Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer
File: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer (raw, json)
Hash identifier: qLVTA3llYxtjaXc2oy0aPKxgOnwU50ZxwxQ3YI/K3I4=
Subject key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 59DF36341893FFEC77C46BF98B3388DD1FC1A414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
caRepository: rsync://rpkica.twnic.tw/rpki/GSN/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 00:58:51 +0000
Certificate not after: Tue 11 May 2027 01:03:51 +0000
Subordinate resources: AS: 4782
IP: 61.56.0.0/20
IP: 61.57.32.0/19
IP: 61.60.0.0/17
IP: 61.67.64.0/19
IP: 117.56.0.0/16
IP: 124.199.64.0 -- 124.199.111.255
IP: 163.29.0.0/16
IP: 210.69.0.0/16
IP: 210.241.0.0/17
IP: 211.79.128.0/18
IP: 223.200.0.0/16
IP: 2001:4420::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:df:36:34:18:93:ff:ec:77:c4:6b:f9:8b:33:88:dd:1f:c1:a4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 12 00:58:51 2026 GMT
Not After : May 11 01:03:51 2027 GMT
Subject: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:81:cd:47:e9:52:45:93:58:8d:7f:74:31:
f9:d0:2c:76:6a:ec:1f:29:63:56:92:be:3c:2a:de:
b7:23:13:ca:bf:77:2c:9c:87:82:dc:8a:fa:49:de:
63:64:ac:30:3f:14:5c:c9:b0:ff:91:ad:f8:28:3f:
77:20:9b:7b:cb:2c:a2:9f:90:1e:1f:0b:8d:7b:75:
48:1b:82:45:9f:fe:94:24:59:ab:52:5b:77:07:b2:
9c:bc:f7:4a:22:74:1f:da:4e:d0:74:0f:23:93:bf:
7d:0b:12:25:bc:0f:d0:f6:da:bc:e6:f1:d8:50:0c:
f1:52:98:12:f6:a1:84:10:87:94:3c:51:ce:92:23:
c8:94:e3:4b:92:f9:af:6e:52:fa:7f:38:94:67:e1:
e6:65:2b:c3:bf:5c:ea:4c:74:5f:d6:80:8e:73:a4:
fb:6c:78:b9:45:d5:75:38:ee:65:83:b7:b4:67:90:
3a:93:25:86:95:6b:1a:fa:85:e1:a2:32:f8:4b:12:
75:12:ee:55:30:08:4a:4b:f8:a9:2a:02:03:09:a1:
dc:bd:e0:73:9a:a6:35:42:ac:a9:fc:07:02:d2:7f:
5f:c8:34:d6:30:fe:20:fb:34:29:59:20:13:40:a8:
e5:fb:df:df:9f:ec:a0:15:cb:cb:83:f4:29:43:6b:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.56.0.0/20
61.57.32.0/19
61.60.0.0/17
61.67.64.0/19
117.56.0.0/16
124.199.64.0-124.199.111.255
163.29.0.0/16
210.69.0.0/16
210.241.0.0/17
211.79.128.0/18
223.200.0.0/16
IPv6:
2001:4420::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4782
Signature Algorithm: sha256WithRSAEncryption
a4:d8:bf:86:f8:b4:8d:e9:78:c7:97:04:5f:92:17:0c:92:4b:
1b:d4:63:c9:be:2a:07:ca:72:e9:68:5f:99:e3:a5:22:44:35:
22:03:18:40:94:e4:6b:e7:c2:6c:bc:12:83:62:55:11:24:68:
28:f9:a3:91:d4:03:86:12:2f:c6:62:1b:c5:65:62:1a:73:90:
1a:e1:36:59:6f:7d:cf:45:2b:09:d6:81:95:82:6c:54:02:6f:
f0:d5:ea:47:ad:6a:00:2e:3c:f3:68:ff:f2:38:c5:03:3d:e3:
7c:42:65:5e:c7:63:cc:85:62:42:7b:90:25:ff:de:00:03:36:
af:91:d4:7c:07:2a:c9:ce:74:be:b5:ab:0e:f7:9d:a2:ff:ba:
41:97:d1:c6:e3:6b:1a:d6:ab:79:d6:11:36:8f:2a:0b:82:c2:
b8:7b:1a:75:ae:ef:8b:73:c7:0c:ff:6a:c7:c6:c3:d8:43:2b:
f3:f5:59:77:d4:0c:3f:49:9d:c9:e9:23:1a:e1:20:a5:4e:5f:
d0:ea:82:a9:c0:7f:d8:8a:01:dc:17:d1:fa:fb:d7:81:68:bd:
de:cc:ea:ce:94:9d:59:b1:f1:48:0a:1d:68:5f:95:5d:3b:c6:
68:29:4e:47:55:19:a4:4f:01:4b:b0:11:8c:37:28:5a:63:93:
13:05:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:26 2026 by rpki-client