Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
File: pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer (raw, json)
Hash identifier: u0mIn168MuRs5mfr1+WVTcoQjdOe7dN7UmdqiDZyN2s=
Subject key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3AD0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:14:41 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: AS: 131662
IP: 103.123.128.0/22
IP: 103.135.16.0/22
IP: 2403:a2c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 Aug 2025 23:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15056 (0x3ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 22 08:14:41 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:39:a9:f9:a2:6f:cc:c9:57:41:b8:87:65:
bd:b3:a3:a1:62:9c:5e:0c:c8:36:6d:70:2c:02:c3:
9c:28:a9:7f:41:66:19:c9:1e:2f:9f:25:50:96:08:
ba:ac:80:f5:02:fd:90:19:05:37:10:14:4f:a4:55:
4d:66:12:8e:82:39:32:9a:9d:00:e0:31:c0:f9:6c:
81:92:ae:65:3b:34:18:3e:51:a6:b3:90:bb:a4:3c:
f3:0e:1d:bc:27:58:30:11:e2:eb:85:f4:e4:4e:c8:
1f:70:d6:f5:d2:99:31:8b:17:3b:95:b0:54:f0:5c:
17:6d:b2:b0:2c:bc:83:63:99:07:7e:e6:b5:57:be:
73:b4:66:61:77:17:a1:d1:f3:8c:d2:d0:87:42:37:
45:49:ab:62:a6:da:1d:3c:f9:33:ae:4d:33:9e:ff:
9e:0f:46:c1:54:33:c2:56:da:af:cb:67:0b:e2:2f:
23:9f:4b:5e:b6:25:86:f5:08:66:fc:f2:67:0e:59:
4f:ef:73:c6:0a:57:a7:a4:b9:d4:ec:df:b2:c3:63:
02:c0:c4:97:5c:3e:4b:69:8a:43:a5:aa:e9:b1:96:
65:18:cd:b2:7d:ab:fd:47:f9:bb:1e:86:59:5d:b9:
20:41:96:ab:53:56:f7:69:91:39:28:2f:e8:f5:2a:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131662
sbgp-ipAddrBlock: critical
IPv4:
103.123.128.0/22
103.135.16.0/22
IPv6:
2403:a2c0::/32
Signature Algorithm: sha256WithRSAEncryption
04:28:50:d9:84:56:61:c4:e0:d1:bc:8c:06:e9:67:c9:f6:82:
87:58:6b:de:42:68:99:ae:56:26:69:c7:da:a1:bc:70:27:f0:
53:26:81:e8:56:f8:99:25:47:d3:c7:40:1f:86:84:1a:50:e2:
3a:ef:bc:b8:78:fd:4d:30:d9:06:3c:38:8d:df:ca:08:61:83:
fc:a6:25:ea:d4:42:3d:72:53:84:39:dd:9e:a0:56:30:70:74:
95:17:37:bc:f8:6b:ed:78:06:62:3b:c1:2f:6f:84:6c:35:01:
15:70:eb:57:d4:78:74:eb:08:12:29:1f:a7:9b:76:a9:7f:b2:
51:17:02:83:be:7d:d3:56:8b:9c:82:33:be:54:9b:d0:c6:93:
f7:de:7e:ec:f8:1c:28:d1:fd:6d:4c:fa:15:42:98:2b:c9:6b:
7a:66:e8:50:6a:7a:9b:6e:29:f0:ca:9d:3c:8a:e0:d0:89:54:
d3:22:37:61:ec:ce:67:a7:31:4f:cf:a5:96:2f:d3:a8:ac:ad:
c2:38:1e:4f:d4:b1:d5:c6:2a:1a:56:30:dc:6d:a0:62:fc:3c:
bf:ca:8c:39:23:7d:da:6b:32:5c:ec:5d:8a:c0:15:8c:cd:dc:
6b:9c:bc:7f:62:b7:8e:75:07:b1:fd:e2:af:3f:02:8d:ad:2c:
3c:62:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:29:27 2025 by rpki-client