Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
File: w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer (raw, json)
Hash identifier: mdZkasshCZyXM6mtqzdNDsq5auxvqbFx0r3a02h/Uj4=
Subject key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8089
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 10 Aug 2026 13:46:36 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 64.78.160.0/20
IP: 134.208.0.0/16
IP: 138.252.10.0 -- 138.252.13.255
IP: 138.252.52.0/22
IP: 138.252.116.0/23
IP: 138.252.192.0/24
IP: 139.175.0.0/16
IP: 139.223.0.0/16
IP: 140.92.0.0/16
IP: 140.109.0.0 -- 140.138.255.255
IP: 144.79.66.0/23
IP: 144.79.236.0/23
IP: 157.15.32.0/23
IP: 157.15.70.0/23
IP: 157.20.68.0/23
IP: 157.20.106.0 -- 157.20.109.255
IP: 157.20.134.0/23
IP: 157.20.198.0/23
IP: 157.66.166.0/23
IP: 159.117.64.0/19
IP: 160.19.90.0/23
IP: 160.25.104.0/23
IP: 160.25.220.0/23
IP: 160.30.78.0/23
IP: 160.30.98.0/23
IP: 160.30.210.0/23
IP: 160.187.100.0/23
IP: 160.187.198.0 -- 160.187.201.255
IP: 160.191.4.0/23
IP: 160.191.8.0/23
IP: 160.191.168.0/23
IP: 160.191.202.0/23
IP: 160.236.254.0/23
IP: 160.250.98.0/23
IP: 161.248.44.0/23
IP: 161.248.128.0/23
IP: 161.248.134.0/23
IP: 161.248.144.0/23
IP: 161.248.160.0/23
IP: 162.4.116.0/23
IP: 162.4.120.0/23
IP: 162.4.236.0/23
IP: 165.99.66.0/23
IP: 165.99.112.0/23
IP: 165.99.168.0/22
IP: 165.101.28.0/23
IP: 165.101.86.0 -- 165.101.89.255
IP: 165.101.152.0/23
IP: 168.95.0.0/16
IP: 192.72.3.0 -- 192.72.252.255
IP: 192.83.166.0 -- 192.83.196.255
IP: 192.160.29.0/24
IP: 192.192.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32905 (0x8089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 10 13:46:36 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:bb:b9:65:1e:14:ef:45:be:43:8d:e6:21:
e6:57:8c:7d:36:11:f2:92:25:73:b4:81:b1:80:4f:
e2:e5:b6:49:fa:90:b4:58:94:1d:13:08:7c:1f:0c:
dd:c6:1c:ac:c5:4f:7e:91:ec:03:34:d9:c3:b2:49:
b8:d4:1c:fc:38:46:fe:d0:83:38:bb:ad:bd:4a:b9:
b7:e8:b5:48:e1:74:42:93:6e:9f:bf:d0:d3:2f:9e:
14:9a:38:e6:65:d0:c8:09:90:83:ac:d7:1f:c6:8a:
1a:1a:8e:1e:07:b3:ef:20:b2:d6:87:d5:3b:25:18:
44:bf:eb:62:5c:24:b2:2f:6f:f8:ad:1d:ff:ba:7d:
9f:42:6f:73:de:ed:3c:54:88:71:02:60:aa:01:99:
90:87:f3:3b:c6:22:5e:f4:de:8c:3c:72:a8:ff:1b:
e9:72:22:1a:49:05:67:6c:33:40:27:4b:b5:6d:fb:
a7:2f:06:53:84:11:c2:e9:e8:a1:f8:d8:1d:e5:75:
15:30:57:9a:98:cb:a8:31:59:f2:4e:7c:76:83:0a:
da:53:f4:85:d2:96:8c:42:13:4b:75:dc:83:7a:55:
fe:ab:59:a6:e6:37:89:8f:0a:0b:ac:3f:31:0b:d1:
9a:4c:b7:7f:dd:8a:3c:1d:e4:80:1a:40:c9:d3:8a:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.78.160.0/20
134.208.0.0/16
138.252.10.0-138.252.13.255
138.252.52.0/22
138.252.116.0/23
138.252.192.0/24
139.175.0.0/16
139.223.0.0/16
140.92.0.0/16
140.109.0.0-140.138.255.255
144.79.66.0/23
144.79.236.0/23
157.15.32.0/23
157.15.70.0/23
157.20.68.0/23
157.20.106.0-157.20.109.255
157.20.134.0/23
157.20.198.0/23
157.66.166.0/23
159.117.64.0/19
160.19.90.0/23
160.25.104.0/23
160.25.220.0/23
160.30.78.0/23
160.30.98.0/23
160.30.210.0/23
160.187.100.0/23
160.187.198.0-160.187.201.255
160.191.4.0/23
160.191.8.0/23
160.191.168.0/23
160.191.202.0/23
160.236.254.0/23
160.250.98.0/23
161.248.44.0/23
161.248.128.0/23
161.248.134.0/23
161.248.144.0/23
161.248.160.0/23
162.4.116.0/23
162.4.120.0/23
162.4.236.0/23
165.99.66.0/23
165.99.112.0/23
165.99.168.0/22
165.101.28.0/23
165.101.86.0-165.101.89.255
165.101.152.0/23
168.95.0.0/16
192.72.3.0-192.72.252.255
192.83.166.0-192.83.196.255
192.160.29.0/24
192.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:6a:a5:21:7c:bd:71:6e:41:f0:16:10:b6:c2:70:44:23:69:
70:0d:c7:6a:c4:a4:61:8d:c5:6a:d0:1c:10:19:c0:ea:f4:a6:
39:63:a4:55:96:9c:47:bd:ab:c4:9d:ce:6a:ad:c5:fa:eb:c7:
4e:fc:c8:6d:45:44:fa:65:5d:51:cd:8f:87:d3:5c:56:2d:b9:
59:25:64:e3:01:e0:52:f5:e2:19:27:62:89:07:e8:f1:59:29:
22:ba:ca:bf:31:03:05:b9:37:c4:6d:f0:5b:77:62:28:ea:5f:
c4:a4:fc:e1:aa:2e:ae:90:b6:cb:47:1c:d3:52:19:b0:72:41:
b0:f1:65:45:2b:68:62:24:be:04:db:d1:89:90:87:e8:d6:dd:
dc:fd:d3:c4:13:c3:d5:5e:0f:59:da:ae:43:19:7f:47:12:ac:
7f:c8:59:82:03:b5:73:ae:fe:68:84:b1:11:40:d3:38:f8:2f:
18:93:54:00:d8:97:d4:50:fa:00:81:de:27:36:06:52:93:49:
36:87:ae:6f:18:2f:26:c5:b6:27:e2:c9:df:a5:d7:81:7e:73:
22:3d:57:53:50:93:3e:c1:f5:a9:29:60:2b:fd:cf:5b:82:8e:
6d:a6:d7:2a:30:d1:cc:9b:08:0c:ea:da:8f:4a:98:fd:8c:5a:
75:d2:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:44:18 2026 by rpki-client