Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
File:                     BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer (raw, json)
Hash identifier:          NqPxQzAqK2xfy4Vcthz9H4WlebTLIiy4KZNDO4HkIXs=
Subject key identifier:   BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       77517E1EF8C2B435246D289F6808A437E02E27C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TINP/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Tue 12 May 2026 01:03:59 +0000
Certificate not after:    Tue 11 May 2027 01:08:59 +0000
Subordinate resources:    AS: 18049
                          IP: 27.100.64.0/18
                          IP: 49.213.128.0/17
                          IP: 58.99.0.0/17
                          IP: 61.58.128.0/19
                          IP: 61.60.224.0/20
                          IP: 61.67.16.0 -- 61.67.47.255
                          IP: 103.180.22.0/23
                          IP: 116.118.128.0/18
                          IP: 211.73.160.0/19
                          IP: 2403:5200::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:51:7e:1e:f8:c2:b4:35:24:6d:28:9f:68:08:a4:37:e0:2e:27:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 12 01:03:59 2026 GMT
            Not After : May 11 01:08:59 2027 GMT
        Subject: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:21:b8:47:1b:28:36:2f:b6:ed:ed:12:32:
                    fc:6c:6e:9d:99:c0:11:51:a1:d0:59:f8:08:53:23:
                    e8:bd:b9:67:fa:a2:99:e7:fa:c9:b0:7b:92:81:b8:
                    d0:45:e5:20:f7:8c:42:a8:1f:84:a8:e2:09:58:90:
                    e0:7f:3e:be:53:4d:25:e7:06:b5:0f:63:c4:71:2a:
                    4a:b5:d6:72:fe:c2:a2:dd:58:b7:1f:33:7a:f4:03:
                    74:95:77:aa:6e:b5:0f:7f:0f:c8:46:00:1d:9e:82:
                    e3:40:d8:34:79:e5:a5:6c:4a:21:51:26:e8:a8:58:
                    a9:8b:f0:79:52:a7:e2:6a:7b:04:5a:32:ad:84:c6:
                    0e:ad:36:95:25:9b:e2:17:67:a8:48:78:a1:c0:c7:
                    99:04:38:2d:9f:08:02:67:33:97:ab:94:d9:d6:08:
                    62:07:cf:3c:47:57:9e:8b:72:a4:6a:d1:51:53:0f:
                    3c:97:f8:17:25:0b:a6:a2:0a:0b:a8:fa:78:b5:3e:
                    9a:05:74:e7:e6:e5:e4:51:98:97:9f:1d:e2:af:32:
                    c4:50:e5:4a:bd:ec:fa:5e:e0:61:da:97:90:e0:fb:
                    ec:40:da:9f:b8:8a:89:bc:61:33:fe:a1:ff:33:17:
                    37:fb:da:05:6a:18:d2:e7:2e:16:34:ab:d1:a6:75:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.100.64.0/18
                  49.213.128.0/17
                  58.99.0.0/17
                  61.58.128.0/19
                  61.60.224.0/20
                  61.67.16.0-61.67.47.255
                  103.180.22.0/23
                  116.118.128.0/18
                  211.73.160.0/19
                IPv6:
                  2403:5200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18049

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:d5:6c:a7:a8:85:bc:6f:e9:fe:eb:2c:14:b4:2d:05:c4:
         56:36:27:07:f8:b5:32:43:dc:e3:7b:cd:a2:63:d1:79:f7:2e:
         c4:8b:19:d3:42:e7:61:39:51:ce:f0:6a:88:10:46:e7:5d:f3:
         99:c3:9d:ce:61:d5:ff:5e:66:bb:24:c7:c9:41:67:8f:6e:b5:
         ea:30:77:a0:6b:0c:5a:4c:94:8b:ca:6f:7e:43:78:fa:2a:a0:
         6d:48:26:85:45:ae:23:7c:41:7b:ca:f3:c8:f9:f3:d8:a6:66:
         f7:c9:7a:09:62:0b:e6:5d:7e:15:65:26:e6:3c:e3:13:b3:6b:
         83:a5:fa:54:e5:27:cb:67:4a:c3:45:e8:00:1a:eb:e9:f3:77:
         9c:cd:48:5b:83:b2:0f:85:b2:75:46:96:d5:9b:b7:cb:d8:75:
         d4:1a:fc:54:d9:d2:81:b3:02:39:6a:5b:d1:0d:bf:7e:1c:60:
         c5:4d:85:bc:e8:36:dc:86:bd:f5:6e:49:99:3b:0c:05:24:5a:
         5e:f0:61:f2:f0:b5:c6:f4:cb:0a:b1:2d:4d:9e:06:87:7c:c1:
         5c:a6:37:f0:5f:82:65:2b:d7:c3:f9:73:11:c2:ff:a9:8d:cf:
         e0:59:e2:ce:ba:1a:4d:df:b8:46:ab:b1:68:8d:8c:e1:2f:5f:
         e0:c8:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:47 2026 by rpki-client