Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
File: 4CWCsCflcDjqAKPoSE1V3uouGio.cer (raw, json)
Hash identifier: vU+NZGPqQfBS/Xuy5cCFwGZeLUIWxsHFDAJO9+02LhQ=
Subject key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3C28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:14:57 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: AS: 18049
IP: 27.100.64.0/18
IP: 49.213.128.0/17
IP: 58.99.0.0/17
IP: 61.58.128.0/19
IP: 61.60.224.0/20
IP: 61.67.16.0 -- 61.67.47.255
IP: 103.180.22.0/23
IP: 116.118.128.0/18
IP: 211.73.160.0/19
IP: 2403:5200::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 Aug 2025 08:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15400 (0x3c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 22 08:14:57 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:4e:e9:62:a3:df:ce:68:1a:41:39:fc:d2:
dc:ce:19:e9:52:dd:86:ca:85:f9:9b:84:f7:54:59:
2e:fe:8f:e9:b7:8b:f4:ed:d6:cb:56:68:cd:36:d4:
55:f3:0c:f7:88:07:3d:c7:d9:f5:4b:41:be:2c:54:
cc:98:45:5e:b5:a4:b7:5c:2b:2f:45:9a:2d:c4:67:
51:c1:a1:f3:33:46:d4:a4:db:7c:2e:61:33:e0:30:
10:c0:9d:e1:ce:d7:72:6c:22:cf:b8:f7:35:1f:22:
46:25:bc:ec:11:f5:33:a2:c3:78:ca:50:e9:26:b9:
79:21:89:0a:32:42:a7:a5:0d:95:7a:ab:85:3b:80:
3e:62:44:97:4f:6b:11:a5:09:eb:b5:62:0d:54:b1:
6e:a3:b9:c9:90:14:02:6c:05:7f:e6:4e:72:2d:db:
01:dd:1c:96:b1:dc:b2:6c:ee:ec:a5:34:28:03:f2:
51:e4:2d:0f:88:36:b9:8d:a6:86:ba:df:f1:45:29:
8e:f1:df:c5:87:5a:97:70:32:9d:07:df:ac:47:73:
e5:79:f8:0e:aa:cb:05:d0:a6:74:d9:12:e4:f5:15:
d5:a2:43:61:77:cd:e7:02:d9:15:16:ee:da:4c:a6:
46:ad:3c:fb:9a:84:da:7b:61:d8:97:bc:ce:e0:1a:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18049
sbgp-ipAddrBlock: critical
IPv4:
27.100.64.0/18
49.213.128.0/17
58.99.0.0/17
61.58.128.0/19
61.60.224.0/20
61.67.16.0-61.67.47.255
103.180.22.0/23
116.118.128.0/18
211.73.160.0/19
IPv6:
2403:5200::/32
Signature Algorithm: sha256WithRSAEncryption
2a:9b:87:97:da:55:73:89:10:19:27:11:20:cc:30:81:9e:82:
6b:b2:d9:85:7c:3f:e9:3b:22:6f:3d:22:f4:ec:94:b2:73:4c:
4d:65:22:16:ed:2d:2d:6e:92:4a:97:4a:a0:55:a2:1a:13:6f:
91:e0:c7:e0:63:4b:6c:7e:8e:25:b1:5c:ce:55:8b:be:56:69:
ce:94:b4:26:c1:aa:24:45:00:45:99:34:87:fa:be:cd:f8:ef:
2e:6b:e8:5a:43:1e:a1:6e:c1:06:01:e6:d7:dc:14:56:0a:92:
e7:fc:09:41:75:d3:52:56:a1:8c:24:bd:90:58:69:68:d1:44:
56:06:ae:dd:49:98:3e:c5:2b:c5:3d:5a:28:e9:20:4a:92:52:
1a:50:31:a2:19:f7:c0:71:92:a5:4f:7f:87:c4:d4:b8:5d:7a:
d0:1b:55:57:53:46:61:19:cc:48:ed:41:44:38:23:10:c9:59:
0e:98:24:d9:d0:ed:b8:ee:73:1f:7e:39:20:40:2b:84:2b:04:
a5:36:22:39:2b:44:1f:92:ec:5b:6d:f4:73:8b:2f:05:4f:dc:
91:31:74:32:70:2c:90:bc:44:c6:22:de:23:5d:32:83:28:a0:
bf:d3:f6:d6:0c:0f:26:89:55:5f:1e:e2:ac:be:36:96:ed:0a:
cf:34:5d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:37 2025 by rpki-client