
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/334FCE79EA1C224FEDE0A15962C5536E18D15714.cer
File: 334FCE79EA1C224FEDE0A15962C5536E18D15714.cer (raw, json)
Hash identifier: jME2aVrssqVV7QyTLD7egdnEiUnupCfW61QOiObo+0s=
Subject key identifier: 33:4F:CE:79:EA:1C:22:4F:ED:E0:A1:59:62:C5:53:6E:18:D1:57:14
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 6B11BAAEEA23A9C09386D6E6CB56BCF576A872D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/WOLFNET/0/334FCE79EA1C224FEDE0A15962C5536E18D15714.mft
caRepository: rsync://rpkica.twnic.tw/rpki/WOLFNET/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 16:00:54 +0000
Certificate not after: Mon 10 May 2027 16:05:54 +0000
Subordinate resources: AS: 38846
AS: 150759
IP: 103.169.126.0/23
IP: 2407:a0c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:11:ba:ae:ea:23:a9:c0:93:86:d6:e6:cb:56:bc:f5:76:a8:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 16:00:54 2026 GMT
Not After : May 10 16:05:54 2027 GMT
Subject: CN=334FCE79EA1C224FEDE0A15962C5536E18D15714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:6b:33:43:16:65:8d:35:d7:b7:ce:17:71:
04:7f:6d:c5:41:11:2a:bb:a1:47:29:b7:84:54:29:
64:72:7d:7b:13:ea:95:a0:26:0a:bd:69:96:5e:5d:
4d:65:59:c3:a3:c5:44:6d:3f:99:e7:07:61:f1:f3:
4c:f1:c2:e5:11:16:9c:a2:a0:28:35:79:fd:da:be:
d9:db:21:ff:72:93:ef:4e:e2:86:e0:16:88:7f:a4:
ea:ae:af:31:e2:3e:3f:ac:05:14:cf:99:43:a9:90:
fc:f1:51:2f:43:7c:b4:0b:31:c2:ef:ba:9c:63:45:
90:cb:0e:95:76:50:58:28:fd:5a:11:20:b5:bf:45:
4b:02:d2:f7:24:8a:cb:d9:98:e5:2c:ce:5c:35:24:
58:70:c4:bc:88:c5:82:76:be:c4:96:f9:66:ac:aa:
85:c7:ed:b2:08:8e:fa:2e:bd:06:f0:15:1b:fb:ec:
d2:6f:bb:46:c9:c7:2a:8e:90:2e:47:3c:3f:38:87:
81:34:9d:d8:42:fc:70:64:52:17:42:7f:96:04:1d:
44:f7:18:16:88:59:b8:2b:a9:a0:3b:b0:f7:a2:91:
2d:60:86:3a:c5:de:f5:18:88:f8:af:32:dd:5e:7a:
a6:80:7b:2b:d8:83:09:51:cf:a2:f2:81:a4:99:3c:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:4F:CE:79:EA:1C:22:4F:ED:E0:A1:59:62:C5:53:6E:18:D1:57:14
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/WOLFNET/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/WOLFNET/0/334FCE79EA1C224FEDE0A15962C5536E18D15714.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.126.0/23
IPv6:
2407:a0c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38846
150759
Signature Algorithm: sha256WithRSAEncryption
b4:18:41:89:d3:55:06:47:a7:62:2e:bc:21:e7:b1:d1:6c:7e:
9c:2f:8b:97:1e:bf:4c:c1:6f:14:4a:17:01:da:70:34:d0:9f:
b7:04:3e:28:ee:c4:c2:43:13:79:f3:bf:71:93:0c:53:9e:bf:
66:ab:48:f3:fe:27:b0:63:45:f1:91:49:41:32:0f:0e:eb:47:
69:db:41:6c:c0:0e:68:ab:e2:0b:c0:2b:8b:b8:ff:d9:b4:75:
f2:68:82:7f:6e:3e:ce:0c:61:52:97:e8:77:1f:62:fa:bd:a7:
18:b9:82:00:7e:48:16:fa:03:8e:5e:1f:10:a9:57:5e:74:f4:
09:3a:29:ee:e6:5b:b1:1e:ae:20:bf:eb:97:51:cf:9e:31:77:
26:23:74:f3:c0:0c:a5:26:e5:9d:e4:ae:b3:b5:27:92:2b:89:
65:3a:45:f9:75:eb:cc:f9:2e:36:4c:0f:d7:9c:6e:75:f6:eb:
97:25:99:85:6d:03:ad:55:09:c2:4a:1e:12:ec:eb:f7:60:d1:
ad:87:f5:a8:43:a0:45:0a:7e:e5:1c:21:77:5a:33:5e:08:cd:
09:43:03:d8:f6:e9:ae:10:29:7f:68:19:32:09:07:ac:fb:c4:
13:7a:2a:18:51:9d:37:f5:76:9b:3d:66:72:4a:73:26:0d:8c:
7f:22:0f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:59 2026 by rpki-client