Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
File:                     E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer (raw, json)
Hash identifier:          DQI1yKFs/kSG1M8qkQfocgC3bnz1tlE0S+BK3FG/C2I=
Subject key identifier:   E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       50A9D10B98BE0FB700029F1E1C0A717A15E3AB07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWT/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 16:00:12 +0000
Certificate not after:    Mon 10 May 2027 16:05:12 +0000
Subordinate resources:    AS: 131592
                          IP: 43.250.44.0/22
                          IP: 103.229.100.0/22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a9:d1:0b:98:be:0f:b7:00:02:9f:1e:1c:0a:71:7a:15:e3:ab:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 16:00:12 2026 GMT
            Not After : May 10 16:05:12 2027 GMT
        Subject: CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:be:b9:2a:81:de:c7:76:c4:42:e1:0a:e2:b4:
                    f9:13:e4:8b:02:b7:25:b8:c5:a3:b9:f9:10:35:a9:
                    51:92:61:79:fb:c1:45:8e:48:38:ed:b0:23:08:39:
                    12:31:d5:34:d2:9f:48:dd:7d:d1:5a:20:48:6d:ce:
                    bd:a0:60:f9:2a:07:4b:de:95:3a:ab:b9:72:2c:28:
                    1a:43:75:20:94:f7:00:a4:f1:8b:77:4e:af:3d:45:
                    a0:3a:c8:3c:cd:d3:36:6b:15:f9:6d:ac:d6:2d:2f:
                    3b:a7:5d:62:da:77:a6:4d:de:11:c5:34:3b:a4:84:
                    c6:f7:a5:e3:10:59:1c:d3:5f:09:d5:85:03:90:56:
                    61:d7:55:1a:f8:9f:90:14:c6:37:dc:60:9d:15:ea:
                    49:34:16:ed:ae:8c:3f:48:8b:60:c8:cd:26:f6:4f:
                    e8:6b:9e:58:e1:ca:82:6a:51:81:6b:40:86:b4:df:
                    09:83:42:e8:05:29:cc:31:9f:65:84:04:06:ab:2f:
                    a6:2d:df:85:f2:0a:0b:e5:7d:83:b8:e0:7a:ff:de:
                    48:94:fc:e2:96:83:0f:31:b2:9e:24:12:db:49:7e:
                    e5:0d:7c:45:5a:24:6e:0c:67:25:63:48:38:74:c8:
                    92:2c:1f:6c:99:fc:4b:bf:fa:6d:f6:3f:d6:4d:a6:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWT/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.44.0/22
                  103.229.100.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131592

    Signature Algorithm: sha256WithRSAEncryption
         07:69:ce:6e:bd:d5:85:75:13:a7:a5:b7:1c:a5:8a:64:87:44:
         1d:67:6e:ba:fa:90:d7:5f:74:79:da:0f:b3:fd:d2:a6:2f:47:
         fc:ec:be:37:d8:53:f5:30:ad:eb:e8:6c:a8:69:c1:e0:ad:40:
         b0:44:55:79:91:80:9f:65:bb:a4:5c:5a:16:b7:28:c9:fc:66:
         6c:2a:22:c7:b8:10:df:81:b2:db:ab:4f:81:c9:08:95:a7:15:
         62:07:4c:aa:52:01:7b:2c:99:f2:23:88:9c:57:55:11:3b:35:
         08:92:91:a3:fd:76:7e:aa:2f:af:eb:0f:cb:9b:d1:a8:33:b2:
         de:e6:eb:ca:f9:36:0d:76:17:0c:89:c8:f1:87:3d:21:2e:e1:
         6c:14:4d:35:fa:94:6e:23:7e:2a:a1:90:ef:36:b5:4a:f9:b6:
         c4:2d:46:af:1f:52:57:b8:f7:a4:19:1c:78:d0:2c:db:30:04:
         ba:34:8c:8c:a4:05:bd:3b:fc:2d:43:04:cf:f7:57:ed:e3:48:
         f9:00:c2:57:c2:26:58:99:c0:55:85:c9:5c:68:59:ef:ad:ec:
         e9:f2:6c:b3:93:02:02:2f:e9:b6:ea:eb:65:2b:60:91:bd:5e:
         99:ff:a6:0c:48:b7:72:50:ca:45:b3:90:97:3d:b0:9f:01:5a:
         e8:c4:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:08 2026 by rpki-client