d1:59:2b:43:32:00:10:52:a8:9e:7c:58:2c:
9a:ac:75:63:ca:72:c9:b0:92:3e:79:8a:cf:5b:ff:
fd:e7:d0:77:60:33:da:20:e6:76:f6:60:bf:ba:8b:
26:2e:ae:51:6c:b2:d9:98:5e:51:53:5c:23:18:08:
ee:92:29:f7:31:d3:42:e3:0d:2a:57:3c:6d:17:8d:
05:b8:86:fc:88:51:75:63:64:a7:1e:70:57:03:cc:
91:b1:3a:a6:e9:a2:1a:67:de:70:11:76:ad:4c:9d:
c4:0c:9f:20:99:9a:d6:3c:ee:7a:63:56:98:1f:25:
2d:21:a1:65:47:c1:8f:00:b8:6c:c8:e2:bb:09:4d:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B7:8B:FB:38:00:8F:80:E2:D6:A8:3B:3E:1E:6A:72:13:41:53:4A:A1
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LINEPAYTW/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LINEPAYTW/0/B78BFB38008F80E2D6A83B3E1E6A721341534AA1.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152620
Signature Algorithm: sha256WithRSAEncryption
28:c2:21:5d:fe:8a:f9:38:d7:21:20:5e:7f:34:3b:06:fe:1a:
c4:26:94:cd:80:99:d5:b3:0f:94:0b:90:a7:db:d8:64:81:e9:
21:dc:80:ae:aa:a9:b7:ce:4d:45:57:6c:c1:9e:70:0e:6a:97:
d1:6b:f5:4e:98:f3:fb:9c:9b:3e:f2:ef:05:cc:cb:92:88:d7:
8c:d5:5f:6c:71:bd:55:44:4a:17:24:98:d4:f9:5d:2f:46:ea:
38:80:70:61:c5:8c:96:c9:e7:d8:18:db:cc:d4:2e:2b:61:1d:
e0:39:c3:be:66:1d:4a:4c:ea:48:f2:f8:86:4e:dc:3c:28:46:
f0:cb:f9:f4:9c:21:57:f2:f3:65:06:98:a9:8c:37:d1:65:8b:
aa:bd:fd:8b:75:95:46:5f:fa:a8:db:12:c2:b1:ce:41:69:b0:
ce:65:f1:58:2c:b0:1d:63:9e:2f:a6:dc:3a:10:f6:83:94:76:
d0:05:9e:e2:55:15:c9:54:9d:0d:80:ed:30:63:9e:dc:61:fc:
80:ba:8b:f6:b5:0c:3e:6f:15:74:2d:f0:a6:ef:a9:94:18:c5:
3d:37:68:84:6f:85:37:74:24:f6:91:ad:51:e3:85:b8:46:a4:
f0:e1:69:ab:4c:ee:01:88:47:b4:10:72:0a:6c:16:a8:cb:85:
7b:2d:00:4e
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIUAxvD2VHUY2aSh0/sIXZXrRTGgyIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDc1NFoX
DTI3MDUxMDE1NTI1NFowMzExMC8GA1UEAxMoQjc4QkZCMzgwMDhGODBFMkQ2QTgz
QjNFMUU2QTcyMTM0MTUzNEFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIoF2qT+FIV2/vTR1sn4pt94G/vm+s/yvf9Es2bnoPp+IVGDCyWzj0c0kwoY
m1Dxu35YfX/OcgWU76OSy3zK0Z429Gw58hFbH8rLjA0CDDo27F38AyTqdcrBZz/y
LVl+e72iHU5qjdKy1IhMribQeKOsnmgXTK9O9I/RWStDMgAQUqiefFgsmqx1Y8py
ybCSPnmKz1v//efQd2Az2iDmdvZgv7qLJi6uUWyy2ZheUVNcIxgI7pIp9zHTQuMN
Klc8bReNBbiG/IhRdWNkpx5wVwPMkbE6pumiGmfecBF2rUydxAyfIJma1jzuemNW
mB8lLSGhZUfBjwC4bMjiuwlNOWUCAwEAAaOCAmcwggJjMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLeL+zgAj4Di1qg7Ph5qchNBU0qhMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr
BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSU5FUEFZVFcv
MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElO
RVBBWVRXLzAvQjc4QkZCMzgwMDhGODBFMkQ2QTgzQjNFMUU2QTcyMTM0MTUzNEFB
MS5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v
dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMCVCwwDQYJKoZIhvcNAQELBQADggEBACjCIV3+ivk4
1yEgXn80Owb+GsQmlM2AmdWzD5QLkKfb2GSB6SHcgK6qqbfOTUVXbMGecA5ql9Fr
9U6Y8/ucmz7y7wXMy5KI14zVX2xxvVVEShckmNT5XS9G6jiAcGHFjJbJ59gY28zU
LithHeA5w75mHUpM6kjy+IZO3DwoRvDL+fScIVfy82UGmKmMN9Fli6q9/Yt1lUZf
+qjbEsKxzkFpsM5l8VgssB1jni+m3DoQ9oOUdtAFnuJVFclUnQ2A7TBjntxh/IC6
i/a1DD5vFXQt8KbvqZQYxT03aIRvhTd0JPaRrVHjhbhGpPDhaatM7gGIR7QQcgps
FqjLhXstAE4=
-----END CERTIFICATE-----
Generated at Wed May 13 06:11:45 2026 by rpki-client