Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
File: cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer (raw, json)
Hash identifier: ql//mmH3uX+M56UIRUJu1/aVCCndpyidtKkg2qBTf5Y=
Subject key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4B3E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Thu 06 Aug 2026 13:46:48 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 187.79.192.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 02:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19262 (0x4b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Aug 6 13:46:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:ff:6a:e4:b2:78:c0:6d:cc:97:c3:a0:b4:
6d:33:51:de:a1:d2:6a:9c:b1:08:27:f0:f5:70:90:
12:28:8f:6b:8f:1d:66:06:e5:e3:c0:a0:b2:88:76:
8f:81:c5:53:bc:b0:3a:68:c4:ed:37:f9:38:f0:8b:
5c:1a:49:bd:40:bc:b0:ea:61:3d:f8:02:4c:c8:e9:
0f:f1:f4:a8:4d:d1:e8:f6:0b:7b:b1:07:09:47:6a:
a7:ac:03:6a:f0:0c:49:d4:a5:93:db:ab:6e:61:79:
7c:e6:8c:11:1d:ca:d6:12:d4:8e:c9:bb:68:72:ab:
bd:e6:bf:b3:18:f0:b1:b4:95:73:57:09:f9:d6:bf:
16:dc:8f:19:7e:d3:d7:62:c1:f4:57:19:2e:ab:df:
8a:ae:9d:60:86:fe:c7:65:47:33:fa:4a:19:19:0a:
dc:50:28:c3:b4:8a:a3:87:e0:06:b3:00:c3:3f:c6:
c4:59:92:cf:14:80:80:e6:8b:8e:17:ee:10:ae:d2:
c9:2b:06:08:5a:92:fb:e3:6f:aa:d8:04:e6:f1:bd:
9b:0d:8f:2d:eb:9f:35:23:d3:55:fe:99:28:28:2e:
10:86:96:57:73:fa:71:0b:bf:0a:91:55:2d:ed:3b:
c2:50:63:fe:84:62:81:d5:e9:e6:b7:60:1d:4a:99:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
187.79.192.0/18
Signature Algorithm: sha256WithRSAEncryption
d5:a2:72:d3:b7:2a:57:24:c5:36:c4:1c:03:8f:a7:10:ee:0b:
0e:d2:a4:15:29:24:71:e3:5e:a5:c9:e2:39:71:1c:78:63:24:
08:51:c8:17:bd:f9:e3:c8:dd:6d:a5:cd:86:ac:54:04:9c:75:
5e:62:12:12:fd:2b:93:1a:ca:e6:2a:c7:e1:f3:52:90:f8:8a:
e3:11:65:4e:66:7b:9b:f4:97:12:6f:e6:29:99:45:c1:b3:65:
07:8a:69:d5:e5:dc:85:fb:76:e8:69:5c:06:c3:5c:c0:bf:73:
61:78:f4:98:67:04:0b:29:5e:a0:72:95:0b:f1:f3:a2:17:42:
e1:26:9b:76:e0:3e:0c:ae:d3:88:aa:aa:2c:09:e0:6b:7d:f9:
a5:1d:f1:ab:7f:35:dc:97:e5:3c:1a:34:a2:2d:bc:f1:26:d5:
6b:5e:09:f2:31:9f:0e:bb:7e:a7:9b:ef:57:35:39:12:16:a9:
d9:01:c7:66:bf:80:c5:d2:3a:32:d1:c4:24:c2:8c:26:fe:cc:
b0:37:f8:67:bf:4c:59:89:d7:2f:2e:51:59:1f:3f:dc:e7:3d:
16:b5:c8:59:f0:c8:40:16:94:c4:ab:9d:06:23:10:43:68:02:
6a:42:10:79:76:4a:48:c3:ed:d6:da:c7:15:11:5a:ad:fa:c9:
1c:65:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:17:38 2026 by rpki-client