Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer
File: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer (raw, json)
Hash identifier: GAKISKLkfzvCZQPxn0G0HjdA4/rqjiJw2gRk8a8Kvzg=
Subject key identifier: E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 3610A2751FA65A2C259B12A8A8A9FE9F5FB7BE8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
caRepository: rsync://rpkica.twnic.tw/rpki/HST/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:46:43 +0000
Certificate not after: Mon 10 May 2027 15:51:43 +0000
Subordinate resources: AS: 131666
IP: 103.144.34.0/23
IP: 202.123.124.0/23
IP: 211.76.190.0/23
IP: 2405:6440::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:10:a2:75:1f:a6:5a:2c:25:9b:12:a8:a8:a9:fe:9f:5f:b7:be:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:46:43 2026 GMT
Not After : May 10 15:51:43 2027 GMT
Subject: CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:dd:74:b1:82:dc:af:74:7a:f2:c6:0f:23:
13:fb:f0:86:6f:26:b4:cc:6b:db:ee:9e:8d:5c:99:
e4:f9:e1:a8:3b:6f:63:f9:bd:f2:69:d0:3e:f6:f7:
74:39:5b:7e:e2:d1:c1:80:44:ec:de:d2:bb:95:8a:
2a:ba:db:5f:31:5b:eb:3c:6d:8f:ce:94:c6:c0:c3:
d6:6e:39:9e:c3:1f:f2:fd:36:61:96:4c:c4:ab:f4:
08:c7:71:26:1e:49:85:6e:43:93:51:43:d2:30:45:
12:0d:99:80:0e:a5:75:eb:f2:34:48:29:4a:1e:ba:
cb:9d:2d:89:92:fa:e1:39:ca:02:9d:17:de:f6:c9:
cd:84:05:58:e1:15:00:57:0e:e7:10:db:08:db:ed:
09:88:ac:2c:ed:28:b4:bd:d5:47:7c:d5:ce:a4:c8:
3c:7e:2d:f0:d4:20:f6:11:c7:b9:55:fa:5d:13:8e:
d3:94:7c:fd:08:69:fb:a5:c4:4f:fe:d1:81:6e:8e:
bf:f7:f1:1e:b8:a8:05:55:44:2a:9f:f4:c8:e2:9b:
90:66:d6:74:4f:6b:d6:31:95:38:4e:a6:7e:52:4f:
8c:e1:74:f1:24:36:23:86:67:0c:08:8b:c9:1e:6d:
0c:6f:3e:0b:23:92:ee:ac:64:65:7c:45:51:97:80:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HST/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.34.0/23
202.123.124.0/23
211.76.190.0/23
IPv6:
2405:6440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131666
Signature Algorithm: sha256WithRSAEncryption
01:5d:45:77:03:0b:1a:8b:6b:db:24:f8:8e:0e:48:f6:ea:22:
6a:93:78:32:53:72:3a:dd:44:64:e2:c5:3b:1a:e7:71:39:0a:
b9:47:b9:16:d4:fa:03:5d:61:71:bb:19:60:95:a4:70:3d:aa:
0a:2d:31:f2:2a:b6:aa:93:f0:7f:e6:84:11:68:42:2c:e8:70:
d3:61:6f:b2:56:04:3b:32:0c:f8:7e:bc:7c:9e:33:20:e7:0e:
d4:ac:dc:4d:ca:a7:81:b0:c8:06:4b:31:e2:f4:27:1e:7e:fd:
c5:6a:c7:ed:fa:b9:36:88:d5:64:0d:89:17:e5:7d:85:6d:98:
dd:c3:63:e1:36:a1:45:2a:0a:9f:f2:9b:55:16:f2:68:7c:8c:
a6:48:03:1c:b5:3b:58:7c:5d:8f:93:12:a2:c8:b8:cf:94:33:
8d:17:cf:8c:52:85:d6:11:38:a4:61:98:3a:b8:6c:1c:09:39:
eb:17:b8:be:87:28:d3:d9:d8:ee:be:cf:bb:98:d7:41:fd:d5:
39:f2:90:12:e9:8f:3c:8f:20:47:78:28:0a:34:c4:95:67:c6:
fd:e3:b9:11:6c:07:db:1c:9a:05:12:07:a7:ba:4a:ed:68:c4:
24:b6:43:2f:69:b9:86:88:bf:20:01:a9:f6:d7:26:f4:da:4b:
02:97:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:46 2026 by rpki-client