Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.cer
File:                     113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.cer (raw, json)
Hash identifier:          tnReo6mzRPb/ZId0A32nX6IMSegCPTgPkVBg+d1DsGs=
Subject key identifier:   11:3F:12:7C:C4:8B:AD:8F:6A:B9:E6:67:26:BB:D4:0C:B4:C1:F9:3D
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       5FC42519201BECA8BDEE2D06F77EACA4D09A4F61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:46:54 +0000
Certificate not after:    Mon 10 May 2027 15:51:54 +0000
Subordinate resources:    AS: 131151
                          IP: 2404:a3c0::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c4:25:19:20:1b:ec:a8:bd:ee:2d:06:f7:7e:ac:a4:d0:9a:4f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:46:54 2026 GMT
            Not After : May 10 15:51:54 2027 GMT
        Subject: CN=113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:c1:ed:53:90:04:5a:6d:e4:90:ae:87:54:
                    64:c0:42:80:24:c4:79:e9:93:45:1d:cf:8e:b6:40:
                    ff:0e:ab:df:5f:b3:cb:9f:db:c3:59:7b:94:cc:4b:
                    1f:c5:19:42:6e:bf:80:fd:53:27:99:e2:fc:35:b3:
                    f4:22:62:35:2e:a3:f5:2b:c0:80:ed:76:ef:19:30:
                    af:df:b0:9d:f3:ca:01:ed:2c:40:4a:b1:00:6e:c8:
                    0f:75:9f:c0:8e:a6:14:8f:33:21:fd:98:56:dc:ad:
                    77:bb:20:09:56:ea:c6:c6:55:21:a4:d0:65:ed:11:
                    4f:12:9e:39:0f:12:7a:03:38:4f:32:ff:e6:c9:71:
                    27:32:e6:62:b4:8e:1d:00:c6:6a:ba:b9:3d:31:30:
                    89:95:d8:a8:67:15:6f:dc:2f:ce:ef:0c:88:f3:a8:
                    9d:82:05:ee:62:fc:68:4b:cf:8a:b1:4e:8b:d7:32:
                    b3:a4:3e:fb:4a:f1:13:38:01:83:a8:6a:b1:bd:b9:
                    b3:0d:91:46:66:1f:45:58:fd:7c:90:9a:5d:ab:74:
                    11:c4:37:7f:a7:d0:de:6e:8a:80:48:e5:0e:19:ca:
                    e3:f3:2e:0e:c7:ea:07:7d:ab:85:5f:53:48:9c:f1:
                    f7:4d:18:2a:2a:08:43:e8:31:af:26:ba:0b:80:14:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:3F:12:7C:C4:8B:AD:8F:6A:B9:E6:67:26:BB:D4:0C:B4:C1:F9:3D
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a3c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131151

    Signature Algorithm: sha256WithRSAEncryption
         1a:52:12:a2:0f:85:e6:68:d8:82:0e:d4:59:ba:d2:16:f4:ec:
         67:10:24:50:77:dc:cc:e1:07:14:8e:18:16:44:09:a7:98:57:
         7c:50:8b:e1:fc:a4:8d:76:a5:8c:74:d3:35:e0:37:fc:8e:93:
         a3:97:ae:ad:84:04:76:9f:55:f8:b3:31:e2:ce:ae:bb:fc:e5:
         60:2b:28:4e:dd:32:2c:cc:01:83:d6:3b:e4:30:ea:21:63:e0:
         b9:e6:0b:09:90:0e:fd:f5:b6:9c:a3:2c:07:0a:96:a8:bd:af:
         b1:57:b1:90:04:03:ab:67:d0:f1:72:14:7b:98:32:93:3f:5a:
         db:74:2e:f1:ff:8c:f3:94:34:d6:59:d9:d0:82:18:20:9c:49:
         6e:86:b4:2b:14:99:1d:d1:ef:ea:2a:02:69:c6:69:4f:81:49:
         af:e5:76:f7:46:51:29:69:23:82:fc:d3:ca:35:eb:4b:65:77:
         cb:8e:f3:b4:37:5f:da:a3:17:d9:94:71:eb:9c:53:65:75:18:
         02:8e:b4:e9:25:83:4c:f3:dc:d1:34:1b:18:7c:be:33:22:50:
         3e:01:5e:df:12:74:04:4c:d0:a6:74:62:14:87:f2:58:5d:53:
         60:5a:0f:25:38:bb:3d:db:4b:b0:c7:00:e1:07:22:b8:97:e8:
         4b:1c:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:47 2026 by rpki-client