Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
File: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer (raw, json)
Hash identifier: BSuWXJBVj/lk7qQKbG66GSRl0ms9sc+t5RAjHBcVpQo=
Subject key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4D2C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Sat 30 Aug 2025 14:16:56 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 2.58.240.0/22
IP: 2001:7fa:1::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Sep 2025 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19756 (0x4d2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Aug 30 14:16:56 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:2d:6c:a6:63:34:42:4a:08:60:2c:3e:bf:
15:b8:8e:13:65:ca:b0:aa:4c:99:3c:d5:f8:49:6e:
ea:d2:42:e0:48:c8:2a:c4:81:4b:f3:50:2d:36:4a:
14:e6:b7:5e:1e:fa:05:f0:8f:fe:0a:a9:e6:63:f8:
fd:60:7d:b8:ed:09:a8:51:f7:27:e2:fa:cd:28:63:
ec:c3:6a:a2:ab:6b:77:39:74:16:1a:0c:28:3c:09:
08:be:a0:94:51:d9:c1:3e:a9:67:ba:92:95:68:ca:
d0:a7:a2:10:5b:cb:e6:5a:8c:e2:01:c1:8d:94:22:
4c:41:f6:69:ae:35:51:da:a0:23:56:d8:64:ed:ce:
90:75:ba:fd:85:28:22:85:38:e9:14:25:1b:2a:cd:
40:56:66:5b:ad:0e:b7:eb:8c:61:a5:3b:90:43:09:
74:14:4b:21:73:a9:84:dd:43:dd:c1:bf:25:24:72:
8b:01:84:0f:62:56:f7:31:93:89:83:26:17:49:e5:
ce:84:71:a2:7c:2e:26:5b:56:a9:4d:17:28:39:76:
d1:2c:ca:53:5d:f0:80:c1:d4:34:68:87:f1:4a:fb:
b3:ca:21:6b:14:5b:fd:4e:db:cc:90:b6:65:a4:48:
e3:e5:8d:e5:f9:00:3c:c4:dd:44:f3:f8:ef:1b:09:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
2.58.240.0/22
IPv6:
2001:7fa:1::/48
Signature Algorithm: sha256WithRSAEncryption
4f:a8:9a:d9:52:4f:b1:ed:fc:88:88:e6:12:f3:5d:7e:80:56:
8c:94:09:eb:f7:ee:6f:77:4a:d9:9e:79:f7:80:e5:35:cc:d4:
bb:1e:a4:fb:de:e2:81:ae:6c:2c:e4:34:3e:66:55:2a:a2:bc:
fa:1b:4a:d6:d6:65:bd:a8:aa:52:49:5a:6b:12:f1:02:44:29:
7c:39:7e:7f:57:26:6d:32:a8:a9:de:67:02:83:bb:a1:6a:6c:
31:ea:5f:79:55:c7:11:3b:f8:97:b6:3f:10:d7:2b:ca:61:09:
61:75:0c:d1:c7:cd:fc:7a:0c:38:31:1b:8c:c6:32:83:af:3b:
54:38:3a:b3:9f:fd:7e:f3:a8:13:8c:a5:17:a2:a7:c7:72:7b:
30:ae:dd:36:68:d9:18:c0:17:25:47:72:fd:cd:9a:1e:f8:8f:
c7:be:0d:19:61:f8:6a:97:6b:f7:83:8f:5f:69:a1:a5:ba:68:
d1:8a:ac:56:6e:96:5a:cc:18:7a:52:46:41:8c:b8:f1:7b:62:
0c:49:27:a5:2b:96:e2:30:d6:c5:da:4f:a3:1f:17:a8:52:9f:
75:64:f8:d1:af:68:e0:87:b3:89:02:2f:ea:59:70:b0:47:aa:
2a:f8:0d:dc:8e:d4:7b:08:1e:d0:1b:c1:24:8d:62:16:4c:8f:
6b:6d:49:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:45:27 2025 by rpki-client