Certificate

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/B4C4ED6478D0181F9C1CBFF0AD082E8878FC7BB4.cer
File:                     B4C4ED6478D0181F9C1CBFF0AD082E8878FC7BB4.cer (raw, json)
Hash identifier:          +VCf8fki+Hoa2jpy3e0eR98dqdUp+4l36Oa7dbmsTHQ=
Subject key identifier:   B4:C4:ED:64:78:D0:18:1F:9C:1C:BF:F0:AD:08:2E:88:78:FC:7B:B4
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       788909CDED210C3BA82C7DEDE2AC01B470E6C919
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/LINGCAI/0/B4C4ED6478D0181F9C1CBFF0AD082E8878FC7BB4.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/LINGCAI/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Fri 04 Sep 2026 07:19:02 +0000
Certificate not after:    Fri 03 Sep 2027 07:24:02 +0000
Subordinate resources:    AS: 154882
                          IP: 103.20.98.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 12:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:89:09:cd:ed:21:0c:3b:a8:2c:7d:ed:e2:ac:01:b4:70:e6:c9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: Sep  4 07:19:02 2026 GMT
            Not After : Sep  3 07:24:02 2027 GMT
        Subject: CN=B4C4ED6478D0181F9C1CBFF0AD082E8878FC7BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:33:f4:79:f2:06:1e:bd:4e:51:39:d6:9f:
                    9a:62:bd:a0:d3:a1:cb:a2:90:06:d0:9a:78:a1:eb:
                    6b:38:d2:ba:fa:f7:04:f0:3a:fa:0a:d1:ee:41:c6:
                    db:87:6d:1b:f1:e2:ac:50:e1:43:a1:4a:a3:8b:d7:
                    29:4e:37:e5:10:c8:ec:31:94:f5:a1:53:6c:e2:b5:
                    1e:42:b4:48:99:03:e4:66:7c:59:bd:3f:80:b9:d5:
                    7b:43:cd:58:d0:7a:4f:16:4f:3c:08:1e:60:4a:38:
                    6e:bd:db:4c:b1:86:50:e6:7f:48:2a:a9:2b:9d:3e:
                    18:21:17:24:6d:c8:b4:7f:1e:c2:26:71:39:15:d2:
                    19:93:ba:8c:85:de:61:9e:ed:b3:c5:a5:6a:fb:d8:
                    ab:9d:c0:e3:e6:4e:06:b4:e2:87:29:fa:7c:9c:c1:
                    71:80:c6:7f:bf:48:d1:e9:42:02:a9:65:61:e2:63:
                    c4:4d:63:4a:48:bf:52:02:14:66:e4:44:5c:3e:02:
                    1a:fa:de:de:2f:df:f6:ab:47:e1:1b:73:51:73:98:
                    af:51:35:81:f3:6e:9d:d7:85:44:01:d8:7d:4d:cc:
                    ec:50:f3:4c:9a:c1:0c:2a:31:0f:89:de:dd:41:b0:
                    03:18:0a:ab:f2:2e:71:43:59:0f:0e:c9:ed:47:ad:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:C4:ED:64:78:D0:18:1F:9C:1C:BF:F0:AD:08:2E:88:78:FC:7B:B4
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LINGCAI/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LINGCAI/0/B4C4ED6478D0181F9C1CBFF0AD082E8878FC7BB4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.98.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154882

    Signature Algorithm: sha256WithRSAEncryption
         9f:5f:8d:1a:6a:30:9c:44:91:f9:36:77:ff:e5:3b:75:1c:be:
         05:95:9a:ef:04:22:c8:ae:dc:23:e8:93:bd:40:8f:87:16:1a:
         b7:38:5c:8e:44:29:eb:33:6e:45:d9:95:9f:ef:c1:2c:d1:59:
         26:3b:fe:f5:82:81:e4:b7:ed:cc:64:c6:b2:61:93:d3:6c:aa:
         f2:af:68:c3:be:8d:77:40:f3:d9:dd:f9:e2:de:c6:37:28:88:
         78:5d:ae:81:88:79:5b:19:47:e4:36:69:da:f8:28:93:cc:bf:
         a2:bc:06:c3:b2:6b:4d:d5:88:50:5f:ae:7d:fe:41:fd:5e:d2:
         60:a7:0b:64:4b:5b:3c:1d:f7:aa:b7:6e:46:50:f8:4f:92:7c:
         f4:35:34:45:ee:35:ee:72:b3:57:0d:6b:2c:29:85:ae:87:80:
         79:10:c8:17:4a:ec:91:c8:8a:f3:34:20:38:86:c1:fe:09:80:
         aa:71:c2:4d:3d:a1:6d:80:a9:7d:af:ef:68:34:73:96:a1:bb:
         cb:c6:4f:4a:aa:9e:59:3d:f3:6d:00:60:af:96:23:fa:7c:51:
         3e:23:c2:67:09:35:62:93:45:0d:42:33:1e:b6:4c:ff:68:59:
         34:a4:f1:88:6c:98:2e:13:8a:13:69:0d:57:09:b0:e3:e5:9e:
         be:36:fa:fb
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUeIkJze0hDDuoLH3t4qwBtHDmyRkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkwNDA3MTkwMloX
DTI3MDkwMzA3MjQwMlowMzExMC8GA1UEAxMoQjRDNEVENjQ3OEQwMTgxRjlDMUNC
RkYwQUQwODJFODg3OEZDN0JCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMI1M/R58gYevU5ROdafmmK9oNOhy6KQBtCaeKHrazjSuvr3BPA6+grR7kHG
24dtG/HirFDhQ6FKo4vXKU435RDI7DGU9aFTbOK1HkK0SJkD5GZ8Wb0/gLnVe0PN
WNB6TxZPPAgeYEo4br3bTLGGUOZ/SCqpK50+GCEXJG3ItH8ewiZxORXSGZO6jIXe
YZ7ts8WlavvYq53A4+ZOBrTihyn6fJzBcYDGf79I0elCAqllYeJjxE1jSki/UgIU
ZuREXD4CGvre3i/f9qtH4RtzUXOYr1E1gfNundeFRAHYfU3M7FDzTJrBDCoxD4ne
3UGwAxgKq/IucUNZDw7J7UetH2ECAwEAAaOCAoQwggKAMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLTE7WR40BgfnBy/8K0ILoh4/Hu0MB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr
BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSU5HQ0FJLzAv
MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0xJTkdD
QUkvMC9CNEM0RUQ2NDc4RDAxODFGOUMxQ0JGRjBBRDA4MkU4ODc4RkM3QkI0Lm1m
dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBZxRiMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJd
AjANBgkqhkiG9w0BAQsFAAOCAQEAn1+NGmownESR+TZ3/+U7dRy+BZWa7wQiyK7c
I+iTvUCPhxYatzhcjkQp6zNuRdmVn+/BLNFZJjv+9YKB5LftzGTGsmGT02yq8q9o
w76Nd0Dz2d354t7GNyiIeF2ugYh5WxlH5DZp2vgok8y/orwGw7JrTdWIUF+uff5B
/V7SYKcLZEtbPB33qrduRlD4T5J89DU0Re417nKzVw1rLCmFroeAeRDIF0rskciK
8zQgOIbB/gmAqnHCTT2hbYCpfa/vaDRzlqG7y8ZPSqqeWT3zbQBgr5Yj+nxRPiPC
Zwk1YpNFDUIzHrZM/2hZNKTxiGyYLhOKE2kNVwmw4+Wevjb6+w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:02:06 2026 by rpki-client