Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
File: R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer (raw, json)
Hash identifier: S89pNCt9KbH+2eS+FXhFA3TIU44kWtTMrRcUeByouRM=
Subject key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3B9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:14:50 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: AS: 9918
IP: 61.61.0.0 -- 61.61.191.255
IP: 211.78.0.0/18
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 Aug 2025 23:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15258 (0x3b9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 22 08:14:50 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:7b:c4:e1:30:a8:d2:3f:51:6f:93:63:09:
84:cf:d9:88:8b:9f:68:d7:4c:ed:44:7a:b5:c0:3c:
84:8f:8a:06:00:d2:c3:d3:1b:6a:2c:c4:b0:24:34:
83:db:15:44:77:2e:da:ee:dd:b6:fa:47:84:9f:cf:
26:3f:c6:5b:bc:c2:98:d9:bb:c4:03:66:b1:45:9e:
55:6e:e4:69:17:7b:64:7b:4d:86:6d:ce:82:ad:cb:
ae:94:46:61:65:3f:94:d9:89:f6:5d:bd:89:3b:b5:
52:3f:a5:ef:d4:1d:a4:24:24:aa:a9:bb:d4:22:f3:
05:8f:38:b1:5c:04:ba:b1:a4:f0:43:22:35:5e:4c:
3a:72:dd:6c:c7:a9:c2:b7:6c:51:34:91:4b:4f:74:
5d:fd:35:f8:da:57:71:94:f3:3b:e6:aa:fc:ba:57:
cc:5e:cc:d5:6b:1f:8e:00:e5:d9:58:19:ff:51:13:
7d:31:a3:77:30:6d:39:cc:6b:ef:4a:01:a7:53:04:
28:0b:99:79:b1:af:02:44:20:ef:e6:74:c1:41:a7:
ce:c7:cf:fb:d4:3f:97:d2:73:dd:c6:2d:d3:bb:c9:
ff:e4:64:3a:9d:37:ce:90:c2:62:09:1f:59:2b:e3:
46:25:4d:7d:b8:7b:c3:83:a7:9c:0f:99:f2:0b:46:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9918
sbgp-ipAddrBlock: critical
IPv4:
61.61.0.0-61.61.191.255
211.78.0.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:6b:3b:1b:d3:27:e7:12:73:c5:64:7f:59:44:f0:c0:e0:18:
f6:b2:59:99:b7:3c:4e:79:5c:11:bc:b6:c9:d4:37:19:18:13:
d5:29:02:4b:75:47:ec:11:c3:32:35:cd:8d:1f:b3:f3:64:0a:
2d:55:5f:33:fd:af:7c:bf:7e:b6:54:33:19:89:b6:34:8e:2b:
a7:87:0f:6f:0d:1c:f3:46:48:11:d3:84:6e:6a:a6:36:fa:db:
23:9b:e6:b8:9b:14:97:13:a4:94:8f:2b:0b:c7:ea:88:28:2f:
3f:38:e3:03:31:77:1b:4c:8d:48:e2:69:b8:d0:f9:96:0a:b1:
80:ed:72:ed:da:72:6d:dd:02:91:8c:d2:35:cd:2e:10:9f:a4:
5c:53:d2:f1:bb:4e:a5:85:da:d2:e5:96:e6:43:a0:fa:6d:93:
8b:75:6e:dd:25:b4:01:23:f0:90:54:a2:c7:4b:66:ba:55:0c:
ee:7c:2c:9a:df:66:a1:93:e0:8d:5e:61:c6:1b:4c:04:9a:a6:
9e:41:04:02:0c:20:af:d7:ed:04:d5:10:37:92:57:5a:f7:dc:
c4:77:ad:2d:56:ed:47:e7:6e:f8:2f:90:01:88:5a:b1:7b:f4:
02:1e:b5:b3:25:b6:80:52:17:e7:c5:c5:98:6a:30:14:c4:8a:
2a:53:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:43:04 2025 by rpki-client