Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.cer
File: E9B9CBDA4B73475323F26FDB02B755EC7AC58540.cer (raw, json)
Hash identifier: ini9eCkrqfExoHEePb8UO/u6VcnwZWo1HzbKdxlcvhk=
Subject key identifier: E9:B9:CB:DA:4B:73:47:53:23:F2:6F:DB:02:B7:55:EC:7A:C5:85:40
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 0E6DDA121376AC36897497823B0BAC2C8971E975
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/BOT/0/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.mft
caRepository: rsync://rpkica.twnic.tw/rpki/BOT/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:43:21 +0000
Certificate not after: Mon 10 May 2027 15:48:21 +0000
Subordinate resources: AS: 131148
IP: 103.21.60.0/22
IP: 2405:6100::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6d:da:12:13:76:ac:36:89:74:97:82:3b:0b:ac:2c:89:71:e9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:43:21 2026 GMT
Not After : May 10 15:48:21 2027 GMT
Subject: CN=E9B9CBDA4B73475323F26FDB02B755EC7AC58540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:11:04:39:63:be:7c:3d:99:a6:83:22:7c:
94:92:5d:e3:77:e4:7f:e7:38:ba:c2:85:bb:35:3c:
e5:8e:de:c1:64:14:9e:b8:61:d8:26:ba:80:61:fa:
5b:c8:e8:c0:8e:3a:5c:f9:0a:1e:91:59:fc:5c:63:
4c:2d:da:6f:60:1f:f8:7f:c9:a5:16:8f:3e:45:ef:
68:57:01:c5:40:98:ae:6a:0d:89:49:2c:5b:0a:b2:
9c:1a:33:ba:b8:0f:b7:a3:e7:53:7e:55:84:ae:07:
d3:2c:45:29:21:e5:d9:cb:2b:9f:f0:f7:71:81:70:
ea:d7:01:3a:81:1d:e3:cf:60:16:d9:f4:23:41:0b:
26:22:ec:86:0d:16:bd:30:a8:82:df:76:26:5e:a6:
57:58:5a:a0:36:6c:30:af:cc:e0:28:24:9a:b4:76:
21:8d:49:25:ab:b4:76:35:24:0f:50:bd:e2:73:4e:
ac:85:c3:c4:42:3b:30:d3:d2:09:8b:6c:f6:10:2b:
6a:9c:49:4d:56:4f:5c:f0:4c:b2:e2:e9:f4:7f:33:
54:42:da:eb:61:ca:72:84:c1:8c:1a:25:fc:70:c9:
bc:6b:13:3f:ef:47:b8:00:e9:61:50:66:fd:20:4d:
15:53:f3:62:d9:48:9b:44:ce:8b:35:0b:d3:3d:3a:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E9:B9:CB:DA:4B:73:47:53:23:F2:6F:DB:02:B7:55:EC:7A:C5:85:40
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/BOT/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/BOT/0/E9B9CBDA4B73475323F26FDB02B755EC7AC58540.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.60.0/22
IPv6:
2405:6100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131148
Signature Algorithm: sha256WithRSAEncryption
22:6a:eb:05:04:fc:a1:17:61:a4:f6:b4:6b:3e:6d:d2:56:b0:
24:bc:57:6e:fc:62:ec:03:fe:18:7a:e7:9c:c8:07:82:a8:4f:
b8:70:a6:55:a1:65:bb:09:7d:d8:47:a8:d1:c7:cf:9c:0a:71:
f9:8a:dc:b9:35:60:ff:e6:56:59:7b:79:50:3a:41:80:2c:00:
42:f7:97:8d:75:22:e1:f9:2b:62:18:85:c5:38:d2:91:77:33:
6b:35:94:69:2a:a7:e8:64:dd:b4:14:41:2f:4f:d8:6c:c0:df:
f3:e5:55:28:20:30:de:13:98:02:89:92:5d:c1:e0:e4:13:a6:
f4:f6:a8:e2:ed:05:13:84:9a:1a:2b:02:c3:f8:ac:aa:6a:1f:
82:ed:52:d8:24:0e:42:5e:9c:af:1b:f8:f0:f6:70:da:64:3f:
19:9d:1b:f1:26:aa:58:ad:53:cd:9c:33:2c:eb:a4:77:95:ac:
e3:bb:ef:7f:91:6d:4c:60:65:8f:b1:88:2d:98:f3:be:a1:bd:
a5:af:68:00:a7:fc:5c:fc:94:b3:bb:01:99:7e:20:61:2c:13:
27:6b:7c:4d:6f:61:2a:7d:e7:99:9f:fa:ec:7f:2d:66:49:46:
f1:f8:a9:b6:24:35:2e:44:4e:2d:d0:34:d8:bb:ea:60:8c:d4:
76:63:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:10 2026 by rpki-client