Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
File: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer (raw, json)
Hash identifier: Fod9UiqOCz72amaoB1IYBS2jw0iRF1ohDd6CvNollz0=
Subject key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 5113
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 27 Feb 2026 03:02:51 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 2.58.240.0/22
IP: 151.158.6.0/23
IP: 151.158.26.0/23
IP: 151.158.88.0/23
IP: 151.158.160.0/23
IP: 151.158.168.0/23
IP: 151.158.224.0/23
IP: 2001:7fa:1::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20755 (0x5113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:02:51 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:2d:6c:a6:63:34:42:4a:08:60:2c:3e:bf:
15:b8:8e:13:65:ca:b0:aa:4c:99:3c:d5:f8:49:6e:
ea:d2:42:e0:48:c8:2a:c4:81:4b:f3:50:2d:36:4a:
14:e6:b7:5e:1e:fa:05:f0:8f:fe:0a:a9:e6:63:f8:
fd:60:7d:b8:ed:09:a8:51:f7:27:e2:fa:cd:28:63:
ec:c3:6a:a2:ab:6b:77:39:74:16:1a:0c:28:3c:09:
08:be:a0:94:51:d9:c1:3e:a9:67:ba:92:95:68:ca:
d0:a7:a2:10:5b:cb:e6:5a:8c:e2:01:c1:8d:94:22:
4c:41:f6:69:ae:35:51:da:a0:23:56:d8:64:ed:ce:
90:75:ba:fd:85:28:22:85:38:e9:14:25:1b:2a:cd:
40:56:66:5b:ad:0e:b7:eb:8c:61:a5:3b:90:43:09:
74:14:4b:21:73:a9:84:dd:43:dd:c1:bf:25:24:72:
8b:01:84:0f:62:56:f7:31:93:89:83:26:17:49:e5:
ce:84:71:a2:7c:2e:26:5b:56:a9:4d:17:28:39:76:
d1:2c:ca:53:5d:f0:80:c1:d4:34:68:87:f1:4a:fb:
b3:ca:21:6b:14:5b:fd:4e:db:cc:90:b6:65:a4:48:
e3:e5:8d:e5:f9:00:3c:c4:dd:44:f3:f8:ef:1b:09:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
2.58.240.0/22
151.158.6.0/23
151.158.26.0/23
151.158.88.0/23
151.158.160.0/23
151.158.168.0/23
151.158.224.0/23
IPv6:
2001:7fa:1::/48
Signature Algorithm: sha256WithRSAEncryption
31:f9:00:7d:73:96:a9:c8:c3:a7:33:c6:6d:7b:51:60:a9:6f:
f0:9d:49:04:2b:bd:a7:d9:d5:2d:98:21:cb:c1:2c:38:3d:a1:
92:5c:25:fb:a6:90:91:fa:7e:ff:af:70:62:58:dd:12:e8:05:
94:7a:95:71:f2:98:a2:b9:ca:af:8d:7b:00:89:62:ef:95:1f:
f4:88:09:2b:54:99:d2:ed:84:e0:15:a7:c9:92:ec:a1:81:f4:
8c:2f:9f:bb:38:3a:40:cc:9d:f5:1d:57:e3:f3:b7:6d:88:22:
41:d1:81:ab:65:22:f6:ba:38:7a:ab:d5:36:98:48:cd:39:01:
7b:55:db:d9:52:cc:f6:f5:b1:d4:74:cd:8d:cd:e3:18:11:e5:
76:81:60:65:cf:4e:1d:53:3d:79:be:12:10:fc:82:b1:f6:e0:
d9:37:a0:50:38:b5:26:49:2e:e7:c6:0e:d9:17:fe:06:3b:de:
ee:b3:13:18:10:f3:85:a6:6f:e7:03:54:ed:5b:04:d7:9a:9b:
2c:c2:5f:90:3d:52:99:2c:3e:d6:51:3c:d3:98:8f:6d:71:54:
28:4b:23:e5:e7:50:aa:6b:00:60:34:5e:ac:17:cd:18:9b:54:
66:5b:3e:ee:3b:06:1e:d3:5e:7d:43:91:76:73:e4:d6:f7:ea:
9a:a2:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:10:02 2026 by rpki-client