
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
File: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer (raw, json)
Hash identifier: B/atdqJ1Gps0w3mBZ51qeFvOYKzqWv2W8V4GE0oTS/Q=
Subject key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 142C8FCCBC4F8456F717EA77F31630324E3A0884
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
caRepository: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:48:38 +0000
Certificate not after: Mon 10 May 2027 15:53:38 +0000
Subordinate resources: AS: 18179
IP: 103.16.244.0/22
IP: 103.20.176.0/22
IP: 211.78.240.0/20
IP: 2404:db00::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2c:8f:cc:bc:4f:84:56:f7:17:ea:77:f3:16:30:32:4e:3a:08:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:48:38 2026 GMT
Not After : May 10 15:53:38 2027 GMT
Subject: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:43:e1:50:c9:a9:be:84:36:73:2d:1b:54:70:
11:2d:3a:a9:95:0a:3e:b5:27:5f:c2:15:05:fb:3f:
53:d1:b3:8e:cb:4e:07:c4:fb:ab:32:dc:32:d9:31:
af:3a:ca:e0:6e:a0:a4:e2:b2:38:15:07:fd:04:e5:
c4:b7:e9:4b:5b:d6:49:0f:48:1a:1a:89:3a:1c:f8:
af:0a:be:8f:33:9e:ce:4a:18:38:a0:a6:b7:dd:0a:
b3:f7:00:42:27:fc:9a:b1:34:bc:d7:07:f6:ea:f5:
2a:09:6b:0d:a5:84:4c:39:73:d5:ca:77:0d:aa:5a:
c0:ac:8c:9d:bd:77:21:e4:8f:42:64:62:48:01:aa:
a2:6b:60:9b:05:af:43:cd:63:37:af:e2:57:85:4e:
c4:d3:ef:d1:93:e3:81:31:0d:8a:35:77:d4:32:7e:
1b:21:a0:b2:9a:43:2a:6e:d6:e0:68:f4:61:85:06:
a3:d6:97:5b:5d:09:b1:e9:69:c1:50:54:4c:bc:d6:
11:c7:d1:79:69:fc:88:47:24:17:e9:65:0e:10:c3:
f2:cc:24:70:ce:d6:86:aa:32:65:76:b7:31:4d:2b:
f8:a8:18:bf:9f:f3:c9:80:ab:a1:cb:f4:a4:28:85:
5b:f7:ef:a1:a7:13:01:91:a3:83:37:30:cf:e7:30:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.244.0/22
103.20.176.0/22
211.78.240.0/20
IPv6:
2404:db00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18179
Signature Algorithm: sha256WithRSAEncryption
5a:d0:a4:63:17:c0:c9:dc:da:1f:53:3b:0f:a2:9c:90:fe:f0:
aa:ea:c4:d0:8d:bd:6b:9a:49:12:32:0f:b3:5c:fa:f2:12:76:
e8:db:08:6d:18:2c:46:41:63:8d:41:37:f0:02:11:3a:b8:04:
8a:f5:06:ec:56:5b:70:64:53:86:b8:58:ed:f5:48:d9:9c:d2:
ad:a0:e1:1c:50:1d:e2:a0:ff:b7:c7:95:80:e1:a4:44:71:17:
2e:7e:28:98:e2:cc:89:22:61:a6:e8:bf:03:69:57:06:20:92:
46:38:07:ee:63:ae:27:80:d7:ca:52:38:6c:7d:f5:82:17:4c:
fa:87:60:c4:f3:7b:0e:73:9b:22:70:61:fe:78:6d:ac:50:77:
8d:51:92:c4:9c:4f:f7:da:1c:0f:9a:1f:32:f7:58:93:27:60:
c7:45:a1:fe:01:19:79:5c:f4:67:fa:c5:70:bb:1a:92:75:d3:
9d:0f:1f:8c:00:48:8d:09:c1:61:ab:2c:c9:c9:e3:d4:22:4b:
84:ad:3c:5b:83:23:9a:5f:71:a7:0d:e2:ba:1a:74:a7:5d:57:
74:fa:da:fe:2d:58:6b:2f:60:ff:eb:4e:fd:c7:6c:3b:b1:2f:
27:bd:9c:f2:50:f9:52:23:3c:ef:f4:f0:b8:20:9f:05:c4:f7:
0e:cb:66:ab
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUFCyPzLxPhFb3F+p38xYwMk46CIQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDgzOFoX
DTI3MDUxMDE1NTMzOFowMzExMC8GA1UEAxMoRjFDRUFFNEFFMTNBNzFBRjZBMDcw
OUE0QzMwMEFEQTQ2MjNBMkNBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPJD4VDJqb6ENnMtG1RwES06qZUKPrUnX8IVBfs/U9GzjstOB8T7qzLcMtkx
rzrK4G6gpOKyOBUH/QTlxLfpS1vWSQ9IGhqJOhz4rwq+jzOezkoYOKCmt90Ks/cA
Qif8mrE0vNcH9ur1KglrDaWETDlz1cp3DapawKyMnb13IeSPQmRiSAGqomtgmwWv
Q81jN6/iV4VOxNPv0ZPjgTENijV31DJ+GyGgsppDKm7W4Gj0YYUGo9aXW10Jselp
wVBUTLzWEcfReWn8iEckF+llDhDD8swkcM7WhqoyZXa3MU0r+KgYv5/zyYCrocv0
pCiFW/fvoacTAZGjgzcwz+cw9mcCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFPHOrkrhOnGvagcJpMMAraRiOiyqMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr
BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NSVRBQ01EQy8w
LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NSVRB
Q01EQy8wL0YxQ0VBRTRBRTEzQTcxQUY2QTA3MDlBNEMzMDBBREE0NjIzQTJDQUEu
bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBAJnEPQDBAJnFLADBATTTvAwDQQCAAIwBwMFACQE
2wAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICRwMwDQYJKoZIhvcNAQELBQADggEB
AFrQpGMXwMnc2h9TOw+inJD+8KrqxNCNvWuaSRIyD7Nc+vISdujbCG0YLEZBY41B
N/ACETq4BIr1BuxWW3BkU4a4WO31SNmc0q2g4RxQHeKg/7fHlYDhpERxFy5+KJji
zIkiYabovwNpVwYgkkY4B+5jrieA18pSOGx99YIXTPqHYMTzew5zmyJwYf54baxQ
d41RksScT/faHA+aHzL3WJMnYMdFof4BGXlc9Gf6xXC7GpJ1050PH4wASI0JwWGr
LMnJ49QiS4StPFuDI5pfcacN4roadKddV3T62v4tWGsvYP/rTv3HbDuxLye9nPJQ
+VIjPO/08LggnwXE9w7LZqs=
-----END CERTIFICATE-----
Generated at Wed May 13 00:21:34 2026 by rpki-client