
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer
File: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (raw, json)
Hash identifier: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=
Subject key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26
Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Certificate serial: 53242727179EF7D52373F2F6810E7DAF6990EB9A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Manifest: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft
caRepository: rsync://rpkica.twnic.tw/rpki/PNI/1/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:55:55 +0000
Certificate not after: Mon 10 May 2027 16:00:55 +0000
Subordinate resources: IP: 187.79.240.0/21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:24:27:27:17:9e:f7:d5:23:73:f2:f6:81:0e:7d:af:69:90:eb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Validity
Not Before: May 11 15:55:55 2026 GMT
Not After : May 10 16:00:55 2027 GMT
Subject: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6e:52:f6:d6:01:51:53:fd:e6:9e:c8:4d:0b:
50:3c:90:20:cd:33:ef:7e:b5:f6:c4:bd:64:1e:06:
e2:e3:c8:4f:ad:59:88:c3:2a:a0:fc:e4:cc:87:9a:
98:cf:2b:cf:8a:33:9d:e6:36:a4:68:04:9e:e1:b4:
5c:20:17:77:87:3d:45:6e:f4:40:2b:65:8e:01:56:
ea:0c:36:00:3d:ba:f1:df:0b:50:a9:01:88:23:2e:
8a:89:7d:46:09:82:58:db:08:36:2e:8e:85:dc:c6:
10:84:8d:76:8a:e4:dc:a6:5b:e7:1d:20:59:5c:c6:
88:25:e3:ac:70:cf:ab:a9:26:ac:b1:69:dd:b7:c7:
e2:25:55:28:c9:fc:52:49:ba:19:b0:4c:c9:ce:7e:
d2:f9:5d:0a:c4:2a:01:2b:26:93:1c:f5:df:b6:5d:
86:f1:49:99:d2:a9:2b:c3:ca:71:b8:85:a0:04:0a:
f2:df:34:e8:cd:cb:df:a8:11:90:ae:a3:b5:73:c0:
8f:5d:24:ed:a6:e1:21:a1:af:26:7e:04:9a:20:82:
4d:3f:c4:ac:f0:7a:20:7c:0a:db:5c:78:3a:d6:22:
9b:f6:9f:3c:3a:ae:10:01:1c:9e:af:d2:e9:48:71:
b7:e6:97:af:bb:c2:86:d5:7c:23:1b:87:ed:95:bf:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26
X509v3 Authority Key Identifier:
keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.79.240.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:1b:35:01:f3:6c:cf:4b:c6:e6:3b:12:9a:26:3c:04:86:a5:
47:25:67:36:6d:ed:f2:69:b3:5b:e5:42:2b:54:84:e3:05:97:
eb:8e:d2:4d:b2:06:17:4f:23:33:6f:9e:a5:5a:ac:47:2c:7f:
f8:54:50:e6:92:e6:bf:5f:13:57:81:51:35:e3:fe:64:9c:9c:
98:2c:0c:c0:6d:c3:8d:51:87:d1:5e:4b:04:72:b4:fa:26:71:
d3:9d:5b:ef:1a:2f:37:a0:42:59:64:0f:a2:62:39:2b:11:58:
19:7c:b9:1f:45:62:ca:2d:d0:59:dd:d3:5e:46:d4:1d:a6:b0:
48:15:82:32:8d:ef:9e:8e:ce:e3:5d:11:ac:ef:98:fc:9a:2d:
28:e8:83:b2:ec:8c:f2:4e:0c:13:6e:f8:00:04:33:aa:40:2d:
b6:b1:c6:44:a1:db:e2:ce:7e:60:d0:4b:9a:8c:d7:d6:d9:62:
e7:a3:df:cb:d8:a7:90:b6:ec:c7:cf:00:2c:10:86:bb:f5:30:
18:55:3c:3d:8d:47:75:e5:86:5e:67:04:e8:c3:9d:a4:78:57:
5b:8a:c0:2b:2f:18:3f:95:7e:6d:d0:97:58:e4:28:ad:fc:2e:
b9:81:0f:e9:74:26:71:86:50:89:12:94:1b:11:5f:e3:87:bc:
87:fa:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:09 2026 by rpki-client