Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
File:                     D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer (raw, json)
Hash identifier:          BCtyAB9U+uVNDYMXL3c2QpHAN2atCO+B/RmE+TN4UlQ=
Subject key identifier:   D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       7669632CF7AE9B26FF0D41857A27E72047C2B7C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/SMCI/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:57:02 +0000
Certificate not after:    Mon 10 May 2027 16:02:02 +0000
Subordinate resources:    AS: 63894
                          IP: 103.162.84.0/23
                          IP: 2407:1440::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:69:63:2c:f7:ae:9b:26:ff:0d:41:85:7a:27:e7:20:47:c2:b7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:57:02 2026 GMT
            Not After : May 10 16:02:02 2027 GMT
        Subject: CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0d:44:4f:de:c1:43:b0:be:75:64:ed:04:34:
                    55:4c:f4:7c:73:a7:6b:a7:52:b1:0b:60:25:bc:44:
                    79:9f:67:69:ef:fa:f4:39:2a:c2:28:e1:72:0f:c0:
                    15:07:7f:d6:60:05:35:80:6f:9a:21:99:4c:2b:7c:
                    aa:64:a2:43:20:c9:3f:6c:65:91:6a:87:af:5e:b5:
                    fc:c4:8a:82:e9:c5:79:eb:11:41:b9:3b:c8:13:7f:
                    b9:7c:70:9d:8b:09:69:51:06:ec:ea:eb:d3:d7:96:
                    c5:f7:fc:c0:e5:f5:af:14:d9:01:1b:6b:7e:d8:d2:
                    3d:63:9d:5f:ac:16:04:72:fe:28:1f:ff:74:fd:36:
                    6a:2b:10:fb:37:1d:2a:bc:52:d3:90:a7:a6:29:1a:
                    e2:80:88:23:fc:db:55:35:18:59:8a:d1:da:62:e5:
                    cd:95:83:31:e9:de:99:cf:20:eb:d4:9b:25:a9:27:
                    be:cd:df:85:13:9f:e2:3a:3a:4f:3c:fb:06:76:e4:
                    33:a5:cb:f5:5b:c2:2c:5e:1a:34:2f:cb:7a:77:76:
                    39:5c:d8:93:db:05:1c:0c:49:0a:0b:f5:e2:44:b7:
                    b5:25:08:0a:96:63:61:0c:b4:10:01:56:ab:5f:cb:
                    c5:e8:0b:f7:a1:24:f3:a3:23:02:f9:5f:cd:f1:1f:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.84.0/23
                IPv6:
                  2407:1440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63894

    Signature Algorithm: sha256WithRSAEncryption
         a4:66:f3:10:12:ec:82:2f:9e:0a:ed:87:27:52:81:40:4d:e2:
         5b:f9:61:66:c8:30:a5:21:66:58:a9:eb:ba:70:b3:0c:69:72:
         d7:59:8b:42:d5:41:08:19:c1:f5:25:21:89:67:35:63:cf:da:
         b7:a7:ee:54:40:80:38:aa:9e:ce:b9:b5:02:4d:9d:da:0f:40:
         7e:ed:6e:8b:ed:35:1a:90:c5:08:cc:70:03:23:fa:69:75:14:
         9f:ff:af:15:5e:eb:7d:b0:d4:2c:9d:19:63:cb:ce:81:f8:7c:
         b4:3d:ed:b9:6f:1f:ef:b0:3b:ed:7d:7d:00:ac:cd:57:d8:c6:
         3c:b3:b1:08:03:0b:c2:b1:c2:a8:a2:42:88:db:5c:7a:47:1f:
         20:34:44:71:5e:e9:4b:9b:ab:70:fa:9b:03:62:e1:60:44:15:
         a7:e2:b2:f5:a6:79:0c:9c:ea:b4:ec:8e:0f:b4:bc:f8:c9:2c:
         90:de:4a:48:de:9b:a5:6a:b1:4d:11:e9:c3:ab:d4:66:98:fc:
         d8:90:3f:2b:21:ca:bb:15:a7:a1:b4:ff:6d:71:8d:96:50:5c:
         47:dc:de:da:a3:ad:fd:bf:52:ba:8f:0e:b6:32:51:8b:78:1c:
         88:6a:92:dc:af:0e:34:34:c4:db:cb:70:4c:18:7d:8b:e3:21:
         26:73:20:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 12 22:32:28 2026 by rpki-client