
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer
File: 0273304A820906A512D2F0D86CA293A77222962C.cer (raw, json)
Hash identifier: St3Jc0WUUAjzbQquJ89vAyfcZkmPeQ/6KjTE7P/G/EM=
Subject key identifier: 02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 3A73A6C2FFBF5C9F41F857FBD58E15EA7A480093
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
caRepository: rsync://rpkica.twnic.tw/rpki/ZUSO/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 16:01:16 +0000
Certificate not after: Mon 10 May 2027 16:06:16 +0000
Subordinate resources: AS: 63900
AS: 131638
IP: 2402:30e0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:73:a6:c2:ff:bf:5c:9f:41:f8:57:fb:d5:8e:15:ea:7a:48:00:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 16:01:16 2026 GMT
Not After : May 10 16:06:16 2027 GMT
Subject: CN=0273304A820906A512D2F0D86CA293A77222962C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:df:63:c8:72:2c:45:00:f0:c4:a1:48:a2:
c9:26:40:3a:1d:ec:e2:d8:f1:b2:1d:fc:66:a3:00:
01:c2:4e:a6:01:82:70:ce:d9:58:af:12:b4:61:5a:
94:6a:da:e2:fb:73:26:5b:d2:46:90:78:0e:ab:cd:
3a:24:40:f7:14:d7:1b:5a:60:ce:66:9d:69:88:c6:
ba:54:95:28:83:5b:5e:8a:d4:44:a2:3a:0b:b9:65:
2b:a3:a8:ea:65:cd:38:98:fe:a9:dc:16:b8:f5:c4:
6a:30:a1:31:1d:60:4d:fa:eb:50:7a:07:4c:16:06:
35:09:9a:c2:69:b5:91:cf:d9:18:43:c5:8e:d8:70:
70:64:e1:69:49:3b:fe:0b:2d:29:c6:75:51:06:4d:
63:cb:13:ca:8c:09:7a:71:1c:c1:bb:ee:78:ff:3f:
ab:96:a9:9f:7d:75:cc:a7:01:0c:80:c7:24:68:53:
ff:1f:de:b4:75:04:c9:0c:e5:fe:66:62:45:ee:08:
59:ad:4e:ef:ba:8c:c4:6a:95:0d:f9:21:ae:05:b5:
e8:3d:71:f8:40:17:bd:8d:99:aa:04:0f:9a:c3:ac:
6b:cd:e6:f4:40:6b:8f:7a:d1:e6:86:12:82:69:2a:
d1:7a:c3:4c:e2:0d:92:f2:80:08:c6:a1:95:c5:f6:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:30e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63900
131638
Signature Algorithm: sha256WithRSAEncryption
7f:9b:ab:9f:ce:14:35:63:17:a2:0f:56:f7:4a:40:79:51:61:
85:ba:e9:7a:dd:6b:ec:ef:a9:19:26:bb:e4:ef:ab:1d:d7:98:
02:df:0e:74:07:67:03:b2:f6:bf:b0:d5:9a:ab:c2:9a:6f:ed:
23:40:e4:26:31:a8:e5:e4:24:14:8e:b7:2d:42:a6:7a:88:f9:
18:e1:db:b7:3b:cd:8e:21:80:38:c2:48:eb:78:68:fb:3b:62:
66:d5:49:ad:db:be:ad:9e:a5:c5:13:f7:ea:2d:95:e4:98:35:
e0:7c:15:32:43:8e:28:ce:cc:ef:82:78:10:da:b2:17:e8:54:
4a:6a:4c:5c:65:76:32:4b:94:7b:d3:d5:c9:75:4b:6e:2a:fe:
4a:4f:f7:d2:ab:72:4a:de:87:ba:44:7c:4f:b6:85:e9:3c:b6:
86:f2:b1:48:0b:e3:f3:f2:b1:fe:46:34:5a:a4:4c:8d:5e:0f:
54:84:22:17:52:11:b0:da:60:c8:19:b8:76:eb:7a:18:84:7e:
0b:7d:c5:29:fa:e0:93:de:80:ba:6e:d5:c5:6d:17:3e:f5:1f:
81:7a:31:60:22:86:20:30:0d:59:8a:6c:a5:79:38:f0:d3:69:
00:38:87:de:21:6e:a8:ee:c1:04:ea:53:74:f1:e9:67:b7:22:
08:0c:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:44 2026 by rpki-client