Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
File: GKZmPW6fgL1M58it_rOHg8PhpGQ.cer (raw, json)
Hash identifier: pTOmkL9QH9jEtgdkdk2rXS/pFwe/P/cU2tN9ma1OOlU=
Subject key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3B5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:14:48 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: AS: 4636
AS: 4747
AS: 7541
AS: 9921
AS: 9924
IP: 43.240.24.0/22
IP: 49.214.0.0 -- 49.219.255.255
IP: 60.198.0.0/15
IP: 61.30.0.0/15
IP: 61.57.0.0/19
IP: 103.224.132.0/22
IP: 124.8.0.0 -- 124.12.255.255
IP: 124.108.128.0/18
IP: 175.96.0.0/14
IP: 202.132.0.0/16
IP: 202.145.32.0 -- 202.145.255.255
IP: 203.65.160.0/19
IP: 203.77.0.0/17
IP: 203.105.224.0/19
IP: 203.211.0.0/19
IP: 210.17.0.0/17
IP: 210.62.0.0/18
IP: 210.62.192.0/19
IP: 210.63.128.0/18
IP: 210.67.144.0 -- 210.67.223.255
IP: 210.192.0.0/18
IP: 210.192.128.0/17
IP: 210.208.96.0/19
IP: 210.208.192.0/18
IP: 210.243.64.0/18
IP: 211.78.208.0/20
IP: 211.79.0.0/19
IP: 219.80.0.0/15
IP: 219.86.0.0/15
IP: 2001:c50::/32
IP: 2001:4540::/27
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 Aug 2025 23:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15198 (0x3b5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 22 08:14:48 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:28:92:2b:b3:9d:95:7a:e9:53:0c:d3:fb:
d0:68:49:44:1d:ff:05:69:ed:c8:90:74:c1:72:80:
24:0b:5e:5d:4b:3c:10:d0:dc:fd:34:9a:ea:37:e8:
f9:b5:b7:b2:c5:a9:11:f9:ea:8c:6c:8f:86:74:48:
bf:29:cc:7b:6f:0b:b3:4e:2c:5d:14:d8:26:6c:44:
6c:11:c4:1f:b6:6a:e2:a7:1f:d5:f1:5a:dc:92:26:
32:fe:5e:bf:6e:bc:9d:64:ae:21:ed:ef:39:ee:2b:
76:d1:20:33:70:f0:3b:6c:4f:12:11:61:bc:ee:22:
66:55:b6:5a:0e:74:e6:a8:3d:a6:8d:df:a0:ba:06:
33:78:17:cf:d2:61:08:ae:91:33:e8:ad:b6:dd:97:
53:ef:b8:91:e4:1a:21:8b:aa:42:8d:44:2d:09:90:
a7:8f:72:c9:c5:5e:3f:14:2a:3b:15:13:8c:2a:e1:
e1:fe:e6:8c:24:7f:ec:39:a3:fc:99:7f:7f:a4:6d:
b1:c5:69:5a:8b:a6:31:24:02:53:f7:44:b5:7b:21:
fc:bf:ad:bb:79:24:51:1c:46:8f:30:ef:ff:02:42:
11:bd:df:26:e5:9a:55:3b:07:f3:10:ca:3d:37:26:
a3:69:b6:d7:cd:7f:fe:ea:c9:7a:2c:a1:0a:bc:18:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4636
4747
7541
9921
9924
sbgp-ipAddrBlock: critical
IPv4:
43.240.24.0/22
49.214.0.0-49.219.255.255
60.198.0.0/15
61.30.0.0/15
61.57.0.0/19
103.224.132.0/22
124.8.0.0-124.12.255.255
124.108.128.0/18
175.96.0.0/14
202.132.0.0/16
202.145.32.0-202.145.255.255
203.65.160.0/19
203.77.0.0/17
203.105.224.0/19
203.211.0.0/19
210.17.0.0/17
210.62.0.0/18
210.62.192.0/19
210.63.128.0/18
210.67.144.0-210.67.223.255
210.192.0.0/18
210.192.128.0/17
210.208.96.0/19
210.208.192.0/18
210.243.64.0/18
211.78.208.0/20
211.79.0.0/19
219.80.0.0/15
219.86.0.0/15
IPv6:
2001:c50::/32
2001:4540::/27
Signature Algorithm: sha256WithRSAEncryption
76:00:0c:e0:27:5d:51:2b:8d:e0:f6:2b:52:a8:98:d0:a2:e8:
94:2b:e8:c9:38:4f:ae:1a:3e:97:3c:f7:89:b1:96:3c:19:93:
2a:e5:9a:7b:d1:84:9c:eb:2e:cd:71:72:05:4a:21:b8:83:4c:
bc:27:08:13:e0:d9:2a:48:29:b7:a0:30:9f:fa:02:12:33:95:
f7:b5:81:84:24:3e:0c:31:5a:19:48:6d:53:dc:50:e4:36:d7:
94:ad:6b:3c:50:8c:0b:9e:f4:a9:ab:88:7e:22:3f:d8:22:46:
60:b7:cc:96:5b:85:26:38:82:45:30:69:e8:3e:e9:5d:62:65:
a4:69:d1:02:b7:3d:51:b9:29:0d:93:85:7d:39:e9:1a:ab:14:
fc:44:a9:f4:cd:0d:a3:9b:d7:aa:75:14:20:79:ae:25:01:b3:
4d:24:c8:f4:24:66:17:10:ea:16:41:0d:1f:38:8f:f5:5e:13:
a0:66:9f:16:d7:96:3d:0f:9d:0a:dc:0b:4a:27:58:01:38:1f:
d0:67:70:e3:de:53:57:9a:20:1b:25:4b:4a:58:85:40:4e:7f:
65:9f:3f:8d:85:4d:92:60:2b:22:f0:33:bf:14:88:5a:62:43:
a0:61:59:29:2f:23:79:9e:f4:bb:9b:fd:a9:6d:2e:f3:a3:be:
4c:af:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:30:25 2025 by rpki-client