Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
File: 157D536924EE6C5A7711625C6906CB5139BE6605.cer (raw, json)
Hash identifier: 2tg9ZUAE18WTU8fBv+Ndys3oF+V6njUqM522jJ1L5kw=
Subject key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 01B4AAC7978F2B052DD7FD226DDBA6F7611D8C1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
caRepository: rsync://rpkica.twnic.tw/rpki/DYXNET/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:45:24 +0000
Certificate not after: Mon 10 May 2027 15:50:24 +0000
Subordinate resources: AS: 17417
IP: 61.56.64.0/19
IP: 61.247.160.0/20
IP: 113.21.160.0/19
IP: 210.67.96.0/20
IP: 2403:ee00::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b4:aa:c7:97:8f:2b:05:2d:d7:fd:22:6d:db:a6:f7:61:1d:8c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:45:24 2026 GMT
Not After : May 10 15:50:24 2027 GMT
Subject: CN=157D536924EE6C5A7711625C6906CB5139BE6605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:6d:21:85:24:7d:d3:2f:40:dc:4b:b3:da:
9a:80:be:2c:b2:c3:d0:ee:8b:6a:f4:c6:67:9e:99:
a6:9a:80:20:8b:6a:5b:15:67:70:c3:bc:03:9b:16:
f6:2d:c9:a8:58:04:6c:c0:f0:f4:0b:fd:f0:53:0c:
46:26:53:d9:bc:06:8b:6c:a2:34:28:58:a7:67:60:
f4:ee:a1:38:b8:d2:c3:e9:27:c7:da:2d:de:cb:19:
7d:d7:f8:61:53:db:26:9f:b0:6c:03:a2:65:d2:79:
ec:50:f3:48:6e:ed:8f:26:41:75:28:b8:11:e5:29:
59:3b:9c:78:13:46:93:62:46:9b:78:6a:71:5a:be:
28:15:1d:18:eb:24:d5:8b:7a:07:0d:f3:2d:5c:92:
40:6c:33:3f:bf:d3:79:a8:ef:41:13:1d:79:06:f7:
4e:b8:09:af:ea:5a:af:f5:05:ed:6f:05:cd:ed:9c:
fc:98:79:f9:4c:fa:7f:e5:0d:eb:e7:90:a5:ec:7c:
e6:ae:6f:37:eb:3c:d4:cd:d8:06:42:29:5c:d2:28:
34:be:85:cc:0c:76:f8:84:06:49:b9:67:e6:96:0c:
8c:64:ab:01:f3:56:e2:d2:b4:54:2f:20:fb:9c:e8:
0c:2d:70:0d:8a:a9:5d:54:b8:ab:bf:c4:bd:87:a4:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.56.64.0/19
61.247.160.0/20
113.21.160.0/19
210.67.96.0/20
IPv6:
2403:ee00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17417
Signature Algorithm: sha256WithRSAEncryption
89:69:a5:4f:2f:63:9d:73:15:da:8b:90:3d:fc:ab:26:df:49:
bc:fc:a3:0b:f4:0c:b2:37:02:5d:b4:b8:d5:35:92:1e:30:ce:
9d:a7:80:76:7e:6c:65:96:09:28:5d:18:1c:c0:62:19:28:3d:
bd:bc:e9:69:a3:dc:c8:9e:51:e8:63:b8:de:cf:84:6d:c7:c9:
84:73:4e:5a:53:de:1b:44:7e:fc:0b:6b:42:91:b3:a5:b3:96:
61:52:57:f5:81:d9:d6:74:31:3a:6c:35:17:1c:0c:f1:43:f1:
c7:15:1e:1b:ac:77:61:f3:c9:fd:cf:bb:c3:5e:23:48:81:16:
6d:a1:03:4b:e6:62:3e:83:83:85:8c:3c:06:1f:96:42:bd:02:
5b:d8:91:57:38:5c:71:a4:1b:03:3f:ec:71:29:46:50:c5:6e:
38:50:2b:83:c4:a0:b6:1a:7b:af:c1:90:c2:ff:0b:e4:a2:7a:
34:a6:9f:ac:55:3e:65:90:8a:5e:40:ba:5d:72:53:02:a8:6e:
f1:92:d1:92:74:bd:8c:ab:49:46:a7:55:83:46:6d:06:18:77:
f9:d5:62:31:68:0f:f4:55:63:6b:2b:ae:f8:51:79:83:4b:8a:
e5:57:b5:48:c0:89:be:7c:92:11:a2:5e:03:7f:74:73:bd:bd:
74:ce:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:58:29 2026 by rpki-client