Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
File:                     9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer (raw, json)
Hash identifier:          OotcDe54l+awDjiNuW2iEuNIEZRJ9z21RcRjqO45AJM=
Subject key identifier:   9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       7DB98C9F7BB0B4CF75795299B4F3D18A701B163D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/NARL/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Fri 05 Jun 2026 09:19:11 +0000
Certificate not after:    Fri 04 Jun 2027 09:24:11 +0000
Subordinate resources:    AS: 7539
                          AS: 9681
                          AS: 18414
                          AS: 18426
                          IP: 103.124.72.0/22
                          IP: 103.160.220.0/23
                          IP: 203.145.192.0/19
                          IP: 211.73.64.0/19
                          IP: 211.79.48.0/20
                          IP: 2001:c58::/32
                          IP: 2001:e10::/32
                          IP: 2001:4500::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b9:8c:9f:7b:b0:b4:cf:75:79:52:99:b4:f3:d1:8a:70:1b:16:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: Jun  5 09:19:11 2026 GMT
            Not After : Jun  4 09:24:11 2027 GMT
        Subject: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:5d:92:da:b0:ab:99:4b:88:4e:eb:41:90:
                    82:f7:19:c7:7c:e7:5c:e8:e5:08:18:38:8c:93:0b:
                    a4:bc:56:04:01:d4:e3:bf:3f:89:ed:3b:2b:8c:19:
                    69:0e:9f:6a:0b:11:8b:ea:70:29:ee:74:74:b7:fb:
                    63:f7:81:32:7f:de:0f:30:f3:13:c7:34:3b:ed:2b:
                    23:dd:12:a3:8a:f9:18:bc:4c:07:56:ef:71:e2:a3:
                    1f:22:30:d5:b0:e6:fd:d6:82:eb:f7:71:d1:32:18:
                    45:38:a7:15:da:58:e4:16:73:83:6e:36:25:00:fa:
                    7d:c8:b5:d1:99:5b:85:d0:40:18:e4:3e:00:73:11:
                    16:0e:30:b7:ae:b5:68:76:51:27:6a:0b:2c:81:26:
                    f5:b8:6f:3c:d4:aa:ff:d0:fc:79:81:df:b0:ea:18:
                    be:5e:d5:03:bc:52:51:17:be:dc:0d:53:b9:ae:73:
                    f3:5e:12:6a:f4:d6:0b:e1:fa:4f:c4:5a:a1:5b:ff:
                    b9:22:49:0e:f5:41:73:60:af:c6:c6:39:18:30:b5:
                    22:40:cc:67:40:0b:2c:43:1e:5e:4e:14:c5:96:5c:
                    c9:b3:f4:69:59:f4:0c:f1:c3:91:55:33:85:b0:02:
                    7f:20:2f:34:59:bb:8b:82:2f:25:f7:49:3b:32:3a:
                    3e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.72.0/22
                  103.160.220.0/23
                  203.145.192.0/19
                  211.73.64.0/19
                  211.79.48.0/20
                IPv6:
                  2001:c58::/32
                  2001:e10::/32
                  2001:4500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7539
                  9681
                  18414
                  18426

    Signature Algorithm: sha256WithRSAEncryption
         20:d1:a9:b1:82:26:b7:78:3b:8c:3c:67:44:13:8d:f4:dc:fd:
         d6:2d:63:22:c4:66:5a:f9:da:a9:0f:80:74:7f:6a:71:3f:50:
         23:2d:c6:a1:dc:81:b4:f8:0c:9a:cd:8f:32:7c:25:57:f6:26:
         1f:a3:24:04:90:22:aa:11:06:96:cd:4e:e1:0b:db:72:62:82:
         63:4e:50:d3:cc:02:1d:54:e9:23:99:b1:de:fc:bc:61:ae:a0:
         51:a6:b5:79:9c:5e:a6:5e:31:08:c0:49:bc:d7:71:b1:f0:cf:
         90:c6:22:a3:7c:92:cc:07:f3:ad:83:7c:12:35:58:b5:20:cf:
         1e:a6:74:90:7b:5d:66:77:d8:71:ff:10:ac:84:17:c6:9e:fd:
         cb:95:a8:7d:ce:e4:28:5d:27:63:c8:26:dc:36:fd:3c:40:54:
         95:83:66:50:8a:e6:90:d4:59:b2:f3:76:b2:80:6d:38:22:ab:
         71:a4:5a:6e:c5:f6:ab:f8:d4:cf:1f:c1:83:62:dd:61:c0:64:
         c8:60:22:b3:4c:c5:b6:60:9c:4b:85:3e:51:bc:90:cf:9a:8e:
         2a:d0:7d:eb:f4:66:15:79:dd:66:29:2d:a5:8f:a0:d6:85:7b:
         ac:23:97:08:a0:b8:a7:93:c9:2f:f8:96:d6:0d:ca:9c:e5:d7:
         bd:a5:81:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:30 2026 by rpki-client