Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
File: 27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer (raw, json)
Hash identifier: 10kNc4/4ykLru4+/f0auy2p8C6b5DrAtejmkVWjJsRM=
Subject key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 56FD0A80B8EB241614A282A92CB85BDA88408845
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
caRepository: rsync://rpkica.twnic.tw/rpki/DWT/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:45:22 +0000
Certificate not after: Mon 10 May 2027 15:50:22 +0000
Subordinate resources: AS: 9675
AS: 131622
AS: 131641
IP: 103.136.60.0/23
IP: 2404:8cc0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fd:0a:80:b8:eb:24:16:14:a2:82:a9:2c:b8:5b:da:88:40:88:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:45:22 2026 GMT
Not After : May 10 15:50:22 2027 GMT
Subject: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:9e:6a:b4:2f:68:78:3d:6d:e2:f6:da:f6:
9f:d9:2e:09:15:24:10:85:77:ac:b7:c8:a7:15:b8:
2d:9f:24:3d:04:ec:a8:61:bc:71:54:f8:d1:f7:69:
34:b7:8a:6e:f3:89:f9:fb:3b:2f:08:d5:d1:c6:d6:
bf:07:05:71:95:9a:33:a2:36:e5:42:22:89:a3:7b:
81:03:55:99:ed:40:bf:2d:16:29:d1:a6:21:c2:8d:
bc:1d:ed:3e:aa:18:bd:b5:92:b3:8f:d4:f2:bc:90:
83:14:82:de:7d:08:68:fc:a2:72:37:1c:28:0a:42:
fb:52:46:b4:a5:1d:f6:77:3e:87:68:af:3c:30:ca:
0d:fa:0e:da:39:2e:32:c7:13:07:3f:a9:eb:82:4b:
47:9d:27:60:ee:42:f8:92:8c:6d:da:ad:a3:b1:60:
1b:77:47:7e:23:5b:65:85:35:cd:fc:3b:8a:cf:4b:
c0:3d:37:aa:cf:70:26:d8:81:d2:54:5c:32:aa:c6:
8f:5d:e4:9c:2b:8c:8e:8a:57:d2:0b:b8:6b:59:d9:
b9:db:56:28:a6:0a:cb:45:93:9b:06:77:b8:6a:15:
cd:28:b1:5c:d4:c6:9a:4f:d5:fc:24:72:09:9d:a0:
6f:89:02:af:74:3d:44:1c:1f:87:02:a5:95:80:51:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/23
IPv6:
2404:8cc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9675
131622
131641
Signature Algorithm: sha256WithRSAEncryption
2a:af:ad:02:36:70:98:2e:b2:fe:a6:b1:93:11:03:3f:7c:9b:
25:ab:38:5c:dc:00:25:0f:06:29:8e:70:e0:28:40:e9:7f:59:
e8:05:be:f9:6d:3f:39:3c:0e:6e:09:6b:ed:be:e9:69:5b:cc:
eb:c0:c2:47:25:1c:90:73:cd:5f:bc:fd:cc:e6:81:26:cf:6c:
a1:e7:d0:7e:e8:3c:58:55:fd:67:9c:e6:39:67:a8:1b:7d:ab:
96:50:c1:f8:17:cb:5d:16:02:9b:7d:06:23:97:aa:11:21:28:
1d:62:49:5c:f2:47:82:f5:6e:de:7f:60:97:59:7c:3e:6c:68:
eb:50:ff:9e:6a:6b:9a:aa:e4:ac:26:a1:f2:1e:10:1f:15:23:
7f:08:20:fc:57:cd:f2:2b:0c:7d:cd:50:03:4f:26:e0:8a:82:
41:ed:d9:4d:5c:65:7b:1e:4f:b9:74:a2:5c:55:68:de:9b:4f:
84:66:4a:7f:71:ab:49:78:25:29:05:e1:2a:a1:55:d9:8a:20:
99:d2:56:da:19:be:50:81:91:b3:ec:3f:d8:91:14:18:b0:78:
2c:1e:76:01:7d:19:5d:f1:98:1b:08:68:cd:ab:a0:e4:1f:b1:
a2:84:b9:b3:42:da:b2:4e:75:3f:e9:d3:db:68:55:a0:4a:f4:
39:28:f8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:58:01 2026 by rpki-client