Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer
File: pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer (raw, json)
Hash identifier: 0M/Q/Ur96PfA36rIj3MyS47czVJoz6X5ZcJtJVubTmM=
Subject key identifier: A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3BA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:14:51 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: AS: 131607
IP: 27.0.152.0/22
IP: 103.207.252.0/22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 Aug 2025 23:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15268 (0x3ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 22 08:14:51 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=A6FE5D1C93127E4AAEFF100F3A5C330F2DD1ABC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:01:b2:11:d4:00:b6:70:39:d0:ae:3e:fd:
d8:0e:fd:3e:f1:5b:19:1b:f1:79:49:0d:b0:a4:0b:
56:a7:c0:79:7c:56:a0:e0:d7:4d:c2:17:16:ff:fd:
84:0b:68:9b:15:7c:87:b2:11:24:95:68:37:dc:6b:
7b:48:34:12:a4:ee:2a:fc:7c:1a:9f:a4:8f:29:d4:
ec:b3:4d:d4:03:27:31:71:01:a2:ba:bd:b5:14:be:
6c:5e:b6:50:07:90:ff:87:bf:4c:9e:0f:fe:f3:1e:
40:e1:b3:ba:93:73:98:22:d3:33:c9:19:2a:25:a9:
12:71:0a:96:1b:1b:15:14:0a:00:38:5a:58:b9:7d:
d6:13:c2:8f:23:73:46:77:67:c6:36:5e:75:19:6b:
f5:7f:c2:00:5a:40:8c:17:8c:ce:b7:bb:73:e0:f9:
f0:22:e2:73:0c:26:fb:41:45:fb:2a:b3:78:2d:98:
72:97:b3:18:cb:c9:1c:1b:b4:50:56:ad:2b:55:4d:
83:7d:06:64:f0:14:06:ce:ee:05:fa:d4:69:67:e9:
c8:57:69:85:83:d8:cd:f9:fe:ce:c9:37:a1:5c:c7:
0d:c8:df:81:16:ac:74:c6:db:c0:08:b2:09:b2:70:
65:1a:dd:54:fd:e9:c9:f1:6f:94:9a:a0:45:b6:4b:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131607
sbgp-ipAddrBlock: critical
IPv4:
27.0.152.0/22
103.207.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:c2:09:a3:9a:26:dd:7e:cb:eb:9c:cd:c1:73:f9:b4:41:fc:
c3:ad:8f:74:37:f1:b2:6b:3c:eb:76:d0:a5:f4:8f:90:78:48:
76:3b:42:d0:8e:57:a9:2c:a1:97:2d:83:7c:27:da:ba:73:89:
d3:7f:be:61:1c:29:17:59:e2:1a:5b:a1:8a:e9:b9:51:e0:f5:
ce:f0:60:1d:55:55:91:cb:39:02:a9:5a:73:da:08:c1:63:c4:
76:7e:a1:2c:74:4d:06:a8:6b:5a:b7:9a:0c:68:03:d6:ee:98:
78:d0:74:99:61:94:b9:23:d8:a5:9c:64:03:05:b9:bf:d9:e7:
50:01:b8:7f:3c:84:f5:b2:24:e9:0b:a6:46:0e:f5:e1:f4:73:
ad:65:d1:73:7e:d7:27:25:c3:5e:bf:a7:34:3e:c0:a6:3f:c9:
17:df:ec:1a:51:d9:f8:bd:89:4a:7b:0d:d2:67:47:fc:5e:f3:
61:ec:45:2d:7f:cb:7b:d2:cc:18:3d:e3:09:eb:54:dc:f4:98:
de:d5:f9:ce:08:73:bd:80:e2:3a:8d:ee:08:4e:cf:68:75:ac:
5c:11:f0:f0:7b:11:24:b7:b1:b8:db:7f:03:f4:e9:8e:90:7d:
fa:2a:27:35:db:bb:3b:41:38:65:89:b8:c0:89:c2:cd:55:31:
8c:5e:dc:f2
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgICO6QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ1MVoXDTI2MDgyMjA4MTQyOFowMzEx
MC8GA1UEAxMoQTZGRTVEMUM5MzEyN0U0QUFFRkYxMDBGM0E1QzMzMEYyREQxQUJD
MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALm/AbIR1AC2cDnQrj79
2A79PvFbGRvxeUkNsKQLVqfAeXxWoODXTcIXFv/9hAtomxV8h7IRJJVoN9xre0g0
EqTuKvx8Gp+kjynU7LNN1AMnMXEBorq9tRS+bF62UAeQ/4e/TJ4P/vMeQOGzupNz
mCLTM8kZKiWpEnEKlhsbFRQKADhaWLl91hPCjyNzRndnxjZedRlr9X/CAFpAjBeM
zre7c+D58CLicwwm+0FF+yqzeC2YcpezGMvJHBu0UFatK1VNg30GZPAUBs7uBfrU
aWfpyFdphYPYzfn+zsk3oVzHDcjfgRasdMbbwAiyCbJwZRrdVP3pyfFvlJqgRbZL
0/8CAwEAAaOCAm4wggJqMB0GA1UdDgQWBBSm/l0ckxJ+Sq7/EA86XDMPLdGrwDAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF
hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENUVi8wVQYI
KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9E
Q1RWL3B2NWRISk1TZmtxdV94QVBPbHd6RHkzUnE4QS5tZnQwMQYIKwYBBQUHMA2G
JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAgIXMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC
GwCYAwQCZ8/8MA0GCSqGSIb3DQEBCwUAA4IBAQB9wgmjmibdfsvrnM3Bc/m0QfzD
rY90N/GyazzrdtCl9I+QeEh2O0LQjlepLKGXLYN8J9q6c4nTf75hHCkXWeIaW6GK
6blR4PXO8GAdVVWRyzkCqVpz2gjBY8R2fqEsdE0GqGtat5oMaAPW7ph40HSZYZS5
I9ilnGQDBbm/2edQAbh/PIT1siTpC6ZGDvXh9HOtZdFzftcnJcNev6c0PsCmP8kX
3+waUdn4vYlKew3SZ0f8XvNh7EUtf8t70swYPeMJ61Tc9Jje1fnOCHO9gOI6je4I
Ts9odaxcEfDwexEkt7G4238D9OmOkH36Kic127s7QThlibjAicLNVTGMXtzy
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:39:27 2025 by rpki-client