Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
File: df5TxhG0_Vaz9oMZ7spiifPw8qk.cer (raw, json)
Hash identifier: 0PogGjk2CSsk+g9sfiT7KvrIpjd6waeQ8D1ZA7lWN1Q=
Subject key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3B10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:14:44 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: AS: 4782
IP: 61.56.0.0/20
IP: 61.57.32.0/19
IP: 61.60.0.0/17
IP: 61.67.64.0/19
IP: 117.56.0.0/16
IP: 124.199.64.0 -- 124.199.111.255
IP: 163.29.0.0/16
IP: 210.69.0.0/16
IP: 210.241.0.0/17
IP: 211.79.128.0/18
IP: 223.200.0.0/16
IP: 2001:4420::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 Aug 2025 23:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15120 (0x3b10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 22 08:14:44 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:2c:bb:26:c9:8c:69:f1:36:ae:8f:3e:70:
f3:bd:d9:a6:7b:bd:38:f3:59:81:fc:9b:0d:9c:f3:
3b:45:ad:0f:c7:86:b1:dc:69:1b:0f:fb:f7:be:82:
24:af:6e:d8:ef:9c:b2:81:4d:63:ff:b2:27:13:27:
75:3b:c8:a1:fe:a4:ed:26:0f:d1:1f:a3:33:9d:2a:
31:a0:84:4a:03:2e:50:21:53:16:79:0f:8d:16:b4:
72:b2:61:77:e5:7e:8b:78:a2:88:ae:ae:59:a0:03:
c5:48:21:1a:ee:af:57:3d:d5:7d:8d:50:d6:20:dc:
a3:f2:34:a2:b4:72:41:25:ae:7e:b2:f2:f9:81:14:
5b:46:9e:9e:d8:ae:d4:79:29:2c:1e:15:25:ed:58:
ce:a2:b3:2d:be:16:49:73:37:0b:31:e7:d7:7c:88:
77:1e:17:48:80:81:f2:26:e4:28:62:c3:df:2b:70:
7b:e2:49:4b:91:b2:0a:72:54:80:a9:b1:46:f6:ea:
8d:47:e0:53:7c:44:9d:cb:1a:3a:04:94:3b:a2:ee:
c9:39:bc:6b:25:ed:75:8e:a6:58:07:7d:2a:0f:a3:
35:3a:af:e2:75:6e:4a:4a:45:aa:c5:3b:08:16:d8:
c2:c1:1c:7e:3e:c8:88:88:a5:44:b6:b5:b3:61:1b:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4782
sbgp-ipAddrBlock: critical
IPv4:
61.56.0.0/20
61.57.32.0/19
61.60.0.0/17
61.67.64.0/19
117.56.0.0/16
124.199.64.0-124.199.111.255
163.29.0.0/16
210.69.0.0/16
210.241.0.0/17
211.79.128.0/18
223.200.0.0/16
IPv6:
2001:4420::/32
Signature Algorithm: sha256WithRSAEncryption
4a:ca:69:e1:e7:a9:89:72:60:fe:0d:e6:0a:91:46:e1:6c:51:
95:c3:92:89:0a:8d:c8:93:98:6f:66:2e:fc:8c:f2:90:a2:96:
7c:4a:90:9c:85:07:7e:65:d2:0f:16:58:1b:a2:4a:5c:57:8b:
b8:31:2d:2f:27:e2:e2:5e:bb:58:75:c7:28:dc:ab:a3:11:00:
f4:a7:11:0e:92:10:37:21:40:96:60:ea:13:98:64:6b:89:c8:
f5:a1:bb:d0:c4:e3:5d:9a:02:6c:d3:a0:7d:a4:50:63:fd:c9:
e2:ba:d8:48:5e:56:75:91:72:b6:5d:a8:0c:06:56:d1:7e:15:
09:61:62:0c:78:d6:90:a6:7c:ba:e8:8e:66:a3:50:70:83:b6:
58:3d:81:f5:a2:b3:d3:79:73:0e:57:a9:61:db:fd:74:58:db:
ce:e8:cd:7b:15:d2:8c:03:74:89:87:6a:7a:cd:b1:b0:df:88:
3a:1b:9e:8e:f5:c1:68:68:6e:b0:08:1e:e7:10:bc:0d:39:4d:
d4:ad:02:4e:1e:0f:47:86:6a:c3:01:30:df:f4:25:c2:1e:68:
a4:c4:49:8a:30:83:be:7f:95:e3:63:4a:a7:1d:05:b6:48:78:
5f:ae:89:8e:6a:ae:78:89:ff:18:55:11:c8:8a:4f:19:5f:22:
d0:02:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:39:48 2025 by rpki-client