Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E1310307C759363EC8F58DE8C47E388703148352.cer
File:                     E1310307C759363EC8F58DE8C47E388703148352.cer (raw, json)
Hash identifier:          rSv1dBlBDFSegpj/GJUr/N2fvJ8wb6bwvZlmT6SPH2k=
Subject key identifier:   E1:31:03:07:C7:59:36:3E:C8:F5:8D:E8:C4:7E:38:87:03:14:83:52
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       1407E2B9EB93C7D9512262499463BC48A941627F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/0/E1310307C759363EC8F58DE8C47E388703148352.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:56:49 +0000
Certificate not after:    Mon 10 May 2027 16:01:49 +0000
Subordinate resources:    AS: 9917
                          IP: 2401:83e0::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:07:e2:b9:eb:93:c7:d9:51:22:62:49:94:63:bc:48:a9:41:62:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:56:49 2026 GMT
            Not After : May 10 16:01:49 2027 GMT
        Subject: CN=E1310307C759363EC8F58DE8C47E388703148352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:65:fc:17:3b:a2:87:da:b7:69:c5:ad:7c:
                    5e:a5:64:c4:2c:e4:d1:1a:a4:1a:8b:06:69:27:54:
                    04:64:6a:cf:fe:61:3f:04:6f:85:6c:c2:0b:99:6e:
                    17:32:77:6b:bb:eb:9e:98:b1:57:84:70:3e:4d:87:
                    82:2d:ee:14:dc:c8:07:de:c7:55:9c:19:fe:7d:8c:
                    e0:4d:73:54:03:46:6f:65:5a:a2:65:a7:e9:f7:9e:
                    49:95:c2:6c:2e:d3:27:22:05:74:67:19:64:da:ba:
                    4e:a7:23:46:67:df:32:0a:a3:0c:ca:8d:b7:dc:89:
                    18:5f:1d:9d:13:4d:43:ed:db:27:7f:0b:8a:c9:f6:
                    77:ee:a5:f2:66:7d:68:7c:c2:8a:96:ce:c9:8a:4f:
                    80:7e:93:80:39:57:09:ab:f6:9d:ff:8d:a0:18:cf:
                    5d:b8:62:58:ed:5a:f8:01:8b:49:b8:11:88:15:db:
                    5a:1d:0f:d9:8c:68:2a:16:32:8f:40:f4:f2:db:cf:
                    8f:b7:03:5c:9b:6e:41:02:54:f0:f5:df:4c:57:65:
                    f5:ae:e2:0c:e1:96:54:41:af:8f:1f:8a:dc:67:4f:
                    36:b1:e1:57:81:4f:d9:37:9d:bc:37:d5:a2:08:31:
                    a0:87:87:bc:e0:3e:3e:a1:ce:14:55:70:55:d8:e2:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:31:03:07:C7:59:36:3E:C8:F5:8D:E8:C4:7E:38:87:03:14:83:52
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/0/E1310307C759363EC8F58DE8C47E388703148352.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:83e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9917

    Signature Algorithm: sha256WithRSAEncryption
         75:30:9b:8c:f1:22:a2:71:dc:f8:70:59:c4:9f:84:5d:d8:6d:
         28:32:ba:c6:72:88:14:1f:95:4e:8e:86:68:8a:d4:d4:58:37:
         c6:ae:37:22:ab:d5:d1:f2:cf:76:93:79:4e:39:21:f2:2e:22:
         7b:79:6c:98:8d:68:ae:7d:cd:73:65:c6:96:84:00:e1:6a:ae:
         23:4b:3f:4d:d3:78:b9:ca:e5:b0:17:a9:29:c4:66:7d:fd:f3:
         4d:a6:75:38:10:a5:a4:5f:e1:54:8f:f3:e3:04:c5:61:73:f2:
         20:54:d5:c5:dc:78:24:0b:05:21:42:24:17:85:e9:ce:e7:5a:
         5a:22:f4:2e:70:af:1b:4f:17:4b:f5:54:7f:1e:fc:ec:68:a8:
         af:e6:db:e8:63:89:f9:51:28:18:37:dd:96:c4:73:13:2d:77:
         39:b1:aa:af:1f:06:cf:db:e9:57:76:af:e3:7b:c6:5a:1e:ea:
         c6:55:21:a1:cf:42:57:5a:56:8c:d6:d3:cb:96:35:02:2c:a4:
         10:23:c0:a8:c4:e4:3f:91:46:3e:9d:20:58:17:88:8e:1d:e0:
         2f:cf:12:68:32:5b:a3:f3:8c:f6:b1:57:d1:07:dc:6d:f6:94:
         e7:13:76:5d:6b:3d:35:b0:f0:f6:a6:b4:de:76:e8:c0:3d:3b:
         5d:42:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:36 2026 by rpki-client