
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
File: F1F518BDB5085DA9DAA281C529D23491A72DA248.cer (raw, json)
Hash identifier: fQiCnwciXVNuwmOIrGzyyOYJHKYhRqriEfQDT/GV6jA=
Subject key identifier: F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 571EA0F33FA3EF8EEE3B51FE55534B3B0C3D18EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
caRepository: rsync://rpkica.twnic.tw/rpki/CATVISP/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:43:39 +0000
Certificate not after: Mon 10 May 2027 15:48:39 +0000
Subordinate resources: AS: 131604
IP: 43.248.16.0/22
IP: 103.233.68.0/22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1e:a0:f3:3f:a3:ef:8e:ee:3b:51:fe:55:53:4b:3b:0c:3d:18:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:43:39 2026 GMT
Not After : May 10 15:48:39 2027 GMT
Subject: CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:ec:51:87:56:9f:48:60:e4:bb:27:6c:27:
af:7a:26:03:49:fc:6a:8e:32:07:32:2a:ab:a9:43:
f1:08:3f:89:ed:69:52:04:4a:54:d9:63:d1:66:2d:
d9:95:d9:06:0b:f6:a5:07:57:d5:65:8f:82:78:41:
de:bb:28:21:4b:6b:5a:db:a6:51:4f:4e:8c:51:fe:
d9:64:fb:84:90:0d:69:0a:85:72:39:2f:ad:a9:52:
e2:1d:a9:c6:7d:91:80:60:7d:ca:84:62:07:5b:d0:
a9:de:24:69:ab:4b:2a:a3:42:2e:f6:73:10:cb:c4:
29:7d:d0:8c:bd:4b:f4:20:9c:19:45:23:7d:30:06:
dd:b4:71:41:19:b5:13:1d:49:06:1c:15:fa:5a:81:
ee:ce:46:c6:75:46:4e:fc:9b:87:1f:6a:79:ad:91:
57:a3:21:3c:ea:c4:f2:e5:ce:c8:2c:39:5f:15:7c:
96:f5:d9:9b:e7:48:ee:7b:eb:da:5c:0c:a7:95:e5:
58:92:f0:bf:38:a0:9e:22:0d:a6:4e:6c:54:88:9c:
ed:76:6a:3a:ca:23:fb:be:9c:14:6f:71:1b:29:5b:
0b:6e:95:83:2f:43:f2:db:e4:1f:22:d1:ae:e2:61:
86:12:09:ab:06:27:6b:d7:70:0c:69:ec:de:31:b1:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.16.0/22
103.233.68.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131604
Signature Algorithm: sha256WithRSAEncryption
63:80:aa:95:52:af:6d:8e:32:90:ea:3e:b6:9e:70:33:64:f8:
78:f0:75:e1:af:fa:93:af:e5:5c:bc:84:75:a1:57:82:b1:29:
73:65:a2:19:dc:2d:cf:b2:23:3b:eb:e1:18:e9:bc:f2:95:6d:
cd:e7:a8:c3:e1:58:c7:7b:be:93:67:14:31:85:49:9b:f0:2b:
6f:c1:e5:41:fe:e8:ea:5e:8e:6a:6b:53:e7:a7:6a:f7:42:13:
29:e7:e6:a8:da:b6:22:1f:c5:43:1d:be:a7:e5:14:a9:b0:6c:
76:3f:89:9a:ee:54:d9:24:10:fd:d5:b8:95:62:b9:9d:15:9a:
fe:21:32:2d:19:0a:25:3d:b5:d2:32:1c:ec:cd:3e:23:a6:87:
98:14:b0:fe:11:9d:de:e5:5f:80:05:04:00:49:f9:21:92:73:
b4:af:3e:49:2a:89:3b:49:af:c5:f7:6d:49:94:18:83:3a:19:
ce:17:e2:3d:28:9a:79:7d:f6:e4:65:5f:23:c1:9c:a3:8b:e0:
16:ae:0c:ef:46:32:7f:a7:9d:12:da:ff:2f:a6:d0:e9:9f:70:
20:34:15:07:0d:cf:82:3d:a4:9f:38:7b:4e:b1:b3:ae:c5:42:
74:dc:40:c1:c2:8a:b5:f9:32:af:b0:12:16:21:a5:80:6c:ef:
dd:d4:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:16 2026 by rpki-client