
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.cer
File: F5A640326B228EA83BEE8FECCD06A6CF7E64D657.cer (raw, json)
Hash identifier: BwSSv/5NrlT53Kmk6UJmoLmikemi/wce6axGXMcxhO4=
Subject key identifier: F5:A6:40:32:6B:22:8E:A8:3B:EE:8F:EC:CD:06:A6:CF:7E:64:D6:57
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 595A4224A94BF8228B3587B97F1640341D9C3454
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.mft
caRepository: rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:44:27 +0000
Certificate not after: Mon 10 May 2027 15:49:27 +0000
Subordinate resources: AS: 152613
IP: 2401:bf60::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5a:42:24:a9:4b:f8:22:8b:35:87:b9:7f:16:40:34:1d:9c:34:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:44:27 2026 GMT
Not After : May 10 15:49:27 2027 GMT
Subject: CN=F5A640326B228EA83BEE8FECCD06A6CF7E64D657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:60:27:5b:3b:52:cc:70:8b:ac:13:42:ed:
7d:32:4b:61:bd:79:e1:10:ba:10:f0:5c:99:5d:08:
10:b6:d9:b9:22:c5:b6:f5:3d:97:cf:ba:29:75:5e:
54:f2:83:e6:04:d1:8e:a4:09:0f:9b:e3:34:6d:63:
61:35:09:47:2a:d6:6a:9e:b5:04:65:7b:f4:62:b0:
e6:f2:9d:50:e1:6a:ed:3c:bd:f3:bc:0c:bc:78:c8:
13:4b:eb:35:1b:67:f7:f7:31:09:d3:b6:f0:8a:cf:
05:36:d8:2e:a0:ca:a7:1d:f7:73:16:1f:ea:b4:39:
0f:62:95:e5:1b:91:48:5f:a7:c4:30:54:fc:31:9b:
26:bc:24:85:26:e9:fe:c3:b9:2a:0f:17:46:35:26:
de:b6:90:aa:15:4e:7d:f6:61:e8:e6:5d:af:8a:9e:
d3:9f:e8:1a:ca:e1:ca:a0:7a:2c:47:48:ab:68:23:
99:1e:65:91:9b:48:e1:dd:c5:01:4a:64:8e:59:57:
80:de:af:3d:f2:dd:5c:87:95:01:53:10:87:2d:ea:
14:bc:ae:3d:10:b8:1d:fb:83:ed:3c:d9:1f:a3:1e:
d7:b3:4a:83:e7:c4:2d:d0:0c:0e:40:88:ed:76:7c:
14:ab:08:e3:77:f7:6a:45:d6:fd:be:e8:e9:7a:a9:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F5:A6:40:32:6B:22:8E:A8:3B:EE:8F:EC:CD:06:A6:CF:7E:64:D6:57
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:bf60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152613
Signature Algorithm: sha256WithRSAEncryption
93:0a:c7:ac:6b:cb:b6:5b:64:5e:17:d9:29:14:33:ed:da:a5:
01:69:8e:90:4d:8f:ca:79:3e:cc:1f:f8:61:5e:ad:cc:b0:d7:
7e:8e:87:fd:ce:3c:19:2b:5d:ea:67:6f:ac:ac:60:c9:d5:f3:
bc:7a:d9:44:00:bf:42:93:e1:80:26:e3:c4:40:5c:2f:9c:c5:
ef:8c:cc:2f:98:d4:f3:fa:8e:77:e2:b2:5e:aa:14:90:ab:a8:
9d:36:2e:01:65:48:70:1e:2b:b4:88:ae:b8:9f:c3:2e:11:25:
84:52:08:3c:23:a9:36:72:01:24:6c:a5:2e:ba:55:a1:ea:96:
64:18:35:c3:bd:dd:02:bf:29:40:3f:90:56:b1:dd:4f:35:4c:
01:bd:d6:8e:84:72:6d:f4:e2:f7:7f:33:72:9e:4c:f9:db:9a:
55:94:39:68:cc:68:07:81:94:4e:8c:44:aa:d6:02:71:f1:3c:
d0:cb:53:93:b7:57:6f:0b:56:8b:43:6d:03:55:1f:69:c8:0f:
fe:5d:aa:44:71:ac:4f:b8:cf:ec:58:ed:71:ed:5f:9d:f5:2e:
c3:7c:3f:05:eb:ba:21:63:aa:15:cd:fb:c2:0c:fd:af:ba:eb:
2f:a7:37:b0:f9:46:f1:22:f7:3a:82:e9:b6:d9:52:be:9f:08:
16:da:91:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:26 2026 by rpki-client