Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer
File:                     0273304A820906A512D2F0D86CA293A77222962C.cer (raw, json)
Hash identifier:          St3Jc0WUUAjzbQquJ89vAyfcZkmPeQ/6KjTE7P/G/EM=
Subject key identifier:   02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       3A73A6C2FFBF5C9F41F857FBD58E15EA7A480093
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/ZUSO/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 16:01:16 +0000
Certificate not after:    Mon 10 May 2027 16:06:16 +0000
Subordinate resources:    AS: 63900
                          AS: 131638
                          IP: 2402:30e0::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:73:a6:c2:ff:bf:5c:9f:41:f8:57:fb:d5:8e:15:ea:7a:48:00:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 16:01:16 2026 GMT
            Not After : May 10 16:06:16 2027 GMT
        Subject: CN=0273304A820906A512D2F0D86CA293A77222962C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:df:63:c8:72:2c:45:00:f0:c4:a1:48:a2:
                    c9:26:40:3a:1d:ec:e2:d8:f1:b2:1d:fc:66:a3:00:
                    01:c2:4e:a6:01:82:70:ce:d9:58:af:12:b4:61:5a:
                    94:6a:da:e2:fb:73:26:5b:d2:46:90:78:0e:ab:cd:
                    3a:24:40:f7:14:d7:1b:5a:60:ce:66:9d:69:88:c6:
                    ba:54:95:28:83:5b:5e:8a:d4:44:a2:3a:0b:b9:65:
                    2b:a3:a8:ea:65:cd:38:98:fe:a9:dc:16:b8:f5:c4:
                    6a:30:a1:31:1d:60:4d:fa:eb:50:7a:07:4c:16:06:
                    35:09:9a:c2:69:b5:91:cf:d9:18:43:c5:8e:d8:70:
                    70:64:e1:69:49:3b:fe:0b:2d:29:c6:75:51:06:4d:
                    63:cb:13:ca:8c:09:7a:71:1c:c1:bb:ee:78:ff:3f:
                    ab:96:a9:9f:7d:75:cc:a7:01:0c:80:c7:24:68:53:
                    ff:1f:de:b4:75:04:c9:0c:e5:fe:66:62:45:ee:08:
                    59:ad:4e:ef:ba:8c:c4:6a:95:0d:f9:21:ae:05:b5:
                    e8:3d:71:f8:40:17:bd:8d:99:aa:04:0f:9a:c3:ac:
                    6b:cd:e6:f4:40:6b:8f:7a:d1:e6:86:12:82:69:2a:
                    d1:7a:c3:4c:e2:0d:92:f2:80:08:c6:a1:95:c5:f6:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:30e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63900
                  131638

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:ab:9f:ce:14:35:63:17:a2:0f:56:f7:4a:40:79:51:61:
         85:ba:e9:7a:dd:6b:ec:ef:a9:19:26:bb:e4:ef:ab:1d:d7:98:
         02:df:0e:74:07:67:03:b2:f6:bf:b0:d5:9a:ab:c2:9a:6f:ed:
         23:40:e4:26:31:a8:e5:e4:24:14:8e:b7:2d:42:a6:7a:88:f9:
         18:e1:db:b7:3b:cd:8e:21:80:38:c2:48:eb:78:68:fb:3b:62:
         66:d5:49:ad:db:be:ad:9e:a5:c5:13:f7:ea:2d:95:e4:98:35:
         e0:7c:15:32:43:8e:28:ce:cc:ef:82:78:10:da:b2:17:e8:54:
         4a:6a:4c:5c:65:76:32:4b:94:7b:d3:d5:c9:75:4b:6e:2a:fe:
         4a:4f:f7:d2:ab:72:4a:de:87:ba:44:7c:4f:b6:85:e9:3c:b6:
         86:f2:b1:48:0b:e3:f3:f2:b1:fe:46:34:5a:a4:4c:8d:5e:0f:
         54:84:22:17:52:11:b0:da:60:c8:19:b8:76:eb:7a:18:84:7e:
         0b:7d:c5:29:fa:e0:93:de:80:ba:6e:d5:c5:6d:17:3e:f5:1f:
         81:7a:31:60:22:86:20:30:0d:59:8a:6c:a5:79:38:f0:d3:69:
         00:38:87:de:21:6e:a8:ee:c1:04:ea:53:74:f1:e9:67:b7:22:
         08:0c:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:44 2026 by rpki-client