Certificate
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
File: CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer (raw, json)
Hash identifier: e3FiiXEq/Sag0aDG4xzbmfDA+Apxj98Qt3cdI/hQ/WM=
Subject key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 1259AD25BF86B171182FCFF930E2E4F3AAA5DEBC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
caRepository: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Wed 26 Aug 2026 03:23:59 +0000
Certificate not after: Wed 25 Aug 2027 03:28:59 +0000
Subordinate resources: AS: 38042
AS: 131613
AS: 131678
AS: 134823
IP: 103.123.132.0/22
IP: 103.137.22.0/23
IP: 103.208.196.0/23
IP: 103.246.218.0/23
IP: 123.253.140.0/23
IP: 202.148.220.0/23
IP: 202.153.4.0/23
IP: 211.76.186.0/23
IP: 2402:71e0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:59:ad:25:bf:86:b1:71:18:2f:cf:f9:30:e2:e4:f3:aa:a5:de:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: Aug 26 03:23:59 2026 GMT
Not After : Aug 25 03:28:59 2027 GMT
Subject: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:05:52:9e:9f:a4:50:05:f7:1d:05:a1:d0:
ae:51:05:45:47:44:49:ec:cd:b6:a8:a2:b7:c2:ac:
eb:28:36:70:9e:7c:a8:fe:dc:d2:1d:b1:39:4b:c7:
a9:bd:5e:74:70:63:f7:35:42:68:c1:b8:8d:1c:72:
18:ed:9b:da:7f:2e:65:e6:51:3b:aa:8b:3e:f5:6d:
e0:c0:12:a2:31:3e:ff:a8:d8:7a:43:a3:42:10:45:
90:29:8b:02:a8:4a:ff:14:ca:08:dd:d8:3e:ce:30:
36:2d:05:e7:10:a0:49:35:a4:9d:d2:99:2f:43:12:
f2:fb:53:4f:ec:3b:59:9d:a5:c7:b1:c0:f4:99:2c:
5a:d9:58:06:a5:56:3b:73:67:69:86:33:fc:30:f3:
3d:11:16:24:a7:fa:31:0b:29:12:2e:e9:76:09:f1:
b8:f9:99:28:8c:8a:7a:b3:1c:19:22:f7:f8:b7:fe:
9c:f8:2e:37:88:ad:10:86:6b:dc:e6:54:97:2d:d6:
c5:ed:52:0d:32:43:de:46:5b:3b:d7:e9:62:4c:38:
dd:a7:c0:fb:66:eb:b1:d7:86:d6:f8:e2:5f:87:7e:
3d:86:9d:99:e2:ce:df:dd:4b:d1:48:5b:2b:e9:02:
de:c0:c3:0a:5e:dc:41:42:22:6e:4d:a7:7b:5e:f3:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.132.0/22
103.137.22.0/23
103.208.196.0/23
103.246.218.0/23
123.253.140.0/23
202.148.220.0/23
202.153.4.0/23
211.76.186.0/23
IPv6:
2402:71e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38042
131613
131678
134823
Signature Algorithm: sha256WithRSAEncryption
61:e7:c6:5e:45:ae:12:0d:d4:db:fe:f7:8d:af:b6:24:c1:55:
82:f9:e0:ba:a3:d6:b7:9f:22:0c:13:a2:a2:a1:fb:8f:f7:f5:
fc:a4:cc:63:b1:58:7f:a4:1f:65:b6:29:6d:8b:d1:67:fe:98:
d8:be:ba:db:0b:db:0d:d8:de:02:03:49:7c:20:e7:96:d5:b1:
52:4a:9f:8e:e3:04:6e:d0:49:eb:0f:b3:5a:13:1d:5c:85:6e:
f5:c5:9a:37:8a:25:bc:be:ca:36:8f:dc:35:53:7a:87:dd:80:
15:aa:6d:20:18:77:ff:29:9f:c1:77:0d:df:b5:61:e6:9d:64:
d5:a0:ca:3a:f6:ee:36:b3:a9:84:30:a4:3f:4e:f6:00:85:e4:
c2:02:20:6f:c8:02:31:4f:23:d1:51:e0:53:36:b9:22:1f:23:
40:d6:e3:cf:dd:45:9a:c0:08:3b:36:d1:aa:cf:5d:73:f7:70:
2e:84:e9:ec:d6:5d:6e:32:da:2e:80:41:58:da:68:b1:f3:03:
ae:48:9a:c0:42:1b:1c:55:f9:eb:69:60:ee:88:d0:77:03:2b:
52:e6:8a:e8:0d:29:b4:90:8f:0c:72:d6:24:9b:ce:c4:e2:d4:
b1:8b:83:f2:57:2a:45:4b:bc:d4:7d:ad:75:b3:7f:f6:2c:eb:
52:a0:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:06:06 2026 by rpki-client