Certificate
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
File: 66D96CED70B44D758AE1282092DC175FEFC03195.cer (raw, json)
Hash identifier: Mu/o0TnHGi3S++43ku4dLJkIbpuNL1ChbxDwpoLxmYw=
Subject key identifier: 66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 35476F6A8482BFAA982E0974A4DDB4FF4DF2D846
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
caRepository: rsync://rpkica.twnic.tw/rpki/LEYUN2/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Sat 29 Aug 2026 12:39:01 +0000
Certificate not after: Sat 28 Aug 2027 12:44:01 +0000
Subordinate resources: AS: 152885
AS: 154863
IP: 163.52.48.0/23
IP: 2402:7160::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:47:6f:6a:84:82:bf:aa:98:2e:09:74:a4:dd:b4:ff:4d:f2:d8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: Aug 29 12:39:01 2026 GMT
Not After : Aug 28 12:44:01 2027 GMT
Subject: CN=66D96CED70B44D758AE1282092DC175FEFC03195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:c0:16:61:5d:4d:45:aa:89:f0:75:62:e4:
7f:78:87:eb:3a:ca:0f:68:6d:a7:c6:f3:ae:36:54:
8c:8b:4c:e5:cc:ba:ee:c1:5b:ce:a9:20:cf:d5:0a:
cf:da:3c:51:87:97:74:72:71:0e:b4:c4:76:ca:4f:
43:d1:b9:12:37:de:88:75:11:3c:8c:da:dd:b1:11:
64:7d:e6:35:0f:82:39:d3:3b:a8:de:61:28:36:66:
0f:2e:24:9f:76:47:ec:84:74:99:20:04:fe:74:e4:
a8:98:06:ec:3d:21:d9:8d:af:b2:a7:18:3b:14:47:
be:a6:6c:f4:97:8b:58:85:69:c0:64:51:97:af:df:
97:f2:4a:f1:0b:23:7d:c3:fe:b0:20:b1:da:a1:06:
b2:63:a2:a5:bc:45:a7:d8:47:67:0c:23:92:38:9e:
81:62:c8:71:d8:cb:85:24:c6:a9:b2:1e:6f:4f:ba:
ae:35:ba:b9:7b:31:65:71:1c:2a:85:28:2f:44:9b:
d8:20:45:cf:3c:f5:38:83:ec:80:72:4f:80:98:aa:
1d:d1:91:ca:0d:83:b0:3f:ae:c5:a2:da:36:c5:89:
d4:d3:db:88:bf:4d:04:5b:db:ac:13:f8:88:87:4a:
53:4b:22:38:f0:b0:dd:53:6d:74:cd:a7:0b:7d:5d:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.52.48.0/23
IPv6:
2402:7160::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152885
154863
Signature Algorithm: sha256WithRSAEncryption
85:05:30:df:41:f9:16:13:7c:45:1b:07:c8:69:f5:24:78:5e:
c1:d8:1a:9c:39:20:ac:23:f4:0b:fa:b1:cc:2e:a2:fe:d8:a4:
c7:71:77:9a:4b:7a:b8:ba:06:8f:1f:e5:30:74:dc:a9:ef:f0:
bc:43:bc:1a:3c:97:f1:0e:fe:09:0d:4c:54:5e:a6:d3:b2:a4:
4d:0f:8b:0a:53:ed:c4:bb:e3:29:2c:ae:d7:f9:0e:88:d1:c3:
24:bf:cd:73:51:38:13:28:7b:0b:a9:8d:ca:ab:20:ae:97:e6:
be:e9:65:b6:e9:8e:9d:4b:7e:8d:ac:53:4b:fc:18:12:5b:1e:
a1:61:40:1d:02:51:46:85:8d:de:4c:52:53:7e:ee:71:9b:b7:
e1:49:cd:7b:ea:d8:34:3f:4e:34:a5:f5:8b:d2:99:7a:43:5a:
d9:c2:13:f3:c2:f4:6e:fe:21:09:2d:ad:31:d2:8f:d6:d3:bb:
0f:ea:a2:cf:01:0d:61:6a:1c:34:48:06:2e:51:68:5f:c0:11:
b7:38:f0:b0:ff:a5:3d:8b:46:16:a8:8a:98:f6:fc:87:df:e0:
c4:fc:89:2a:1f:e7:6a:c3:0c:f0:e7:f6:95:12:0e:82:d6:54:
a3:7f:7c:f6:63:ac:19:04:63:70:29:2a:87:6e:a2:98:65:c0:
2c:5a:62:60
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIUNUdvaoSCv6qYLgl0pN20/03y2EYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDgyOTEyMzkwMVoX
DTI3MDgyODEyNDQwMVowMzExMC8GA1UEAxMoNjZEOTZDRUQ3MEI0NEQ3NThBRTEy
ODIwOTJEQzE3NUZFRkMwMzE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALNjwBZhXU1FqonwdWLkf3iH6zrKD2htp8bzrjZUjItM5cy67sFbzqkgz9UK
z9o8UYeXdHJxDrTEdspPQ9G5EjfeiHURPIza3bERZH3mNQ+COdM7qN5hKDZmDy4k
n3ZH7IR0mSAE/nTkqJgG7D0h2Y2vsqcYOxRHvqZs9JeLWIVpwGRRl6/fl/JK8Qsj
fcP+sCCx2qEGsmOipbxFp9hHZwwjkjiegWLIcdjLhSTGqbIeb0+6rjW6uXsxZXEc
KoUoL0Sb2CBFzzz1OIPsgHJPgJiqHdGRyg2DsD+uxaLaNsWJ1NPbiL9NBFvbrBP4
iIdKU0siOPCw3VNtdM2nC31dNpsCAwEAAaOCApYwggKSMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGbZbO1wtE11iuEoIJLcF1/vwDGVMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr
BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MRVlVTjIvMC8w
XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVZVU4y
LzAvNjZEOTZDRUQ3MEI0NEQ3NThBRTEyODIwOTJEQzE3NUZFRkMwMzE5NS5tZnQw
NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAaM0MDANBAIAAjAHAwUAJAJxYDAfBggrBgEFBQcBCAEB
/wQQMA6gDDAKAgMCVTUCAwJc7zANBgkqhkiG9w0BAQsFAAOCAQEAhQUw30H5FhN8
RRsHyGn1JHhewdganDkgrCP0C/qxzC6i/tikx3F3mkt6uLoGjx/lMHTcqe/wvEO8
GjyX8Q7+CQ1MVF6m07KkTQ+LClPtxLvjKSyu1/kOiNHDJL/Nc1E4Eyh7C6mNyqsg
rpfmvulltumOnUt+jaxTS/wYElseoWFAHQJRRoWN3kxSU37ucZu34UnNe+rYND9O
NKX1i9KZekNa2cIT88L0bv4hCS2tMdKP1tO7D+qizwENYWocNEgGLlFoX8ARtzjw
sP+lPYtGFqiKmPb8h9/gxPyJKh/nasMM8Of2lRIOgtZUo3989mOsGQRjcCkqh26i
mGXALFpiYA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:38 2026 by rpki-client