Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
File:                     bWxcv87Lp5h5UREtqhh__LYgTiY.cer (raw, json)
Hash identifier:          GuyhrNNwfo9FxjMifvKeJF/lWTrOmFJ0Iu+TEyCXPwI=
Subject key identifier:   6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3BC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 22 Aug 2025 08:14:52 +0000
Certificate not after:    Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources:    AS: 18179
                          IP: 103.16.244.0/22
                          IP: 103.20.176.0/22
                          IP: 211.78.240.0/20
                          IP: 2404:db00::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Aug 2025 23:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15298 (0x3bc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 22 08:14:52 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:bc:26:e1:21:dc:41:0d:90:2f:21:6f:c9:
                    62:76:84:5a:d8:26:6b:5f:f7:d4:4e:33:76:ef:e3:
                    67:3c:c4:3d:32:2f:86:87:13:69:d6:09:b4:18:b7:
                    e5:18:fb:f4:2f:f1:fb:2e:5b:b4:67:e9:2d:b0:a0:
                    f1:89:83:8b:4b:75:94:d2:e7:fa:da:06:1f:03:f5:
                    cf:af:ac:98:92:b4:7c:98:44:b9:eb:4b:5d:06:56:
                    4b:b5:00:03:1d:41:26:db:96:0e:06:fa:0e:56:8d:
                    bb:56:e8:b5:0b:e3:62:78:f1:d9:2d:4a:6f:36:19:
                    c6:8f:91:54:af:4b:02:08:a6:d3:7d:50:ce:d2:66:
                    70:c6:a8:43:31:dc:77:4b:98:53:9a:ad:5d:ee:14:
                    f4:f3:81:04:c3:ca:57:29:30:62:a9:53:a2:b7:8c:
                    ae:05:de:30:56:56:8b:44:d4:42:ff:b7:a0:2c:11:
                    e5:d9:3e:3c:51:69:97:95:c1:e3:12:51:93:7f:74:
                    76:de:40:a9:03:96:6b:f1:55:0e:83:fa:4d:b0:25:
                    e4:5d:80:2d:60:dc:e0:cd:42:39:87:92:93:3d:95:
                    70:cc:a1:75:2d:fb:7b:14:a9:bc:4e:f0:1f:b5:be:
                    62:44:ff:ab:09:7e:dd:da:a3:13:88:a7:8a:db:5c:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18179

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.244.0/22
                  103.20.176.0/22
                  211.78.240.0/20
                IPv6:
                  2404:db00::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:02:34:04:9a:62:02:d4:e9:7c:f8:0c:b9:61:2a:4d:64:7a:
         c7:65:40:58:36:2e:60:fe:b6:bc:3b:2f:39:2c:27:7f:ca:e1:
         72:8b:f4:e2:5f:1a:37:99:d6:10:62:24:34:33:14:74:01:5f:
         41:f1:38:a0:db:4a:32:ed:65:1a:26:fc:a7:4f:c8:22:a4:73:
         e3:12:38:f7:5e:7a:bd:98:a1:fb:7f:8a:20:d2:4b:2f:a5:bb:
         bc:32:78:86:a7:07:2a:4f:59:71:bd:e3:2d:c2:78:ee:5c:33:
         b1:8e:33:47:b8:62:5b:7d:1f:ef:41:ae:de:f6:42:5e:35:55:
         20:e4:3b:c5:ea:98:34:85:e9:02:93:a0:e7:47:ac:81:c5:47:
         8d:bc:a9:b5:e7:18:4f:0a:51:ce:e9:d2:bc:96:0d:65:15:26:
         d5:6d:bd:74:b0:c6:02:ad:c8:03:53:99:3e:56:96:08:3a:d8:
         ab:ff:63:bf:83:9e:57:50:34:ea:e2:84:1b:dc:22:71:05:ca:
         12:36:54:4f:e6:60:36:66:3c:9b:fe:d5:57:1d:41:29:04:4b:
         ff:38:7a:89:86:8b:e2:e3:a4:df:c2:59:1e:70:d4:86:44:51:
         bc:7d:81:48:af:f7:7d:13:ad:9d:f4:87:54:34:76:3c:5e:3e:
         29:b8:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:27:14 2025 by rpki-client