Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
File:                     E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer (raw, json)
Hash identifier:          FYfFp9L4fUzZS/ydhohHnX9fFD8RAGCfGLksdPrwREI=
Subject key identifier:   E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       0AF0BF4D7D5E34B12A7904ED24F48ED7F740FF07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/CROWN/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:44:34 +0000
Certificate not after:    Mon 10 May 2027 15:49:34 +0000
Subordinate resources:    IP: 103.255.210.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f0:bf:4d:7d:5e:34:b1:2a:79:04:ed:24:f4:8e:d7:f7:40:ff:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:44:34 2026 GMT
            Not After : May 10 15:49:34 2027 GMT
        Subject: CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:19:f8:73:b0:c9:fd:f6:dc:3b:92:cd:64:
                    e2:5b:0f:8a:b1:a9:46:bc:60:82:18:25:d4:cb:63:
                    21:c8:10:9d:5e:43:63:34:8f:9d:1f:90:60:5a:d1:
                    ef:f4:1a:32:15:6b:f6:3a:e8:1b:d3:b9:47:c1:08:
                    84:08:d7:24:57:92:18:2e:e5:e3:c4:a7:04:9a:fb:
                    7d:48:88:3d:af:02:9a:78:f5:39:3d:c2:e9:f4:3b:
                    04:6d:cd:c9:93:3c:ed:55:cd:ea:f3:cd:75:23:98:
                    6d:23:1b:ed:57:bd:98:d2:e8:ab:fa:ec:07:4f:a1:
                    2d:50:a1:40:b1:d2:35:c9:2a:f4:47:00:9c:13:52:
                    ce:c5:47:51:05:aa:9c:2f:1d:dd:42:24:a2:6e:5f:
                    d0:69:77:15:af:8e:a4:00:c4:4a:67:03:98:53:19:
                    05:cc:fd:7b:d8:1e:1f:96:67:53:1a:f4:99:f3:d2:
                    c3:6e:e3:0b:6c:ec:54:f6:0b:f6:0f:4b:87:53:31:
                    d8:87:b5:25:38:2b:a0:de:24:8f:14:ad:d4:c4:bb:
                    1a:89:ff:ca:f1:e1:b5:ed:3a:ac:12:5a:bc:58:46:
                    27:91:be:5c:5d:47:fc:e7:0b:7f:09:2d:2a:18:9c:
                    b5:92:8f:37:12:27:ce:71:24:70:93:a5:98:64:dc:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:09:a2:b0:ff:4a:c6:61:a3:08:72:07:cf:70:c3:ca:b1:6e:
         03:f6:2b:8e:00:25:72:41:68:bc:b0:e9:f6:cc:92:3d:de:d1:
         e0:59:41:7e:c6:09:ae:a4:96:bc:96:0d:23:b2:03:6c:62:ee:
         a1:57:79:65:a3:5b:bd:57:65:f4:b3:7d:8e:00:01:8b:12:85:
         c4:69:e1:8c:05:62:3f:d0:36:db:1b:75:dc:97:6d:a9:26:26:
         fe:55:23:3e:56:b0:55:a8:db:ff:9e:29:a8:48:e3:4c:87:f9:
         c2:62:89:00:77:22:f5:44:bf:19:de:13:cc:35:ef:e7:9a:f1:
         d4:de:bd:a9:94:d6:71:a9:9b:7e:63:7f:45:36:9b:d3:50:35:
         85:5e:20:e9:0a:99:0f:27:d4:ce:fd:ba:c3:3d:f3:4f:d0:e8:
         07:ac:0f:e6:2d:20:8e:5d:64:a2:29:20:1c:9f:14:40:ac:02:
         bf:8f:91:45:8d:8d:d6:17:53:76:6c:c7:20:3a:b5:91:0e:74:
         2a:4a:3a:98:6d:8a:c0:90:e3:fc:b3:4b:a6:a2:bf:8f:53:5b:
         c2:40:7d:ce:7c:a5:74:d6:a8:25:88:52:04:fb:ce:b0:33:56:
         c7:4f:4f:58:4d:2e:35:10:5a:e3:df:b1:a3:46:ef:58:42:1e:
         86:e6:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:14 2026 by rpki-client