Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
File:                     EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer (raw, json)
Hash identifier:          o5moxDsHsw4uRW9zg6xRDy/1K8CB3FWe/I2Z0fwTtj8=
Subject key identifier:   ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       454A8F17C677CE202CD8DBBACDB0C51227D02328
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/SYSNET/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:57:17 +0000
Certificate not after:    Mon 10 May 2027 16:02:17 +0000
Subordinate resources:    AS: 4783
                          IP: 202.39.96.0/20
                          IP: 210.63.0.0/18
                          IP: 210.67.0.0/18
                          IP: 210.67.112.0 -- 210.67.143.255
                          IP: 2405:a00::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4a:8f:17:c6:77:ce:20:2c:d8:db:ba:cd:b0:c5:12:27:d0:23:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:57:17 2026 GMT
            Not After : May 10 16:02:17 2027 GMT
        Subject: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:7b:8d:8c:10:83:73:fe:70:86:3d:a7:d0:
                    e7:05:c6:45:55:05:3f:8b:05:b8:b8:d5:5d:9f:58:
                    64:9b:47:08:6b:f7:e6:89:88:58:68:41:96:7a:64:
                    95:0e:af:9c:ec:24:32:a4:60:ed:bd:d1:eb:9c:00:
                    6a:2d:de:df:e8:b0:3d:80:7f:60:b6:85:0b:9b:c8:
                    78:1e:98:1e:ff:39:bb:de:1a:51:8b:10:2c:54:48:
                    1c:ad:9b:21:d4:64:72:43:58:f5:1c:97:6f:af:3b:
                    f7:8d:2f:4c:48:9b:7b:01:70:7b:89:46:b7:3d:3a:
                    c0:61:e9:eb:eb:63:93:4e:26:43:aa:46:94:4d:8c:
                    a8:f9:98:d4:fd:f2:83:d8:fe:2a:88:91:86:13:e7:
                    f1:ab:19:1e:e6:7c:13:6b:c0:37:0e:44:29:7c:63:
                    03:aa:86:cf:44:c7:8e:1a:4d:52:5d:70:62:dc:dc:
                    50:4f:e5:5f:22:11:92:e9:c1:51:e7:7e:6c:ac:c0:
                    59:fa:5c:49:0e:1d:66:5b:8a:fc:7a:90:4b:e2:32:
                    bc:62:72:6d:32:35:21:70:0d:0b:2e:47:94:14:ab:
                    a6:e2:56:a7:51:75:96:37:7f:d2:5c:e0:2f:c4:3b:
                    a5:3d:1b:c3:3e:61:ac:18:f9:17:71:d2:b8:4a:07:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.39.96.0/20
                  210.63.0.0/18
                  210.67.0.0/18
                  210.67.112.0-210.67.143.255
                IPv6:
                  2405:a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4783

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:ce:97:b8:52:34:3b:87:c5:2c:2f:c7:8f:94:49:ef:e4:
         36:b8:af:29:5c:b8:dc:5f:c8:1f:d3:cf:bf:ca:36:fc:fc:f5:
         40:72:f8:dc:7d:7b:25:34:b1:ee:bf:bb:e7:56:27:76:f0:74:
         f0:6b:47:f7:22:bf:e7:c2:a3:51:23:fd:17:3f:ed:bb:6c:71:
         70:e7:bf:33:ea:c8:58:70:82:5a:04:21:81:ab:aa:ba:96:26:
         52:7c:2c:db:17:27:44:43:cc:06:80:27:5d:32:14:a9:ae:f3:
         e1:0e:81:bc:50:93:d2:10:80:ab:47:38:a0:10:c9:46:62:90:
         8a:68:30:e5:9b:3f:9a:7b:da:5e:45:39:a6:82:c4:d8:e5:0b:
         8d:42:01:cb:73:21:a3:ee:1e:f1:28:45:33:06:5e:5d:41:42:
         4f:d6:53:1f:67:05:00:a5:10:58:d2:65:f2:97:aa:d1:89:ec:
         a1:1d:2b:8e:8c:ef:76:ec:57:d0:10:5a:53:d7:7f:0b:c3:84:
         6d:23:93:65:ab:85:33:c8:e4:bb:17:b2:43:13:9b:1a:0b:4f:
         a1:3e:f9:eb:fa:7d:ca:f3:0a:e2:b2:ee:0c:39:bc:47:e6:ae:
         a2:00:e5:9a:71:db:3f:68:0d:cf:1e:f3:0f:10:49:92:5d:42:
         5d:46:6c:87
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIURUqPF8Z3ziAs2Nu6zbDFEifQIygwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTcxN1oX
DTI3MDUxMDE2MDIxN1owMzExMC8GA1UEAxMoRURFNzM4OUI2RDlBMzM1RDZCNkZE
RDQyODZEQjc5MDExRjg3NTU0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALtJe42MEINz/nCGPafQ5wXGRVUFP4sFuLjVXZ9YZJtHCGv35omIWGhBlnpk
lQ6vnOwkMqRg7b3R65wAai3e3+iwPYB/YLaFC5vIeB6YHv85u94aUYsQLFRIHK2b
IdRkckNY9RyXb687940vTEibewFwe4lGtz06wGHp6+tjk04mQ6pGlE2MqPmY1P3y
g9j+KoiRhhPn8asZHuZ8E2vANw5EKXxjA6qGz0THjhpNUl1wYtzcUE/lXyIRkunB
Ued+bKzAWfpcSQ4dZluK/HqQS+IyvGJybTI1IXANCy5HlBSrpuJWp1F1ljd/0lzg
L8Q7pT0bwz5hrBj5F3HSuEoHajsCAwEAAaOCAqowggKmMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFO3nOJttmjNda2/dQobbeQEfh1VLMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr
BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TWVNORVQvMC8w
XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1lTTkVU
LzAvRURFNzM4OUI2RDlBMzM1RDZCNkZERDQyODZEQjc5MDExRjg3NTU0Qi5tZnQw
NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBIBggrBgEFBQcBBwEB
/wQ5MDcwJgQCAAEwIAMEBMonYAMEBtI/AAMEBtJDADAMAwQE0kNwAwQE0kOAMA0E
AgACMAcDBQAkBQoAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhKvMA0GCSqGSIb3
DQEBCwUAA4IBAQCNB86XuFI0O4fFLC/Hj5RJ7+Q2uK8pXLjcX8gf08+/yjb8/PVA
cvjcfXslNLHuv7vnVid28HTwa0f3Ir/nwqNRI/0XP+27bHFw578z6shYcIJaBCGB
q6q6liZSfCzbFydEQ8wGgCddMhSprvPhDoG8UJPSEICrRzigEMlGYpCKaDDlmz+a
e9peRTmmgsTY5QuNQgHLcyGj7h7xKEUzBl5dQUJP1lMfZwUApRBY0mXyl6rRieyh
HSuOjO927FfQEFpT138Lw4RtI5Nlq4UzyOS7F7JDE5saC0+hPvnr+n3K8wrisu4M
ObxH5q6iAOWacds/aA3PHvMPEEmSXUJdRmyH
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:12 2026 by rpki-client