Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
File: RXsQNypobj_3Nla-tc0968kyNxo.cer (raw, json)
Hash identifier: cFX5yI9edbvCeFtvTN9kuOlhoQWKtKBVsUQFq4xBk14=
Subject key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 1DB3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:15:07 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: IP: 134.208.0.0/16
IP: 140.109.0.0 -- 140.138.255.255
IP: 192.83.166.0 -- 192.83.196.255
IP: 192.192.0.0/16
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 Aug 2025 23:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7603 (0x1db3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Validity
Not Before: Aug 22 08:15:07 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:25:77:c2:25:bc:d3:39:e1:9d:02:fa:47:
dd:bf:1a:5d:b8:a9:d8:d8:eb:00:de:6d:d1:56:8d:
4b:04:6f:7f:5f:43:e1:71:da:32:36:db:a0:2b:74:
c2:ac:98:3d:35:e5:51:70:5e:9d:a3:0d:3e:a6:15:
e5:25:f6:11:b8:a4:da:d9:93:c6:2c:58:8d:91:1e:
52:e4:aa:4d:f3:88:31:33:9a:cc:f3:f0:97:5f:44:
29:b5:2b:07:eb:88:0e:59:9e:15:42:04:4c:ae:36:
79:4a:a3:04:ab:ae:a8:b4:9b:a0:5b:96:cb:80:a9:
ce:c2:30:50:1c:e7:e8:c7:d0:9b:30:4f:91:d1:38:
1a:b6:5f:92:98:8e:2f:cd:ec:31:f7:1b:40:b8:36:
77:f6:90:fe:42:96:fe:b3:9c:bd:e5:b2:54:88:14:
cb:86:6a:53:c7:e0:24:a0:60:a9:ee:25:62:cd:b8:
67:ab:f0:ea:1f:47:fe:aa:d4:7c:99:70:fd:b0:14:
4f:4e:f8:62:59:8f:ab:4b:d2:b6:06:4d:c7:84:a8:
d1:22:89:2c:96:f3:da:0e:c4:f6:1d:f4:5e:a5:9c:
02:d8:f9:e5:9a:b8:e5:4c:a3:64:1b:9f:f5:05:28:
ac:1e:0f:c4:b4:6a:32:57:4e:48:dc:4b:95:f8:06:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
134.208.0.0/16
140.109.0.0-140.138.255.255
192.83.166.0-192.83.196.255
192.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:de:e7:bb:25:0d:eb:0c:a7:52:47:48:84:da:1c:cf:35:44:
90:20:88:bf:0f:af:65:b7:5a:ec:a7:41:3c:32:40:7a:01:de:
b0:cf:58:b7:f9:a1:0f:90:2f:b1:08:35:63:42:58:f0:19:77:
f0:cd:2e:57:86:42:89:a3:db:6d:70:17:d2:bc:be:5a:9f:58:
6f:c1:b1:83:d5:64:22:c9:15:9e:62:fc:a4:a2:4a:d7:fa:ac:
d1:d0:03:59:64:05:a0:7c:30:53:02:09:af:aa:c2:9a:df:cd:
16:6d:04:4a:ad:47:36:a7:91:e8:6c:e3:f5:e4:71:e6:63:34:
47:8a:7b:43:40:d6:3a:fa:16:02:76:b2:96:fb:c8:4d:6b:31:
38:74:1c:c7:19:df:f4:8b:a7:6d:fe:69:6d:87:a0:cf:77:f1:
41:2b:f8:57:84:20:5d:9a:6e:a1:19:3d:c3:c0:19:8b:6b:e6:
fe:e0:80:e5:2e:8e:3e:f9:6a:74:a6:02:c7:d2:3b:cf:56:19:
f9:51:af:77:76:3c:4a:12:4e:4f:7c:14:01:3d:d4:63:d6:a8:
2c:fa:88:5b:27:a8:a2:24:38:71:52:52:ea:b7:e4:f6:ad:93:
04:51:00:f4:14:e2:29:c8:66:71:0c:d2:d5:b6:00:14:85:a8:
44:a5:19:99
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgICHbMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF
RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTUwN1oXDTI2MDgyMjA4MTQyOFowMzEx
MC8GA1UEAxMoNDU3QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcx
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJ5JXfCJbzTOeGdAvpH
3b8aXbip2NjrAN5t0VaNSwRvf19D4XHaMjbboCt0wqyYPTXlUXBenaMNPqYV5SX2
Ebik2tmTxixYjZEeUuSqTfOIMTOazPPwl19EKbUrB+uIDlmeFUIETK42eUqjBKuu
qLSboFuWy4CpzsIwUBzn6MfQmzBPkdE4GrZfkpiOL83sMfcbQLg2d/aQ/kKW/rOc
veWyVIgUy4ZqU8fgJKBgqe4lYs24Z6vw6h9H/qrUfJlw/bAUT074YlmPq0vStgZN
x4So0SKJLJbz2g7E9h30XqWcAtj55Zq45UyjZBuf9QUorB4PxLRqMldOSNxLlfgG
Sk0CAwEAAaOCAmwwggJoMB0GA1UdDgQWBBRFexA3KmhuP/c2Vr61zT3ryTI3GjAf
BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy
L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF
hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQvMFYG
CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
VEFORVQvUlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLm1mdDAxBggrBgEFBQcw
DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDA9BggrBgEF
BQcBBwEB/wQuMCwwKgQCAAEwJAMDAIbQMAoDAwCMbQMDAIyKMAwDBAHAU6YDBADA
U8QDAwDAwDANBgkqhkiG9w0BAQsFAAOCAQEAnd7nuyUN6wynUkdIhNoczzVEkCCI
vw+vZbda7KdBPDJAegHesM9Yt/mhD5AvsQg1Y0JY8Bl38M0uV4ZCiaPbbXAX0ry+
Wp9Yb8Gxg9VkIskVnmL8pKJK1/qs0dADWWQFoHwwUwIJr6rCmt/NFm0ESq1HNqeR
6Gzj9eRx5mM0R4p7Q0DWOvoWAnaylvvITWsxOHQcxxnf9Iunbf5pbYegz3fxQSv4
V4QgXZpuoRk9w8AZi2vm/uCA5S6OPvlqdKYCx9I7z1YZ+VGvd3Y8ShJOT3wUAT3U
Y9aoLPqIWyeooiQ4cVJS6rfk9q2TBFEA9BTiKchmcQzS1bYAFIWoRKUZmQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:37:31 2025 by rpki-client