Certificate

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
File:                     9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer (raw, json)
Hash identifier:          NkYxG/h4Rt1pwefQxJnRgofY92tH8E3V+PaJnUfuoD0=
Subject key identifier:   9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       1885072B2993DF3007F69D543AE18E1C11024505
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Tue 01 Sep 2026 07:39:00 +0000
Certificate not after:    Tue 31 Aug 2027 07:44:00 +0000
Subordinate resources:    AS: 7483
                          AS: 131603
                          IP: 43.251.56.0/22
                          IP: 103.42.144.0/22
                          IP: 103.129.136.0/22
                          IP: 103.229.50.0/24
                          IP: 202.148.216.0/23
                          IP: 211.73.98.0/23
                          IP: 223.26.8.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:85:07:2b:29:93:df:30:07:f6:9d:54:3a:e1:8e:1c:11:02:45:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: Sep  1 07:39:00 2026 GMT
            Not After : Aug 31 07:44:00 2027 GMT
        Subject: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:7a:51:2b:6a:49:3e:9c:8c:ed:aa:51:af:
                    fd:35:d2:cf:88:3e:b0:2c:9f:ff:66:1b:be:8a:a5:
                    11:37:d9:96:6c:0c:de:60:04:a9:f2:15:4d:90:fb:
                    00:df:83:c9:cf:65:dc:b4:05:57:78:1a:ce:9f:9d:
                    83:43:ff:04:03:a6:ab:fc:8b:41:66:42:fa:a4:2e:
                    13:c0:46:48:98:2e:bd:a0:88:a4:de:92:32:6d:6e:
                    74:96:fa:c2:a2:0a:3b:6a:97:1e:3e:2b:c9:38:41:
                    66:5f:95:22:c1:1b:6f:7f:00:7e:1d:55:1f:08:5e:
                    41:43:b5:fd:b0:f5:ec:2b:77:2f:2a:1b:a0:1e:3f:
                    8c:54:c5:2f:c2:8c:fc:21:a2:34:70:8b:c7:14:b2:
                    33:a4:49:91:9e:9f:1f:39:ed:87:43:2d:3a:5d:37:
                    3e:36:1a:18:48:77:68:be:ad:f3:fd:21:a1:c3:51:
                    ca:43:e9:05:1d:01:ab:e9:43:9e:89:25:c4:2c:bc:
                    f9:d3:6d:57:7c:b6:c1:75:e1:32:c2:28:67:0b:10:
                    f1:bc:eb:fe:f8:a6:c8:e6:dc:dd:18:8b:f9:e2:c6:
                    8d:9d:51:35:18:9c:63:01:99:d3:7f:be:28:f8:9d:
                    d5:45:78:2b:d3:28:2c:24:9b:97:80:2f:2e:30:61:
                    bd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.56.0/22
                  103.42.144.0/22
                  103.129.136.0/22
                  103.229.50.0/24
                  202.148.216.0/23
                  211.73.98.0/23
                  223.26.8.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7483
                  131603

    Signature Algorithm: sha256WithRSAEncryption
         44:63:8d:c0:aa:dc:a8:74:09:59:d9:34:b0:7d:47:43:17:f4:
         2d:f5:f6:ba:8f:94:65:d2:29:0d:0b:d2:1f:c9:7f:36:77:49:
         45:ce:0b:33:7a:7b:82:d5:9b:ba:3d:34:7f:1c:bc:74:01:3f:
         a9:82:06:02:4b:6b:95:f9:a8:3a:54:78:04:a1:c1:70:62:77:
         ea:56:a1:5e:9d:65:58:24:11:9c:cc:63:ff:97:79:94:2d:7d:
         55:73:a9:cd:65:b3:f5:7a:df:bf:e2:d6:54:d0:74:4e:86:95:
         f3:cb:bf:8b:81:e3:dd:8a:a2:c7:62:a2:95:a4:46:ad:62:e2:
         3a:f0:c3:0a:0d:5c:2a:73:ba:a5:a7:88:2f:64:85:cb:3e:10:
         4e:37:2b:b9:6f:92:1b:a8:63:45:8e:1e:76:dc:e4:4c:b7:78:
         4b:f8:89:f3:c7:77:39:42:48:46:b5:b2:f7:42:dd:fc:82:04:
         9d:99:99:ef:6c:c2:13:76:05:bf:8f:30:7f:6c:2e:fe:c8:2e:
         2c:30:c8:82:fb:32:58:d8:0b:55:68:3b:56:e0:fe:96:f3:1e:
         0c:3e:85:2d:8d:77:e7:46:c7:4f:78:3c:da:36:b3:08:73:15:
         d4:ff:9b:82:8a:6b:0b:27:c3:df:a0:7c:d1:f9:68:0c:c9:92:
         b2:41:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:06:46 2026 by rpki-client