Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
File: BD49467776DCA7472F88470782DAD5722E5AFE49.cer (raw, json)
Hash identifier: 4RRn69JuoCNGlYgLmOWOiNQZ0LQDQQx7S3phEPSlMtM=
Subject key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 11CCC1ECD910E7F001E492BC13B383C2040D0880
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TSMC/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:58:00 +0000
Certificate not after: Mon 10 May 2027 16:03:00 +0000
Subordinate resources: AS: 23675
IP: 103.132.156.0/22
IP: 202.126.64.0/20
IP: 2407:51c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:cc:c1:ec:d9:10:e7:f0:01:e4:92:bc:13:b3:83:c2:04:0d:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:58:00 2026 GMT
Not After : May 10 16:03:00 2027 GMT
Subject: CN=BD49467776DCA7472F88470782DAD5722E5AFE49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:9a:d1:55:09:6a:64:e4:31:ec:8b:38:9c:
7d:35:76:96:54:cf:35:f0:e5:87:8f:4a:40:ed:fe:
59:b0:38:25:7a:4f:cb:4d:e1:77:ec:04:8c:3c:5a:
b9:54:f8:7e:ad:38:d8:df:15:31:7f:7a:bb:d3:ed:
95:18:ab:a9:f8:fc:00:5a:ce:09:a3:bf:7e:08:a8:
f6:03:01:e6:69:1a:37:1f:38:3b:13:32:9e:56:a3:
6e:6d:22:df:1f:49:bf:18:16:ef:3e:a6:23:9c:7a:
a1:16:1b:1a:ee:04:31:0b:19:ec:cb:59:47:58:ae:
6c:c0:98:a2:95:e5:09:b6:c6:58:69:f7:c7:ce:e8:
1e:21:dc:07:0a:81:91:4f:42:e9:5a:36:2f:be:d2:
c1:7b:9d:20:ce:03:00:56:26:29:14:e4:b9:e6:2c:
e6:58:d9:66:21:36:38:4f:1f:c5:5a:f9:c6:53:e7:
39:99:43:94:34:56:4a:c2:eb:42:01:6b:ec:c4:ec:
c3:c5:1b:8c:e2:b8:af:98:6b:fb:fe:6c:93:f5:fa:
0a:9d:01:ee:b3:a4:d8:03:5a:52:d4:67:d3:3a:27:
30:ff:b2:a1:0c:e9:e7:04:d5:68:03:67:2e:68:d7:
fa:2a:2e:3f:27:47:62:44:e1:88:1a:b1:b8:45:8a:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.156.0/22
202.126.64.0/20
IPv6:
2407:51c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23675
Signature Algorithm: sha256WithRSAEncryption
07:d6:28:84:e0:71:b1:3e:8e:3a:36:cb:41:6d:f5:16:71:b7:
6f:e2:bd:fe:7e:2e:03:df:44:cd:30:d5:7b:8b:6f:5c:2a:fa:
14:f3:08:7b:b3:7a:f2:25:90:c8:33:e2:0d:e8:1c:4d:59:91:
af:37:50:d4:2c:be:fa:f5:13:90:ec:bc:bc:f1:08:37:ea:f8:
1d:a0:b4:58:d3:db:3f:79:ab:59:70:76:8e:18:d4:1e:39:55:
e5:64:d3:22:04:7e:46:f7:11:84:a4:24:3d:8e:89:9b:e9:a3:
ea:09:08:ff:91:5f:34:c0:30:a7:ac:3a:12:d2:98:98:87:4b:
c8:f1:2b:a2:1f:ae:e6:9a:c3:7d:30:4f:1a:f4:d5:a7:14:20:
e4:15:1e:81:de:50:0a:e9:b6:4e:88:3b:29:31:2f:44:5f:b3:
f0:49:00:02:6b:3b:7c:ec:bd:3f:7f:ba:63:fa:56:78:6f:ec:
90:56:1b:a8:a8:9b:0e:3e:69:58:f7:af:63:8d:68:df:d7:7b:
bb:d1:1c:b4:17:30:59:33:bd:02:7c:50:19:5e:88:c2:15:df:
52:5a:7f:e1:73:8d:04:fa:86:68:3f:8a:d2:0e:85:e1:c9:be:
2b:08:67:c2:9d:2e:44:dd:a0:a5:4b:f5:56:15:58:8b:98:ef:
0a:ce:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:09 2026 by rpki-client