Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
File:                     F8ECF7672302A7FAB5288522AD64D217665FEF67.cer (raw, json)
Hash identifier:          zDI6bmOb04w/bdVaMa9JzNW9PobI1nNYUD8fM5KQxBs=
Subject key identifier:   F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       2A1C62BD522877E7DC2840864B853E6523B8AFD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 16:00:48 +0000
Certificate not after:    Mon 10 May 2027 16:05:48 +0000
Subordinate resources:    AS: 18424
                          AS: 24168
                          IP: 103.30.44.0/22
                          IP: 121.50.144.0/21
                          IP: 211.79.100.0/23
                          IP: 2405:8700::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1c:62:bd:52:28:77:e7:dc:28:40:86:4b:85:3e:65:23:b8:af:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 16:00:48 2026 GMT
            Not After : May 10 16:05:48 2027 GMT
        Subject: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:2f:6d:52:0b:87:8a:39:50:25:3b:5e:76:
                    ef:e3:35:6c:99:c1:23:a7:30:ad:c0:07:4a:2a:bb:
                    75:b9:0c:69:dd:2a:6f:31:6b:ab:41:59:4c:7f:fd:
                    1c:c7:77:08:6a:27:10:56:2c:85:b6:74:88:3d:5e:
                    5b:f9:92:54:8f:5d:43:87:91:d0:e5:40:6d:96:e9:
                    bc:0d:a0:40:b2:18:9b:31:0e:08:61:fa:9f:cf:47:
                    84:92:84:5b:c2:c6:e5:5c:8d:07:1a:13:e4:c9:97:
                    cf:c6:bd:69:75:95:c8:73:2d:0c:50:0a:65:09:5e:
                    7f:d8:81:6b:d3:c1:4e:94:7d:5f:d7:e8:74:3d:99:
                    e2:17:f9:ff:90:2e:81:f5:c4:bf:67:2b:94:d0:4d:
                    f6:3e:5d:ea:fc:10:d6:16:b9:b3:13:27:57:b4:0f:
                    5c:1d:2c:40:f0:31:7e:59:ca:c6:c3:5d:52:07:73:
                    4c:02:5c:74:93:59:a0:6d:f4:29:b2:45:0c:56:40:
                    75:78:09:e4:2e:e3:1d:ed:81:d0:a1:ef:25:f3:75:
                    b1:0d:d4:af:bc:a4:53:f6:c9:4d:61:28:bd:40:6e:
                    7e:c1:98:26:c8:04:47:b1:3c:81:45:63:2a:e1:db:
                    91:0a:ae:5c:4b:3b:b7:63:36:87:6c:d7:ca:22:49:
                    e9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/22
                  121.50.144.0/21
                  211.79.100.0/23
                IPv6:
                  2405:8700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18424
                  24168

    Signature Algorithm: sha256WithRSAEncryption
         40:7c:65:0c:6b:45:73:0a:4c:9b:a1:33:87:ee:99:39:27:7b:
         0b:4e:d1:bb:b8:a6:9c:aa:19:30:05:87:91:18:24:aa:1d:22:
         96:e4:73:45:e8:40:29:69:1f:9e:b7:6a:02:8c:7d:fe:a8:73:
         04:bd:3d:a5:42:eb:d3:f3:cf:24:5a:b3:0a:db:01:96:33:e1:
         8d:71:24:d9:4f:b8:3c:77:ca:45:e2:82:f2:3d:15:b9:0d:7b:
         5c:39:c7:5f:a1:b0:30:75:4e:3d:ac:5f:66:f9:f2:c8:13:1d:
         e6:54:74:ab:cf:a8:1b:bd:bc:ae:d6:12:22:0a:36:b0:f5:31:
         d7:0e:59:76:49:79:d2:4f:18:12:78:07:47:97:c2:ff:9d:81:
         55:7f:4a:d0:96:c8:b0:8d:7f:bd:2a:cb:57:97:99:ba:95:db:
         a0:60:f7:b4:06:d2:e2:34:ed:1e:d3:a5:38:9d:b7:5b:44:ff:
         be:f3:3d:06:33:a9:35:94:2e:c7:b2:e8:a3:f0:65:30:76:96:
         1a:6a:53:c9:8b:61:b0:b3:c4:9f:80:26:2e:6d:fc:e6:47:c5:
         93:f4:f0:84:87:cd:f7:21:d7:9b:78:4b:9a:91:4a:35:45:1a:
         2b:fb:01:d6:52:7f:ec:9e:99:60:2d:27:b0:cd:38:38:56:d6:
         90:7b:34:bb
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIUKhxivVIod+fcKECGS4U+ZSO4r9kwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDA0OFoX
DTI3MDUxMDE2MDU0OFowMzExMC8GA1UEAxMoRjhFQ0Y3NjcyMzAyQTdGQUI1Mjg4
NTIyQUQ2NEQyMTc2NjVGRUY2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKAHL21SC4eKOVAlO1527+M1bJnBI6cwrcAHSiq7dbkMad0qbzFrq0FZTH/9
HMd3CGonEFYshbZ0iD1eW/mSVI9dQ4eR0OVAbZbpvA2gQLIYmzEOCGH6n89HhJKE
W8LG5VyNBxoT5MmXz8a9aXWVyHMtDFAKZQlef9iBa9PBTpR9X9fodD2Z4hf5/5Au
gfXEv2crlNBN9j5d6vwQ1ha5sxMnV7QPXB0sQPAxflnKxsNdUgdzTAJcdJNZoG30
KbJFDFZAdXgJ5C7jHe2B0KHvJfN1sQ3Ur7ykU/bJTWEovUBufsGYJsgER7E8gUVj
KuHbkQquXEs7t2M2h2zXyiJJ6fECAwEAAaOCAqYwggKiMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFPjs92cjAqf6tSiFIq1k0hdmX+9nMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr
BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XRUJUQUlXQU4v
MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0VC
VEFJV0FOLzAvRjhFQ0Y3NjcyMzAyQTdGQUI1Mjg4NTIyQUQ2NEQyMTc2NjVGRUY2
Ny5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v
dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEF
BQcBBwEB/wQrMCkwGAQCAAEwEgMEAmceLAMEA3kykAMEAdNPZDANBAIAAjAHAwUA
JAWHADAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgJH+AICXmgwDQYJKoZIhvcNAQEL
BQADggEBAEB8ZQxrRXMKTJuhM4fumTknewtO0bu4ppyqGTAFh5EYJKodIpbkc0Xo
QClpH563agKMff6ocwS9PaVC69PzzyRaswrbAZYz4Y1xJNlPuDx3ykXigvI9FbkN
e1w5x1+hsDB1Tj2sX2b58sgTHeZUdKvPqBu9vK7WEiIKNrD1MdcOWXZJedJPGBJ4
B0eXwv+dgVV/StCWyLCNf70qy1eXmbqV26Bg97QG0uI07R7TpTidt1tE/77zPQYz
qTWULsey6KPwZTB2lhpqU8mLYbCzxJ+AJi5t/OZHxZP08ISHzfch15t4S5qRSjVF
Giv7AdZSf+yemWAtJ7DNODhW1pB7NLs=
-----END CERTIFICATE-----
Generated at Tue May 12 22:38:54 2026 by rpki-client