Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.cer
File: dVdIQ19gHyOFYhF-z0M1AAyJ5fc.cer (raw, json)
Hash identifier: GYBYo6OKetGcGrin/vJrcJ0qfk+d3rthNM9l7AKaQDs=
Subject key identifier: 75:57:48:43:5F:60:1F:23:85:62:11:7E:CF:43:35:00:0C:89:E5:F7
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3F09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 04 Nov 2025 05:58:56 +0000
Certificate not after: Tue 01 Sep 2026 15:30:20 +0000
Subordinate resources: AS: 9918
IP: 202.133.68.0/23
IP: 2402:26e0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16137 (0x3f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Nov 4 05:58:56 2025 GMT
Not After : Sep 1 15:30:20 2026 GMT
Subject: CN=755748435F601F238562117ECF4335000C89E5F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:01:81:4c:7e:d7:24:c7:25:9a:c8:8b:67:
7d:91:73:f9:f3:bd:64:da:53:35:71:47:2a:95:74:
8d:7e:69:15:4d:74:a4:93:31:db:15:f4:88:90:f9:
82:9f:32:0c:fa:e4:32:78:90:86:af:e1:d7:44:0f:
0c:f6:15:99:e4:a1:fa:6b:63:bb:fe:23:4b:98:ca:
b3:a9:f6:71:3c:cd:0f:06:63:0c:19:60:97:e7:7d:
8d:1b:dc:65:48:06:08:ab:40:23:18:02:92:e5:ed:
44:62:f0:a7:5b:5a:84:42:48:68:25:aa:e2:0a:f8:
f8:28:6b:54:d0:ba:7e:3f:d3:9c:f1:f3:80:55:54:
aa:b7:e2:1c:c5:c9:a2:73:91:47:a1:30:70:0d:eb:
71:1a:79:ee:25:3f:de:ba:24:c5:9e:c7:51:5d:52:
f2:fc:23:14:9a:ae:0c:79:9c:47:c5:dd:7c:3f:96:
0e:d7:69:73:a3:7c:ef:db:a6:e2:f7:5a:c1:47:e9:
98:6d:fc:ec:42:c7:7c:8c:95:23:fb:8c:b9:b6:4b:
f8:d3:a6:05:11:6c:c9:a2:83:a6:94:a3:54:42:e8:
5b:b8:a2:5f:c2:56:9d:83:f7:ac:9a:4d:2d:97:26:
08:1b:e0:f4:30:04:8a:f6:5c:e4:a2:59:52:de:cc:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:48:43:5F:60:1F:23:85:62:11:7E:CF:43:35:00:0C:89:E5:F7
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9918
sbgp-ipAddrBlock: critical
IPv4:
202.133.68.0/23
IPv6:
2402:26e0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:d2:94:26:71:b3:5b:eb:e9:71:5f:75:53:96:62:59:c1:65:
cf:52:b9:74:88:c7:98:3c:e6:ca:ca:25:06:12:08:0d:93:11:
29:64:71:4a:9d:dd:0f:5b:f2:d6:38:3e:41:04:3d:1b:bb:92:
58:9a:02:7b:45:95:49:52:e6:25:91:ef:e1:70:99:1d:e2:ad:
f8:b9:67:ef:a7:d0:3c:2c:d7:8c:34:49:a9:8a:97:12:e4:d3:
0f:0e:e8:f0:96:a0:fc:b4:f9:49:0b:94:7b:7c:40:77:bf:3e:
c2:30:fe:60:db:31:20:74:fd:11:d4:da:2f:d9:b3:c6:dc:d1:
02:85:eb:04:62:53:2c:f3:cb:f3:52:60:b9:aa:52:3f:98:d7:
41:f4:9c:a1:d1:d6:0d:60:56:f2:31:9f:53:a1:c7:60:11:13:
c9:34:b0:80:c3:6c:24:a4:5e:6e:f6:e2:8f:3c:dc:fd:a7:f5:
9d:a3:41:75:be:b2:72:35:c4:8c:47:f8:18:72:2f:c1:59:71:
fe:81:9a:ec:95:56:47:b3:19:19:4a:3d:38:14:b6:81:59:28:
4c:47:e1:79:32:c1:ca:8b:09:5b:98:33:7d:07:65:b7:33:33:
54:0e:b5:c7:b5:6b:5e:d4:7a:b2:50:8c:ec:f4:88:38:8b:75:
8b:d7:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:42:15 2025 by rpki-client