Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
File: ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer (raw, json)
Hash identifier: 1R5z+WkS5sh0UpGdlYOxJEApr6Td3d7KHFJ0tj+Wehs=
Subject key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 21C60B3C94FA88964CB0893A34114A809F046252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
caRepository: rsync://rpkica.twnic.tw/rpki/VEETIME/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 16:00:27 +0000
Certificate not after: Mon 10 May 2027 16:05:27 +0000
Subordinate resources: AS: 17809
AS: 131145
IP: 27.96.224.0/19
IP: 111.67.48.0/20
IP: 113.61.128.0/17
IP: 119.15.192.0/18
IP: 121.254.64.0/18
IP: 182.155.0.0/16
IP: 203.217.96.0/19
IP: 203.222.0.0/19
IP: 210.209.128.0/17
IP: 211.79.112.0/20
IP: 2401:ab00::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c6:0b:3c:94:fa:88:96:4c:b0:89:3a:34:11:4a:80:9f:04:62:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 16:00:27 2026 GMT
Not After : May 10 16:05:27 2027 GMT
Subject: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:67:bd:3d:59:3b:55:3b:17:54:43:3c:66:
53:b1:fe:df:8a:4e:83:fb:84:e4:f1:cf:45:21:58:
93:ce:89:07:0d:04:66:f9:3d:9d:ae:b9:35:17:7f:
fa:c7:3f:87:14:69:e3:db:83:fb:9f:6c:12:f9:ba:
74:32:27:26:34:52:8f:cd:09:ba:ba:d7:be:56:f4:
af:fa:10:f8:2e:b4:72:0b:c3:54:3b:c6:6d:98:1d:
8b:1e:71:9a:f2:1b:78:ec:71:a6:2e:6c:7a:60:8c:
eb:7a:76:4f:2f:b3:a3:39:92:a7:80:16:23:ae:15:
b6:3f:e1:91:79:9b:2f:81:b6:06:b9:69:68:6d:5f:
40:31:a8:7e:89:07:00:a4:c5:e7:20:e5:a2:33:ae:
a1:f7:23:8e:f9:45:5e:3c:ea:3e:91:dc:7e:97:f3:
d9:07:f4:b6:5d:27:04:a0:7c:61:cd:6d:a8:a6:56:
72:79:19:d0:1b:53:08:64:9b:57:c2:c8:12:a2:94:
0a:ba:3b:f3:92:fc:b2:73:60:12:a3:72:01:71:79:
db:89:a8:bd:65:4c:fb:52:ab:36:c7:14:2d:fc:9a:
67:90:97:f0:de:c3:a3:60:02:29:c8:ce:26:7d:ab:
09:a4:45:48:e3:04:37:27:96:1f:c7:c7:6f:73:2b:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/19
111.67.48.0/20
113.61.128.0/17
119.15.192.0/18
121.254.64.0/18
182.155.0.0/16
203.217.96.0/19
203.222.0.0/19
210.209.128.0/17
211.79.112.0/20
IPv6:
2401:ab00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17809
131145
Signature Algorithm: sha256WithRSAEncryption
8c:ba:4a:81:51:e0:77:03:f5:07:55:4e:41:4d:64:ff:3a:85:
94:4b:fa:20:ba:44:9e:17:d0:db:a8:70:3d:11:32:34:74:ae:
3c:e6:3d:26:cd:2a:c6:78:20:11:17:f6:a3:8d:87:cc:78:86:
dd:37:a0:a0:0b:13:3b:af:aa:d4:3e:5a:56:a9:b5:ca:7e:b9:
a8:f3:b4:0a:84:de:dc:75:ee:4b:2b:02:ee:e1:43:a8:d8:57:
47:79:e8:29:92:6e:44:eb:bf:93:68:7b:40:49:de:4d:8a:fe:
9e:89:3a:54:07:d9:39:2c:35:30:1e:4f:be:9f:e7:f9:68:9d:
00:27:8f:4f:4e:66:3e:3e:cf:bd:d9:d7:d8:49:a6:63:9d:47:
1c:3c:eb:38:27:43:bd:ae:76:12:9e:06:56:ed:48:53:13:5e:
be:14:d8:0b:6a:ba:a9:4a:38:0b:88:e7:a8:b1:27:b7:76:50:
01:83:50:aa:5a:5c:d2:2f:e9:51:9d:1b:12:80:35:60:0f:13:
ca:00:b7:c4:23:16:b5:a9:4a:7f:f7:b5:2b:b8:26:27:6e:d3:
e1:78:11:8f:7d:e0:e7:b9:da:fc:c9:de:35:37:b0:6a:f3:2b:
d6:43:a8:aa:08:59:16:cb:6d:33:09:0c:40:cf:12:2b:c3:86:
9e:b4:d7:c6
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUIcYLPJT6iJZMsIk6NBFKgJ8EYlIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDAyN1oX
DTI3MDUxMDE2MDUyN1owMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2
MjI5QUJDMERBMjg4RTY0QTY3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKcwZ709WTtVOxdUQzxmU7H+34pOg/uE5PHPRSFYk86JBw0EZvk9na65NRd/
+sc/hxRp49uD+59sEvm6dDInJjRSj80JurrXvlb0r/oQ+C60cgvDVDvGbZgdix5x
mvIbeOxxpi5semCM63p2Ty+zozmSp4AWI64Vtj/hkXmbL4G2BrlpaG1fQDGofokH
AKTF5yDlojOuofcjjvlFXjzqPpHcfpfz2Qf0tl0nBKB8Yc1tqKZWcnkZ0BtTCGSb
V8LIEqKUCro785L8snNgEqNyAXF524movWVM+1KrNscULfyaZ5CX8N7Do2ACKcjO
Jn2rCaRFSOMENyeWH8fHb3Mr0Y8CAwEAAaOCAswwggLIMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOyju0JW/Iysv0NiKavA2iiOZKZxMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr
BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WRUVUSU1FLzAv
MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJ
TUUvMC9FQ0EzQkI0MjU2RkM4Q0FDQkY0MzYyMjlBQkMwREEyODhFNjRBNjcxLm1m
dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEH
AQH/BFQwUjBBBAIAATA7AwQFG2DgAwQEb0MwAwQHcT2AAwQGdw/AAwQGef5AAwMA
tpsDBAXL2WADBAXL3gADBAfS0YADBATTT3AwDQQCAAIwBwMFACQBqwAwHgYIKwYB
BQUHAQgBAf8EDzANoAswCQICRZECAwIASTANBgkqhkiG9w0BAQsFAAOCAQEAjLpK
gVHgdwP1B1VOQU1k/zqFlEv6ILpEnhfQ26hwPREyNHSuPOY9Js0qxnggERf2o42H
zHiG3TegoAsTO6+q1D5aVqm1yn65qPO0CoTe3HXuSysC7uFDqNhXR3noKZJuROu/
k2h7QEneTYr+nok6VAfZOSw1MB5Pvp/n+WidACePT05mPj7PvdnX2EmmY51HHDzr
OCdDva52Ep4GVu1IUxNevhTYC2q6qUo4C4jnqLEnt3ZQAYNQqlpc0i/pUZ0bEoA1
YA8TygC3xCMWtalKf/e1K7gmJ27T4XgRj33g57na/MneNTewavMr1kOoqghZFstt
MwkMQM8SK8OGnrTXxg==
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:51 2026 by rpki-client