Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
File: xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer (raw, json)
Hash identifier: PfQeoQNxn2kFtD0oBo72KAzNOb5ZtnxomEEHYNsT8sc=
Subject key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 54AF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Thu 06 Aug 2026 13:46:51 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 2.58.240.0/22
IP: 151.158.6.0/23
IP: 151.158.26.0/23
IP: 151.158.88.0/23
IP: 151.158.160.0/23
IP: 151.158.168.0/23
IP: 151.158.224.0/23
IP: 2001:7fa:1::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 14:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21679 (0x54af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Aug 6 13:46:51 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:56:46:5d:42:2c:00:18:5c:42:3b:90:e6:
39:ba:9b:0f:34:6c:75:c2:30:6d:26:af:ae:a1:5a:
64:1f:6b:fc:96:4d:47:a9:28:7a:79:f1:c3:a1:8e:
fc:23:eb:07:9a:8c:c3:ad:a8:4c:74:e5:c8:2c:73:
83:b6:4c:13:71:89:18:f4:7c:e8:e4:93:6a:5a:fd:
81:22:d8:30:e9:0e:58:cd:2e:5a:75:10:08:34:55:
f2:56:93:b9:d8:15:48:62:38:d9:52:89:1a:ad:3d:
a0:1f:39:3f:21:8c:09:52:0d:46:b1:a5:71:a7:82:
1a:7b:9b:88:24:e5:06:9f:a7:f6:e3:69:7a:bf:fd:
fa:28:66:79:90:94:93:e8:60:d8:7b:a3:fb:80:b3:
ac:10:cf:28:61:71:da:dd:b6:87:9b:b2:c5:19:83:
5a:5c:c3:6a:da:a7:3d:eb:dc:b4:7f:73:23:df:f5:
aa:c6:3c:e0:5a:41:0d:29:92:d1:c7:54:3f:e9:f9:
e2:ac:a6:10:65:b0:19:43:bf:62:9a:ba:98:93:db:
a8:bd:82:ba:5c:a7:fd:4c:e5:4a:1a:07:86:29:e5:
57:b7:23:96:53:01:93:90:84:2b:60:84:5d:50:d9:
3e:ca:93:a3:82:57:3e:53:b2:d9:09:9c:ac:04:a9:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
2.58.240.0/22
151.158.6.0/23
151.158.26.0/23
151.158.88.0/23
151.158.160.0/23
151.158.168.0/23
151.158.224.0/23
IPv6:
2001:7fa:1::/48
Signature Algorithm: sha256WithRSAEncryption
22:a4:a5:32:53:ff:ec:66:05:95:00:1f:02:dd:9f:57:57:ec:
8e:0a:4a:0a:ae:0f:b3:97:36:f5:5a:47:a1:2a:b9:00:6c:3d:
52:f6:2a:b8:96:dc:17:d7:e0:f2:29:ea:0b:a0:28:6d:19:91:
17:b6:e4:1b:8e:5d:72:34:1e:3f:f6:a7:e0:a7:ad:7f:34:56:
ec:98:68:f9:29:26:74:7c:04:67:61:5c:cc:a0:dd:6a:03:c1:
a3:e4:43:84:c0:d0:1a:d6:2b:ea:0d:26:20:89:01:fa:27:d1:
71:87:ba:8b:97:24:0f:05:03:ed:06:4f:49:7d:09:60:8e:27:
e8:d9:15:88:a5:1f:4c:20:30:75:ee:d7:53:84:23:25:45:14:
1f:17:bc:d8:7c:82:2a:6d:96:de:93:06:09:cb:10:d3:67:2d:
d6:17:98:16:a8:bd:ed:ec:dc:48:c4:f4:73:51:53:a0:67:06:
35:30:4e:ec:03:a3:78:5f:6b:39:3d:a9:9a:50:b9:f0:13:84:
8d:fb:ff:fc:e1:a7:1e:7e:e5:80:40:3e:88:b3:1f:09:1b:0b:
34:bc:7a:53:dd:25:2e:51:3d:3a:38:67:2a:22:00:10:6b:d9:
f4:a0:e1:40:4e:9d:d6:2c:a8:96:c7:35:41:68:6b:59:d6:85:
d4:2d:d2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:06:20 2026 by rpki-client