
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/5F-_rSMbDjdUNVxRBDhkBPkbb-s.cer
File: 5F-_rSMbDjdUNVxRBDhkBPkbb-s.cer (raw, json)
Hash identifier: aJUXhdX++A4Je5rG4mxg1nEJJfbDzVPlCAEPz4VCHAo=
Subject key identifier: E4:5F:BF:AD:23:1B:0E:37:54:35:5C:51:04:38:64:04:F9:1B:6F:EB
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 418F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHWBN/5F-_rSMbDjdUNVxRBDhkBPkbb-s.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHWBN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 17 Feb 2026 03:52:05 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: AS: 18424
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16783 (0x418f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Feb 17 03:52:05 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=E45FBFAD231B0E3754355C5104386404F91B6FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:cd:da:c4:ac:ac:d0:03:c7:61:f1:b6:87:
45:ad:d2:5d:bb:78:32:2b:7e:9f:0d:ac:5d:48:c8:
1e:13:3a:7d:51:5b:08:88:c1:96:67:be:04:1c:11:
fd:76:9b:5b:6b:ef:60:2d:c9:ab:32:8d:eb:fc:92:
e2:63:45:ec:42:a9:4c:b3:3e:74:76:d5:08:54:f5:
60:a0:0e:42:7c:dd:b4:49:7b:17:92:1c:bb:2a:2f:
ac:21:5b:ec:44:00:7a:a4:34:00:44:aa:51:42:17:
a3:d4:03:b0:50:79:6c:cf:0e:c8:46:8c:a8:7d:e9:
b4:dc:a1:d4:6e:16:d1:57:f6:d8:70:ef:d2:f9:a5:
62:79:ce:23:49:44:7b:1b:7b:4b:6e:7d:bd:81:5f:
2b:94:08:63:a0:e1:5e:c5:d4:9c:72:43:55:02:8f:
b7:71:ef:c4:ac:d2:d6:13:04:9a:7e:7f:95:9c:b3:
13:90:0a:50:f9:2a:9b:dc:66:a6:6a:46:f8:59:1a:
60:71:1e:96:d0:ca:4a:3d:41:5d:e4:f3:4b:63:72:
37:09:66:b0:74:7c:6b:b6:ad:dc:d7:0d:ca:66:50:
1c:0f:ef:ac:3d:3a:9e:5f:41:d3:c2:5d:6a:2c:cf:
9d:4f:27:2f:bd:ed:82:b4:82:da:92:7e:9b:d3:80:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:BF:AD:23:1B:0E:37:54:35:5C:51:04:38:64:04:F9:1B:6F:EB
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHWBN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHWBN/5F-_rSMbDjdUNVxRBDhkBPkbb-s.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18424
Signature Algorithm: sha256WithRSAEncryption
4c:5c:86:68:53:b9:59:e2:e2:50:01:51:d8:aa:c3:0e:c0:26:
23:8f:2c:d4:8b:d4:5b:74:e5:36:69:6e:d4:0c:52:8d:6b:5c:
61:41:c7:b2:da:9d:80:3d:ee:80:9d:5b:e8:e6:ea:1f:d1:73:
59:b0:2e:06:b4:29:5b:bb:e8:09:b3:27:05:8a:9a:d0:bc:e7:
25:1d:d5:30:17:53:91:0f:18:64:5c:38:87:32:7c:3e:1c:e2:
50:f7:ae:5b:b2:a5:4e:fa:62:00:66:81:f7:c2:00:ca:3f:10:
a3:e4:cf:64:62:a3:57:f5:90:c7:9a:a8:9b:ae:6a:b0:ed:6c:
aa:e0:be:7a:47:92:48:be:a9:c5:1e:52:99:cd:2c:8c:1a:2c:
37:41:65:4e:f6:96:8b:bf:ad:42:76:f3:0f:04:ef:9f:92:3e:
a6:4d:d6:31:44:09:5a:a5:79:89:98:b7:02:18:e6:c9:14:84:
c9:eb:01:42:70:24:90:b5:b6:ef:93:53:41:c4:47:7d:97:ed:
df:98:e3:08:61:4a:46:34:28:4c:38:b8:ce:75:12:41:aa:20:
05:d8:19:e5:41:17:38:84:f3:5a:68:38:68:9e:80:7f:c0:53:
7a:17:1a:4b:ad:d2:50:db:4c:5d:2c:2a:a1:84:5e:d5:c4:71:
0b:be:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:55 2026 by rpki-client