Certificate
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
File: 27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer (raw, json)
Hash identifier: RCtiwSEwo2JOfxq1K0SYYoMkyq7hkbs0XJ3qFD0si7c=
Subject key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 19A1A7DE3AB5FBAFE6C8964EE311174771BB3DDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
caRepository: rsync://rpkica.twnic.tw/rpki/DWT/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Fri 11 Sep 2026 09:39:01 +0000
Certificate not after: Fri 10 Sep 2027 09:44:01 +0000
Subordinate resources: AS: 9675
AS: 131622
AS: 131641
IP: 103.136.60.0/23
IP: 211.73.106.0/23
IP: 2404:8cc0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 22:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a1:a7:de:3a:b5:fb:af:e6:c8:96:4e:e3:11:17:47:71:bb:3d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: Sep 11 09:39:01 2026 GMT
Not After : Sep 10 09:44:01 2027 GMT
Subject: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:9e:6a:b4:2f:68:78:3d:6d:e2:f6:da:f6:
9f:d9:2e:09:15:24:10:85:77:ac:b7:c8:a7:15:b8:
2d:9f:24:3d:04:ec:a8:61:bc:71:54:f8:d1:f7:69:
34:b7:8a:6e:f3:89:f9:fb:3b:2f:08:d5:d1:c6:d6:
bf:07:05:71:95:9a:33:a2:36:e5:42:22:89:a3:7b:
81:03:55:99:ed:40:bf:2d:16:29:d1:a6:21:c2:8d:
bc:1d:ed:3e:aa:18:bd:b5:92:b3:8f:d4:f2:bc:90:
83:14:82:de:7d:08:68:fc:a2:72:37:1c:28:0a:42:
fb:52:46:b4:a5:1d:f6:77:3e:87:68:af:3c:30:ca:
0d:fa:0e:da:39:2e:32:c7:13:07:3f:a9:eb:82:4b:
47:9d:27:60:ee:42:f8:92:8c:6d:da:ad:a3:b1:60:
1b:77:47:7e:23:5b:65:85:35:cd:fc:3b:8a:cf:4b:
c0:3d:37:aa:cf:70:26:d8:81:d2:54:5c:32:aa:c6:
8f:5d:e4:9c:2b:8c:8e:8a:57:d2:0b:b8:6b:59:d9:
b9:db:56:28:a6:0a:cb:45:93:9b:06:77:b8:6a:15:
cd:28:b1:5c:d4:c6:9a:4f:d5:fc:24:72:09:9d:a0:
6f:89:02:af:74:3d:44:1c:1f:87:02:a5:95:80:51:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/23
211.73.106.0/23
IPv6:
2404:8cc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9675
131622
131641
Signature Algorithm: sha256WithRSAEncryption
87:d7:73:fe:31:65:6b:39:58:68:1d:94:f6:ef:b4:7b:6e:a9:
b5:29:31:cf:0e:44:01:e2:58:10:ae:ce:4d:8e:67:86:69:74:
c6:9b:4f:d0:32:fb:dd:54:63:b0:e3:11:1e:2b:b0:d1:67:44:
96:a4:3e:ef:94:42:e4:66:a1:fd:73:0a:15:65:8d:a2:79:99:
89:f3:2a:7d:7a:76:65:ae:8b:ca:09:25:b0:e7:d3:e9:90:95:
05:cf:12:c3:59:b6:ba:3d:0a:ab:c9:58:c0:28:09:d8:36:e5:
13:b2:54:5b:45:33:e7:72:20:72:b2:e1:e3:63:7b:c2:76:7b:
53:0c:4f:b4:74:f9:23:df:df:04:e7:86:4b:e6:fa:49:c2:e9:
c0:8f:2e:ba:b4:e9:d5:8c:30:e5:5b:b8:e3:19:51:90:b3:56:
0a:bb:fc:a8:5b:cd:90:aa:79:22:f7:ae:0c:15:e0:8f:11:08:
7a:4a:6c:7e:91:76:3b:f9:9a:bf:8f:0a:60:be:83:97:e0:6f:
cd:e5:17:ea:18:d7:02:94:ce:cc:89:35:00:e5:7f:e7:68:36:
ed:e4:72:4d:50:41:5b:0f:c2:d1:ed:87:c9:14:69:38:6b:b9:
aa:7f:1d:d9:ef:a5:b1:15:10:28:24:38:15:83:2b:6e:26:1c:
e1:c8:4c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:11:51 2026 by rpki-client