
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer
File: 76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer (raw, json)
Hash identifier: bsG5HQmQDxBb3GJvTKUWCNvG+lZdyWDpJZdIKzbWb50=
Subject key identifier: 76:A7:E3:7B:E9:87:6B:8A:C3:A3:1B:9E:D3:93:79:96:84:2E:BB:78
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 11AA3B9AE1590D449EEB128D56DE8D59D578D1F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft
caRepository: rsync://rpkica.twnic.tw/rpki/JCA/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Fri 04 Sep 2026 07:19:01 +0000
Certificate not after: Fri 03 Sep 2027 07:24:01 +0000
Subordinate resources: AS: 154879
IP: 103.254.212.0/23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:aa:3b:9a:e1:59:0d:44:9e:eb:12:8d:56:de:8d:59:d5:78:d1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: Sep 4 07:19:01 2026 GMT
Not After : Sep 3 07:24:01 2027 GMT
Subject: CN=76A7E37BE9876B8AC3A31B9ED3937996842EBB78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:89:e7:02:9d:1e:a4:52:1d:1d:35:c5:d2:fe:
a0:f3:08:32:51:57:3f:5e:87:cb:f5:14:6f:a4:e8:
01:79:c1:11:00:98:ab:df:f9:b6:0b:3b:31:fd:83:
7c:b4:a0:17:49:ed:60:ca:5b:99:16:cb:2d:6c:bd:
b1:dd:93:7e:f5:50:ea:e3:7e:a3:37:2a:57:2d:55:
21:66:13:df:c7:96:b9:8b:d5:d3:23:5a:22:8d:73:
2f:f8:ec:65:6e:80:0a:f8:65:aa:f9:c0:0f:8e:26:
e9:35:08:c1:1a:05:fd:ae:52:8e:28:b2:ee:04:15:
cd:7f:de:66:c9:4c:69:48:08:18:b4:92:19:66:ef:
a2:7f:7d:4f:de:42:c3:dc:2e:2e:d0:83:5d:ed:95:
ff:7b:94:9d:4a:a7:55:ff:09:e4:7d:50:4e:5f:b2:
72:12:ac:3d:13:78:99:0c:85:90:7d:9b:df:93:3f:
6a:88:f7:23:96:e1:42:cc:0a:84:f7:96:c4:d4:26:
89:be:25:fd:60:3c:45:49:8d:f5:aa:e3:6e:78:04:
66:1f:bb:59:8f:b4:80:d1:17:80:f1:ca:1f:78:a3:
0c:3d:fd:33:3b:36:91:7f:1e:07:06:ce:19:21:89:
5d:19:4d:3f:83:94:6b:e5:33:27:c9:87:9c:5e:2b:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
76:A7:E3:7B:E9:87:6B:8A:C3:A3:1B:9E:D3:93:79:96:84:2E:BB:78
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/JCA/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.212.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154879
Signature Algorithm: sha256WithRSAEncryption
50:8f:f9:5a:e8:3d:48:f4:2f:6b:7e:8a:04:4d:de:d2:e3:85:
a2:57:c1:95:e6:d2:6d:2a:62:e4:be:b0:3c:bb:33:4f:7a:51:
c8:28:e9:48:1b:72:de:99:ed:b8:26:18:5d:70:97:3c:f8:c2:
6a:19:46:57:0f:97:a0:f5:2c:8a:8e:85:54:50:e8:b0:85:1f:
b3:f4:43:53:29:3e:ff:65:0e:29:26:bd:6b:e6:6a:3d:2c:b3:
ff:93:71:0d:ba:ec:c1:7f:ff:c4:9d:0e:3d:13:a5:bf:a3:5f:
de:7f:e6:c9:ab:ed:8b:9d:29:b4:76:5d:03:89:8d:82:dc:de:
7c:08:77:7f:ab:81:77:b1:96:ca:ee:0a:9d:49:f4:10:5d:6d:
54:4b:28:86:11:78:cb:4e:ec:69:03:3b:20:9e:73:1b:ef:92:
18:1c:1c:88:28:45:f9:5d:35:0b:98:61:16:ee:59:34:ef:b0:
a5:e4:90:f0:9e:f1:48:02:be:2f:39:35:ad:a7:ad:a7:5c:b8:
19:39:df:a0:f0:40:d5:02:9c:66:78:82:29:14:5e:39:5f:8b:
e1:30:ed:ad:f8:cc:da:19:8d:57:38:21:aa:2c:90:a8:e5:f8:
04:86:d1:24:22:7e:fc:e5:a7:d4:b6:37:f8:61:f9:d5:a4:3d:
b6:c8:b8:5a
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIUEao7muFZDUSe6xKNVt6NWdV40fcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkwNDA3MTkwMVoX
DTI3MDkwMzA3MjQwMVowMzExMC8GA1UEAxMoNzZBN0UzN0JFOTg3NkI4QUMzQTMx
QjlFRDM5Mzc5OTY4NDJFQkI3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOqJ5wKdHqRSHR01xdL+oPMIMlFXP16Hy/UUb6ToAXnBEQCYq9/5tgs7Mf2D
fLSgF0ntYMpbmRbLLWy9sd2TfvVQ6uN+ozcqVy1VIWYT38eWuYvV0yNaIo1zL/js
ZW6ACvhlqvnAD44m6TUIwRoF/a5Sjiiy7gQVzX/eZslMaUgIGLSSGWbvon99T95C
w9wuLtCDXe2V/3uUnUqnVf8J5H1QTl+ychKsPRN4mQyFkH2b35M/aoj3I5bhQswK
hPeWxNQmib4l/WA8RUmN9arjbngEZh+7WY+0gNEXgPHKH3ijDD39Mzs2kX8eBwbO
GSGJXRlNP4OUa+UzJ8mHnF4rFxUCAwEAAaOCAnwwggJ4MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHan43vph2uKw6MbntOTeZaELrt4MB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHXBggrBgEFBQcBCwSByjCBxzAvBggr
BgEFBQcwBYYjcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9KQ0EvMC8wWwYI
KwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkNBLzAvNzZB
N0UzN0JFOTg3NkI4QUMzQTMxQjlFRDM5Mzc5OTY4NDJFQkI3OC5tZnQwNwYIKwYB
BQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNhdGlvbi54
bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWf+1DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCXP8wDQYJKoZI
hvcNAQELBQADggEBAFCP+VroPUj0L2t+igRN3tLjhaJXwZXm0m0qYuS+sDy7M096
Ucgo6Ugbct6Z7bgmGF1wlzz4wmoZRlcPl6D1LIqOhVRQ6LCFH7P0Q1MpPv9lDikm
vWvmaj0ss/+TcQ267MF//8SdDj0Tpb+jX95/5smr7YudKbR2XQOJjYLc3nwId3+r
gXexlsruCp1J9BBdbVRLKIYReMtO7GkDOyCecxvvkhgcHIgoRfldNQuYYRbuWTTv
sKXkkPCe8UgCvi85Na2nradcuBk536DwQNUCnGZ4gikUXjlfi+Ew7a34zNoZjVc4
IaoskKjl+ASG0SQifvzlp9S2N/hh+dWkPbbIuFo=
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:24:22 2026 by rpki-client