Certificate

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
File:                     E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer (raw, json)
Hash identifier:          3jIxn3jNTVhuLw26hQnf9yD6drA9Il4zkH06zCAo8vI=
Subject key identifier:   E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       7C2F04F9A58035CCC8C63A35C5C35F9D8721CF2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/CROWN/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Fri 04 Sep 2026 07:19:07 +0000
Certificate not after:    Fri 03 Sep 2027 07:24:07 +0000
Subordinate resources:    AS: 151631
                          IP: 103.255.210.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2f:04:f9:a5:80:35:cc:c8:c6:3a:35:c5:c3:5f:9d:87:21:cf:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: Sep  4 07:19:07 2026 GMT
            Not After : Sep  3 07:24:07 2027 GMT
        Subject: CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:19:f8:73:b0:c9:fd:f6:dc:3b:92:cd:64:
                    e2:5b:0f:8a:b1:a9:46:bc:60:82:18:25:d4:cb:63:
                    21:c8:10:9d:5e:43:63:34:8f:9d:1f:90:60:5a:d1:
                    ef:f4:1a:32:15:6b:f6:3a:e8:1b:d3:b9:47:c1:08:
                    84:08:d7:24:57:92:18:2e:e5:e3:c4:a7:04:9a:fb:
                    7d:48:88:3d:af:02:9a:78:f5:39:3d:c2:e9:f4:3b:
                    04:6d:cd:c9:93:3c:ed:55:cd:ea:f3:cd:75:23:98:
                    6d:23:1b:ed:57:bd:98:d2:e8:ab:fa:ec:07:4f:a1:
                    2d:50:a1:40:b1:d2:35:c9:2a:f4:47:00:9c:13:52:
                    ce:c5:47:51:05:aa:9c:2f:1d:dd:42:24:a2:6e:5f:
                    d0:69:77:15:af:8e:a4:00:c4:4a:67:03:98:53:19:
                    05:cc:fd:7b:d8:1e:1f:96:67:53:1a:f4:99:f3:d2:
                    c3:6e:e3:0b:6c:ec:54:f6:0b:f6:0f:4b:87:53:31:
                    d8:87:b5:25:38:2b:a0:de:24:8f:14:ad:d4:c4:bb:
                    1a:89:ff:ca:f1:e1:b5:ed:3a:ac:12:5a:bc:58:46:
                    27:91:be:5c:5d:47:fc:e7:0b:7f:09:2d:2a:18:9c:
                    b5:92:8f:37:12:27:ce:71:24:70:93:a5:98:64:dc:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.210.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151631

    Signature Algorithm: sha256WithRSAEncryption
         64:1d:a1:cf:a3:01:35:82:e7:55:6b:2e:13:de:de:75:61:da:
         a0:14:b9:5c:22:54:5a:c7:15:ce:6a:c3:6d:bf:21:66:62:27:
         8c:bf:6c:78:97:00:ee:3e:c3:9a:e9:6a:58:29:8b:d5:87:d8:
         7a:3a:8a:25:9d:52:13:5d:92:77:48:75:b4:57:3e:2f:2f:57:
         c0:fa:86:71:fc:e8:d6:9c:95:e5:49:7b:23:d1:3d:1a:cd:66:
         da:c6:b9:f4:14:fe:64:2d:ed:8d:1c:65:bf:ce:3c:ca:ef:cb:
         96:e3:d9:4d:73:25:20:78:92:a5:a0:58:5c:9e:f0:fc:80:f1:
         32:c6:3c:ab:b2:b0:8f:6c:2f:24:73:af:53:aa:2d:9c:01:fe:
         d2:75:20:ff:3a:c9:c3:38:38:df:8d:9f:54:d4:56:6a:a3:f3:
         b9:d7:bc:8b:c1:61:e4:28:d2:77:6e:28:18:4c:80:90:92:25:
         00:9f:c0:3d:4b:3b:e3:02:f9:6d:50:0c:b5:ab:b1:bd:ba:d6:
         d2:52:f8:82:a4:07:01:94:e3:4d:98:ba:71:1f:b6:21:7f:15:
         1e:87:b7:dc:8d:6c:c0:c7:23:ef:a1:5b:a9:83:99:40:47:20:
         89:d0:b7:25:c1:8a:0e:f1:0d:ca:9b:21:15:99:7b:0b:8a:e3:
         43:f6:15:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:57:29 2026 by rpki-client