Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer
File:                     B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer (raw, json)
Hash identifier:          Iy9qV2Zdn1yrfkucNC+nPeTnMreIshM9Yfn8dG3VUNU=
Subject key identifier:   B9:40:1D:6D:32:61:C0:0D:EC:A3:36:18:EC:F6:D9:D8:CE:AA:41:B7
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       6F7993CCDBB63B32E8ADE89027BA64F5D1B48AB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:55:58 +0000
Certificate not after:    Mon 10 May 2027 16:00:58 +0000
Subordinate resources:    AS: 152622
                          IP: 163.61.60.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:79:93:cc:db:b6:3b:32:e8:ad:e8:90:27:ba:64:f5:d1:b4:8a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:55:58 2026 GMT
            Not After : May 10 16:00:58 2027 GMT
        Subject: CN=B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:ed:f4:4d:16:25:56:a2:63:05:ed:fd:2a:
                    5c:fa:e8:ed:b6:27:b3:fa:50:e8:a8:fb:df:1b:fb:
                    43:2d:bc:65:ff:26:5e:64:e0:ad:68:eb:95:29:b1:
                    cd:38:d5:19:ca:36:7e:8a:aa:1b:19:a7:d9:c7:92:
                    e6:85:70:5a:70:ba:15:c4:ca:fd:7a:f9:71:19:d7:
                    9b:a4:5e:f3:08:c0:47:b2:85:96:83:fc:69:cf:7a:
                    99:50:6d:b3:94:fb:7f:55:f6:8b:60:78:ff:f3:ab:
                    72:03:dd:11:94:07:24:33:4e:61:8d:7e:ae:d8:d7:
                    88:a8:d4:7a:60:79:9c:f0:a3:fe:e2:81:f6:aa:25:
                    a4:09:13:98:34:bc:31:20:f7:9d:81:f2:4b:92:b4:
                    5c:0d:9d:ab:cb:15:33:3a:cc:41:3c:1e:0f:cc:3c:
                    c4:f6:37:46:29:66:15:77:0f:b0:24:e5:22:81:ec:
                    9f:7c:1e:39:b3:71:52:b7:3c:b5:20:9e:06:09:f1:
                    4e:67:2b:11:74:eb:a7:59:f5:e2:d7:97:27:70:0e:
                    cf:fe:9c:db:af:ef:40:61:33:84:f1:d3:53:e3:76:
                    46:33:6e:b1:ea:2a:7f:c2:3f:7b:6a:d6:b2:b7:a2:
                    e5:f3:7a:ed:82:f3:86:20:6b:c2:b1:2c:cf:21:86:
                    4f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:40:1D:6D:32:61:C0:0D:EC:A3:36:18:EC:F6:D9:D8:CE:AA:41:B7
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.60.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152622

    Signature Algorithm: sha256WithRSAEncryption
         7e:0c:a6:ce:60:bc:a4:2e:53:79:0b:2b:79:97:75:d7:58:02:
         27:25:ef:a3:da:1b:7a:ab:da:32:14:db:b2:08:2f:70:c1:51:
         6e:c6:f0:19:2e:22:95:6a:29:1f:ca:d4:f9:36:70:20:78:2b:
         0b:68:35:4e:ac:e4:59:35:78:d6:5f:70:b3:00:63:14:87:82:
         46:b6:a4:04:9f:19:91:b3:d8:d2:8b:9a:d5:22:f4:87:8b:1b:
         16:c3:39:3d:50:43:7f:ae:c5:bf:e2:fe:72:4e:86:1e:d2:ed:
         c8:24:12:e1:82:7f:3e:84:23:7b:c8:2c:8b:89:ed:77:fc:7b:
         d7:8a:ac:da:f3:22:88:8a:71:ed:2f:70:49:59:46:10:3d:a2:
         95:70:0f:37:db:b6:e5:78:54:a5:31:64:4e:5a:19:22:41:07:
         d1:83:72:eb:82:88:ad:10:13:98:54:56:d3:04:b9:50:5d:20:
         d4:a7:c0:e2:20:aa:dd:5a:f7:e7:c3:9f:16:53:68:92:d6:2e:
         8e:8d:64:44:25:8c:a9:3e:f6:da:58:a6:63:07:bf:98:20:03:
         be:0c:de:ea:e7:e2:33:07:10:dd:74:ce:84:04:e3:2d:76:1b:
         e7:4f:0b:c0:ef:f1:84:47:3e:47:b0:55:ed:63:6e:50:45:0d:
         bb:57:6f:48
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIUb3mTzNu2OzLoreiQJ7pk9dG0irUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTU1OFoX
DTI3MDUxMDE2MDA1OFowMzExMC8GA1UEAxMoQjk0MDFENkQzMjYxQzAwREVDQTMz
NjE4RUNGNkQ5RDhDRUFBNDFCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIO7fRNFiVWomMF7f0qXPro7bYns/pQ6Kj73xv7Qy28Zf8mXmTgrWjrlSmx
zTjVGco2foqqGxmn2ceS5oVwWnC6FcTK/Xr5cRnXm6Re8wjAR7KFloP8ac96mVBt
s5T7f1X2i2B4//OrcgPdEZQHJDNOYY1+rtjXiKjUemB5nPCj/uKB9qolpAkTmDS8
MSD3nYHyS5K0XA2dq8sVMzrMQTweD8w8xPY3RilmFXcPsCTlIoHsn3weObNxUrc8
tSCeBgnxTmcrEXTrp1n14teXJ3AOz/6c26/vQGEzhPHTU+N2RjNuseoqf8I/e2rW
srei5fN67YLzhiBrwrEszyGGT1cCAwEAAaOCAoowggKGMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLlAHW0yYcAN7KM2GOz22djOqkG3MB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr
BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QT1dFUkhPVVNF
LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BP
V0VSSE9VU0UvMC9COTQwMUQ2RDMyNjFDMDBERUNBMzM2MThFQ0Y2RDlEOENFQUE0
MUI3Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoz08MBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwJULjANBgkqhkiG9w0BAQsFAAOCAQEAfgymzmC8pC5TeQsreZd111gCJyXv
o9obeqvaMhTbsggvcMFRbsbwGS4ilWopH8rU+TZwIHgrC2g1TqzkWTV41l9wswBj
FIeCRrakBJ8ZkbPY0oua1SL0h4sbFsM5PVBDf67Fv+L+ck6GHtLtyCQS4YJ/PoQj
e8gsi4ntd/x714qs2vMiiIpx7S9wSVlGED2ilXAPN9u25XhUpTFkTloZIkEH0YNy
64KIrRATmFRW0wS5UF0g1KfA4iCq3Vr358OfFlNoktYujo1kRCWMqT722limYwe/
mCADvgze6ufiMwcQ3XTOhATjLXYb508LwO/xhEc+R7BV7WNuUEUNu1dvSA==
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:55 2026 by rpki-client