Certificate
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
File: 7F09BA8E95F4407620647B82A775E9C71807F66F.cer (raw, json)
Hash identifier: aKlmMv2X6pvZhgLQFjE4hTaWV3nTTyiYUw7o8J4elhQ=
Subject key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 163B5578CAF9018525FA6B91C6306D5BD02F9937
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
caRepository: rsync://rpkica.twnic.tw/rpki/SIGMA/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Tue 08 Sep 2026 07:25:26 +0000
Certificate not after: Tue 07 Sep 2027 07:30:26 +0000
Subordinate resources: AS: 18419
IP: 61.60.192.0/20
IP: 103.234.204.0/22
IP: 103.234.228.0/22
IP: 124.109.112.0/20
IP: 150.129.72.0/22
IP: 150.129.228.0/22
IP: 180.214.176.0/20
IP: 202.148.218.0/23
IP: 203.121.224.0/19
IP: 211.73.100.0/23
IP: 2402:2580::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3b:55:78:ca:f9:01:85:25:fa:6b:91:c6:30:6d:5b:d0:2f:99:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: Sep 8 07:25:26 2026 GMT
Not After : Sep 7 07:30:26 2027 GMT
Subject: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:9d:77:a7:18:0a:e4:4b:db:a3:7a:1f:30:
51:82:f4:ae:30:3d:49:88:07:91:1b:69:bb:96:57:
65:1e:a9:1b:81:5b:5d:5e:38:2a:f8:3a:3f:2b:bb:
0a:42:8e:a3:ac:08:7a:22:de:d9:09:49:e7:dd:55:
b2:52:14:ae:e0:a4:fa:af:a5:bb:bf:2b:4f:a1:c8:
8c:0c:92:52:22:97:92:f1:46:c7:91:37:e5:94:22:
a3:21:a7:60:d0:f9:fe:4c:ee:31:31:99:28:0e:e7:
db:50:ae:ab:fe:b5:74:47:4c:37:34:52:ed:6e:ba:
98:ed:fd:9c:1e:26:a5:cf:4c:da:6f:bb:33:e3:12:
a4:a7:b8:36:46:50:49:b9:81:2d:b2:12:32:82:5e:
6d:89:5e:ab:ef:2f:54:76:39:3c:5b:d5:50:68:03:
74:59:e0:ae:cd:ba:26:ed:92:4b:73:f3:92:e7:40:
1d:bf:de:c9:20:69:d9:fa:63:3d:7c:77:e4:c9:c3:
e7:42:59:59:a1:cc:93:b7:ac:5d:30:8d:04:a4:87:
cf:ad:eb:81:97:8b:36:e2:9d:8f:5c:fe:26:5c:4d:
5e:b2:67:28:1e:89:9b:bf:86:78:d8:39:67:b1:ea:
a8:0a:23:37:91:e9:e8:8e:ba:41:50:cf:00:2d:31:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.60.192.0/20
103.234.204.0/22
103.234.228.0/22
124.109.112.0/20
150.129.72.0/22
150.129.228.0/22
180.214.176.0/20
202.148.218.0/23
203.121.224.0/19
211.73.100.0/23
IPv6:
2402:2580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18419
Signature Algorithm: sha256WithRSAEncryption
89:22:ab:e6:16:6b:24:fa:fb:dc:76:51:75:a4:60:63:1d:da:
e9:73:97:1c:ce:db:81:3a:a1:d1:cf:1c:8c:e9:b0:fc:84:c7:
d7:60:0f:4a:f4:32:48:1d:89:a3:65:84:ed:20:c4:d6:72:a0:
f0:a3:8b:03:ed:a7:c8:fe:3d:80:c9:67:95:0c:88:72:81:ab:
bb:21:82:2a:8b:a3:1e:48:c1:24:85:10:a5:d7:a3:f9:ef:d7:
fc:a2:c3:47:65:16:11:8d:23:53:0b:f0:6a:9f:7d:0f:94:30:
ff:bd:6f:b9:ee:13:1a:b8:79:6c:04:e6:e9:31:18:9f:11:f9:
be:01:a0:b5:02:dd:65:f5:72:13:55:0b:3c:df:97:7d:ca:ca:
18:81:a5:a0:46:aa:7e:e4:7e:d9:b1:06:ae:b5:51:6b:f2:ed:
09:23:12:b7:26:6f:ef:af:c0:e0:82:ef:fa:4c:a8:28:c5:9d:
fe:2c:89:92:62:14:f6:5d:2b:e3:93:5d:ba:59:3b:6e:ff:29:
ff:6e:e5:76:4d:42:d3:21:84:0e:c5:26:c0:58:69:c9:78:ff:
c3:d5:75:a4:22:8c:93:80:8c:12:e4:62:e8:23:1a:94:bf:97:
9a:0b:43:96:85:a4:d0:17:a3:ed:01:0f:e9:cd:e7:52:46:12:
36:0d:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:29 2026 by rpki-client