Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
File: KkeBVTgnMeXA9oId1TifnlLh5NY.cer (raw, json)
Hash identifier: jrQ2LFfejXgabwZz178E+dQDk3FEO2aaJg0llKubwJ8=
Subject key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3C6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:15:00 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: AS: 17809
AS: 131145
IP: 27.96.224.0/19
IP: 111.67.48.0/20
IP: 113.61.128.0/17
IP: 119.15.192.0/18
IP: 121.254.64.0/18
IP: 182.155.0.0/16
IP: 203.217.96.0/19
IP: 203.222.0.0/19
IP: 210.209.128.0/17
IP: 211.79.112.0/20
IP: 2401:ab00::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 Aug 2025 23:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15466 (0x3c6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 22 08:15:00 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:f3:6e:9a:bf:d3:ae:8b:cf:2d:7c:cf:26:
a4:01:c1:0e:8f:56:d9:a0:4a:1b:86:a2:40:89:24:
3a:c7:65:fd:26:90:72:de:40:88:8a:37:ef:3c:a2:
b1:a9:76:80:21:0c:d3:ef:38:9e:65:a1:97:1b:77:
17:c7:19:a1:10:1b:69:79:48:d9:c4:1a:44:08:9e:
11:7c:6e:5b:b0:68:3a:73:7d:9d:c1:c9:6a:49:ca:
d6:94:d8:96:26:0f:83:c4:ca:f7:84:a8:31:1c:5c:
5c:9b:89:74:88:6d:42:fd:7d:7a:0d:f1:1a:e9:60:
0d:62:19:13:1f:d8:b0:88:da:0d:56:83:58:29:c4:
02:59:eb:be:44:9e:ed:1a:2c:31:79:08:60:2e:9c:
10:73:29:b6:63:b8:8d:29:cd:8e:33:43:bf:cd:cf:
62:19:b7:2f:91:66:be:a7:a7:2d:90:5b:76:a6:59:
a8:3b:77:aa:f2:fc:2b:d1:28:02:c9:ed:3c:2f:b5:
4d:98:63:d8:94:7f:cb:74:c5:4e:9c:1e:84:4a:d9:
98:ed:e1:bb:1a:12:aa:55:b6:33:52:43:bc:bd:91:
ea:6d:b8:69:d6:11:34:f6:5b:64:b6:4e:60:5f:8c:
d1:8e:7c:a9:d1:2f:fe:bb:c1:a7:da:ff:17:fc:5f:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17809
131145
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/19
111.67.48.0/20
113.61.128.0/17
119.15.192.0/18
121.254.64.0/18
182.155.0.0/16
203.217.96.0/19
203.222.0.0/19
210.209.128.0/17
211.79.112.0/20
IPv6:
2401:ab00::/32
Signature Algorithm: sha256WithRSAEncryption
07:ad:1b:96:9b:5d:ba:c1:68:b2:79:7b:e9:e1:63:3a:cb:37:
c9:90:f2:51:55:bf:e3:1d:56:6c:d9:a5:fc:92:54:3b:c7:e7:
5b:1c:cc:72:bf:0a:43:bf:fd:53:2b:8e:2f:e1:5d:82:e9:78:
80:20:88:69:dc:fe:40:b3:59:11:af:98:9c:05:35:33:d7:0f:
85:a3:b0:53:74:d6:e6:e5:06:76:4c:8f:90:ba:67:a4:52:93:
66:b8:04:c3:c4:86:a7:ca:71:c5:74:46:64:74:df:05:06:22:
02:94:22:a8:6b:51:28:92:fe:6f:10:d9:5a:17:66:0b:39:1a:
b9:e5:19:fb:c1:97:e2:15:b4:c5:b1:8b:d3:53:d3:25:b2:09:
7b:8b:0a:81:d7:4a:08:3d:ba:28:70:08:91:35:10:56:be:51:
4c:a9:8f:b4:98:4a:46:e0:b9:99:82:87:45:4f:ec:eb:70:81:
47:05:36:9c:4f:31:63:3b:a6:e8:28:91:03:92:b3:94:5b:f9:
cd:b3:61:fd:fa:16:b9:49:09:60:a6:45:83:bb:44:92:d1:9e:
b9:b1:4a:28:8a:6b:6e:8c:2d:91:17:bf:f5:fb:96:db:f6:65:
f4:fa:06:54:55:0c:5a:7e:57:8f:e3:4b:99:27:51:c2:86:21:
a9:f8:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:29:35 2025 by rpki-client