Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer
File:                     3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (raw, json)
Hash identifier:          R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=
Subject key identifier:   3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26
Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
Certificate issuer:       /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Certificate serial:       53242727179EF7D52373F2F6810E7DAF6990EB9A
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/PNI/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:55:55 +0000
Certificate not after:    Mon 10 May 2027 16:00:55 +0000
Subordinate resources:    IP: 187.79.240.0/21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:24:27:27:17:9e:f7:d5:23:73:f2:f6:81:0e:7d:af:69:90:eb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
        Validity
            Not Before: May 11 15:55:55 2026 GMT
            Not After : May 10 16:00:55 2027 GMT
        Subject: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6e:52:f6:d6:01:51:53:fd:e6:9e:c8:4d:0b:
                    50:3c:90:20:cd:33:ef:7e:b5:f6:c4:bd:64:1e:06:
                    e2:e3:c8:4f:ad:59:88:c3:2a:a0:fc:e4:cc:87:9a:
                    98:cf:2b:cf:8a:33:9d:e6:36:a4:68:04:9e:e1:b4:
                    5c:20:17:77:87:3d:45:6e:f4:40:2b:65:8e:01:56:
                    ea:0c:36:00:3d:ba:f1:df:0b:50:a9:01:88:23:2e:
                    8a:89:7d:46:09:82:58:db:08:36:2e:8e:85:dc:c6:
                    10:84:8d:76:8a:e4:dc:a6:5b:e7:1d:20:59:5c:c6:
                    88:25:e3:ac:70:cf:ab:a9:26:ac:b1:69:dd:b7:c7:
                    e2:25:55:28:c9:fc:52:49:ba:19:b0:4c:c9:ce:7e:
                    d2:f9:5d:0a:c4:2a:01:2b:26:93:1c:f5:df:b6:5d:
                    86:f1:49:99:d2:a9:2b:c3:ca:71:b8:85:a0:04:0a:
                    f2:df:34:e8:cd:cb:df:a8:11:90:ae:a3:b5:73:c0:
                    8f:5d:24:ed:a6:e1:21:a1:af:26:7e:04:9a:20:82:
                    4d:3f:c4:ac:f0:7a:20:7c:0a:db:5c:78:3a:d6:22:
                    9b:f6:9f:3c:3a:ae:10:01:1c:9e:af:d2:e9:48:71:
                    b7:e6:97:af:bb:c2:86:d5:7c:23:1b:87:ed:95:bf:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26
            X509v3 Authority Key Identifier:
                keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.79.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b6:1b:35:01:f3:6c:cf:4b:c6:e6:3b:12:9a:26:3c:04:86:a5:
         47:25:67:36:6d:ed:f2:69:b3:5b:e5:42:2b:54:84:e3:05:97:
         eb:8e:d2:4d:b2:06:17:4f:23:33:6f:9e:a5:5a:ac:47:2c:7f:
         f8:54:50:e6:92:e6:bf:5f:13:57:81:51:35:e3:fe:64:9c:9c:
         98:2c:0c:c0:6d:c3:8d:51:87:d1:5e:4b:04:72:b4:fa:26:71:
         d3:9d:5b:ef:1a:2f:37:a0:42:59:64:0f:a2:62:39:2b:11:58:
         19:7c:b9:1f:45:62:ca:2d:d0:59:dd:d3:5e:46:d4:1d:a6:b0:
         48:15:82:32:8d:ef:9e:8e:ce:e3:5d:11:ac:ef:98:fc:9a:2d:
         28:e8:83:b2:ec:8c:f2:4e:0c:13:6e:f8:00:04:33:aa:40:2d:
         b6:b1:c6:44:a1:db:e2:ce:7e:60:d0:4b:9a:8c:d7:d6:d9:62:
         e7:a3:df:cb:d8:a7:90:b6:ec:c7:cf:00:2c:10:86:bb:f5:30:
         18:55:3c:3d:8d:47:75:e5:86:5e:67:04:e8:c3:9d:a4:78:57:
         5b:8a:c0:2b:2f:18:3f:95:7e:6d:d0:97:58:e4:28:ad:fc:2e:
         b9:81:0f:e9:74:26:71:86:50:89:12:94:1b:11:5f:e3:87:bc:
         87:fa:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:09 2026 by rpki-client