
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
File: EED0E4E138A33B7827F8D6020B736557137C89A1.cer (raw, json)
Hash identifier: MAF8BZ6dR9M6UQZGNPIXofuu8gQMmp3Uvr+Cy/L+fQc=
Subject key identifier: EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 1B89B05930B4A5FCBBBAE6B8FB74F89F53FC436F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
caRepository: rsync://rpkica.twnic.tw/rpki/HLCATV/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:46:36 +0000
Certificate not after: Mon 10 May 2027 15:51:36 +0000
Subordinate resources: IP: 211.76.80.0/20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:89:b0:59:30:b4:a5:fc:bb:ba:e6:b8:fb:74:f8:9f:53:fc:43:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:46:36 2026 GMT
Not After : May 10 15:51:36 2027 GMT
Subject: CN=EED0E4E138A33B7827F8D6020B736557137C89A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:24:d0:21:6c:fd:29:3a:bf:7b:e7:dc:45:
e1:85:80:27:a1:56:73:cc:d6:44:12:75:09:fc:48:
aa:a4:91:30:98:d1:05:76:7e:91:16:52:2e:8e:3b:
c5:32:e8:da:50:c6:f7:c3:d4:59:e3:3b:d6:41:fa:
ac:19:75:0a:81:cd:97:fc:c0:d3:05:5c:de:ff:48:
28:29:fb:57:c2:b2:cb:84:b6:31:20:38:34:97:96:
a7:4c:7f:cf:8c:d9:3c:6d:73:84:a3:2b:cc:38:7e:
5d:78:8b:db:28:91:46:2d:de:30:dc:9c:31:7b:15:
b3:13:b0:46:8f:c1:22:1b:45:bc:af:ad:89:69:2d:
36:24:e0:87:69:48:18:7f:ba:c5:46:ab:23:25:dd:
86:ac:c0:ca:bc:e2:2f:39:f5:5d:22:ea:eb:ab:49:
c8:d8:18:60:3e:28:44:54:cb:70:3a:f5:d0:f8:57:
0e:48:d7:81:f1:1c:78:9d:84:52:24:f5:1e:32:b4:
46:2c:bb:40:85:56:1f:2a:6e:5a:36:89:7c:ee:e1:
45:f7:0a:99:40:26:fe:14:a7:7a:7d:ce:3f:2d:fd:
95:60:b6:89:69:74:b7:06:36:48:c9:e8:2d:9a:93:
18:4e:9c:33:4e:98:d6:40:f9:a1:26:22:87:d9:89:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.76.80.0/20
Signature Algorithm: sha256WithRSAEncryption
63:3c:22:fd:7c:6b:ee:66:7f:05:0d:d1:29:be:80:08:99:69:
ee:08:40:f3:75:f5:8f:17:ac:2f:80:d0:e2:88:5c:f2:10:c5:
88:ca:f7:ea:4c:21:76:53:65:dd:5b:4e:f2:49:c6:3c:d5:cb:
0a:f7:8f:73:63:aa:d9:ed:44:fb:2c:e3:53:56:48:1b:69:63:
eb:eb:60:59:cf:21:14:61:90:ca:ea:f6:2d:b3:58:71:6c:ec:
4b:8b:69:7b:d2:43:15:4a:6f:9e:37:16:df:77:8d:ad:82:a4:
de:41:81:b0:af:11:36:da:fe:63:67:ff:e6:d7:e6:35:5c:ee:
4a:f4:90:b6:04:b3:ba:0d:20:6c:fc:6c:6b:aa:0c:1e:57:58:
4b:bc:73:e3:65:92:48:97:48:a1:4c:55:b7:e1:40:f2:7e:0a:
b5:9f:6c:84:b2:88:ee:52:66:f0:94:c0:fd:e3:17:fa:b4:f3:
a7:14:99:fc:33:7e:08:59:41:b0:29:05:40:3d:ee:9d:59:39:
2f:e9:70:97:cc:fb:67:fc:0c:04:6f:fc:17:66:6f:2f:42:3c:
5a:e1:75:d0:76:be:2f:87:37:0c:ab:55:26:8f:d4:9e:56:21:
98:8a:73:3d:a1:2a:57:83:61:7c:54:65:a6:86:13:d1:03:f1:
85:b0:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:08 2026 by rpki-client