Certificate
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
File: 8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer (raw, json)
Hash identifier: Ugq3fwPcorOhAbniKyD387l5oVAJfyNANb2eGsRZQms=
Subject key identifier: 8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 2A4E36D812D7E14D515C25A0A0EA5341FEBAB9D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
caRepository: rsync://rpkica.twnic.tw/rpki/RAID/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Fri 11 Sep 2026 09:39:00 +0000
Certificate not after: Fri 10 Sep 2027 09:44:00 +0000
Subordinate resources: AS: 18423
IP: 103.156.242.0/23
IP: 211.73.108.0/23
IP: 211.79.104.0/23
IP: 2406:9040::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 22:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:4e:36:d8:12:d7:e1:4d:51:5c:25:a0:a0:ea:53:41:fe:ba:b9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: Sep 11 09:39:00 2026 GMT
Not After : Sep 10 09:44:00 2027 GMT
Subject: CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:a9:74:a6:1d:09:9b:f9:42:de:a8:12:39:
e3:7e:da:8d:b5:a7:95:3d:78:3c:04:ce:63:7c:d3:
f0:3b:72:15:ec:bd:c9:85:e8:c8:ef:a7:a2:6f:d8:
34:37:f0:0a:30:c5:3e:db:28:f3:58:a3:dd:92:e3:
e8:00:1b:b0:b3:30:1d:6d:d4:fc:13:4e:9c:78:5f:
17:50:f6:7c:95:ee:09:be:c9:4d:f8:80:ba:73:d6:
2d:80:1c:e9:13:24:23:0f:2e:79:5a:0b:f1:3a:b2:
e7:e8:b7:4c:94:57:17:d1:59:5c:61:e6:ed:42:83:
68:82:8b:ad:51:a0:38:e8:ca:f2:00:42:34:ec:15:
4b:88:e0:c9:0a:b9:d0:a3:a9:d4:3e:d8:06:ac:71:
73:ac:ec:f0:aa:1c:2f:02:19:c2:47:c8:c3:78:dd:
1c:8c:f1:61:51:09:e6:50:85:ae:40:e6:e1:8f:dd:
ea:b2:59:ef:cc:a6:08:29:1b:23:27:e9:45:f4:b2:
a2:51:bd:f0:90:2b:db:ac:f8:e7:5f:f1:ef:ea:fd:
e5:81:4f:ee:3c:64:2a:bb:64:7a:60:0d:85:8e:e1:
a8:85:a4:05:50:31:31:23:67:f1:10:f5:e2:a3:1c:
c2:09:84:d8:be:de:18:1a:5b:e4:84:37:ae:c5:63:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/RAID/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.242.0/23
211.73.108.0/23
211.79.104.0/23
IPv6:
2406:9040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18423
Signature Algorithm: sha256WithRSAEncryption
79:bd:58:44:d1:82:c6:1e:17:c9:17:de:62:96:6c:67:d1:fa:
e7:8f:11:4d:3c:be:53:83:ed:86:25:ed:55:76:45:fd:fa:f2:
dc:d4:ad:48:91:e5:ad:8f:9b:95:b7:76:c6:2d:a3:83:af:e6:
86:6b:e4:6b:97:72:78:8d:e0:31:00:f7:3d:e6:00:8c:36:87:
fa:c1:43:ed:46:f4:f1:28:95:55:cb:39:ef:9e:23:c0:29:43:
be:a7:12:7f:53:ea:d9:09:ea:82:7b:e4:38:2a:e6:45:a9:d4:
77:10:9f:28:a3:83:3d:36:b6:ba:5d:31:3c:3d:ca:44:c5:70:
48:2b:12:64:ec:7a:64:f0:65:84:4b:73:64:a2:b1:c9:a2:31:
2e:89:bb:94:c3:ed:a6:48:cf:05:d8:10:95:bc:99:51:42:c2:
7c:cd:bc:bd:93:bf:fe:55:af:19:72:ab:2e:32:88:1b:ec:a9:
ec:86:0d:51:2b:99:3d:8f:d4:65:ee:ea:fd:37:c0:cb:33:71:
f3:72:c0:78:8a:3d:1c:07:54:e0:d0:f7:7a:6c:a3:2e:a3:12:
5f:54:86:31:ca:02:0e:2f:0c:82:85:7b:74:d0:e6:e1:1e:fa:
91:3f:9e:ea:51:33:16:ca:6f:93:b6:eb:52:9a:66:84:6c:9d:
3f:e1:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:31:47 2026 by rpki-client