This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.cer
File:                     eLoo5i-P9kj1tXa0uDo0sBt_Ntg.cer (raw, json)
Hash identifier:          WUCq7/+/emk3HQOP4Qybx8CtIX8olZIQIJGxbAUZymY=
Subject key identifier:   78:BA:28:E6:2F:8F:F6:48:F5:B5:76:B4:B8:3A:34:B0:1B:7F:36:D8
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer:       /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial:       205D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Thu 18 Dec 2025 07:38:26 +0000
Certificate not after:    Fri 04 Dec 2026 15:30:18 +0000
Subordinate resources:    IP: 144.79.66.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 01:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8285 (0x205d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
        Validity
            Not Before: Dec 18 07:38:26 2025 GMT
            Not After : Dec  4 15:30:18 2026 GMT
        Subject: CN=78BA28E62F8FF648F5B576B4B83A34B01B7F36D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:8a:2b:60:89:5a:80:0a:ea:9d:d6:5e:77:
                    d8:cf:cf:45:bc:52:87:db:a0:da:37:7c:d3:8c:4b:
                    12:ee:47:35:53:15:17:5c:bf:a7:16:e9:a6:32:53:
                    2a:30:29:21:98:ee:2f:85:f0:33:a2:fa:be:24:c6:
                    46:03:ca:14:d8:f2:0b:6a:e5:97:19:2d:90:fc:a9:
                    e7:22:97:e6:d4:e4:3a:a5:20:3a:0d:c9:c5:de:4e:
                    70:7b:af:02:3e:d3:59:e2:41:c0:83:9e:d3:e8:05:
                    8c:3b:af:0d:01:8b:d2:c0:1f:37:dd:93:9a:f1:1c:
                    52:37:d0:9c:29:a1:bb:0e:3b:f9:20:f0:2a:06:d1:
                    ed:56:09:90:87:75:af:53:32:d3:85:69:d6:6c:e7:
                    20:87:ab:58:96:f5:fe:79:32:67:e5:4f:49:c7:9a:
                    97:3b:b9:8b:f7:30:a3:9d:91:1c:e8:bc:ab:82:57:
                    8e:b1:73:bf:84:97:86:01:d5:ff:81:fd:b1:03:a5:
                    72:38:c3:da:54:c5:72:ba:a3:53:14:99:17:0c:e3:
                    91:8a:b5:85:31:5e:13:57:8a:c9:c7:7a:93:74:52:
                    9c:5e:76:ba:f3:36:89:06:b4:29:8a:5d:48:59:00:
                    44:07:3f:fb:89:69:00:15:ed:07:65:ac:e7:fc:f2:
                    0c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BA:28:E6:2F:8F:F6:48:F5:B5:76:B4:B8:3A:34:B0:1B:7F:36:D8
            X509v3 Authority Key Identifier:
                keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:30:04:33:c4:93:03:e7:d4:e6:19:fc:3f:24:af:57:c8:39:
         35:16:c0:8e:ef:11:49:d3:b1:0d:f9:61:16:36:46:f2:82:79:
         b9:54:df:04:77:eb:86:3e:6d:e9:07:9c:c4:26:2b:1b:0c:89:
         69:06:9e:2b:3a:b9:ba:e4:91:d8:fe:22:5b:ce:e4:3c:ea:0f:
         3b:ad:02:14:c6:71:b3:56:69:89:da:43:84:68:e4:8a:c7:27:
         e9:37:c8:bc:64:0d:01:c3:bb:0b:06:ba:43:f1:83:a8:32:9f:
         f8:71:62:1f:73:92:47:27:34:f7:d4:fe:0e:2e:a8:2b:39:03:
         f2:20:f6:c3:13:16:49:99:b5:0a:2a:93:8e:61:f4:04:86:bf:
         3c:68:1d:2a:49:77:85:3b:e4:26:28:01:bf:22:8f:58:56:f4:
         8b:ff:d1:d0:b7:39:60:da:6f:80:4c:d6:8c:32:13:77:bf:5f:
         c9:ef:48:b4:44:3b:5f:ce:7b:da:b8:7e:56:4c:15:14:60:4e:
         0f:90:6d:44:59:89:d4:76:7d:6b:2e:f8:1e:5a:10:cf:18:50:
         61:80:2a:48:7c:91:cd:9a:e7:11:bb:6f:48:f3:18:e0:af:52:
         d8:28:ec:e6:9a:03:8e:76:be:19:83:00:88:58:d1:a4:72:1e:
         2f:d7:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:38:03 2025 by rpki-client