Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer (raw, json)
Hash identifier: SAIXXhCFwz4OrM/dzFUjfxxZdpx/j1wIIVgGIxDLYFE=
Subject key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 2C7BB3A7891AC74BFFBA95BFF011F4FD1E2289D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
caRepository: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:43:54 +0000
Certificate not after: Mon 10 May 2027 15:48:54 +0000
Subordinate resources: AS: 10133
AS: 131600
AS: 131606
AS: 131608
AS: 131615 -- 131616
AS: 132737
AS: 136378
AS: 150761 -- 150765
IP: 43.240.152.0/22
IP: 103.5.100.0/22
IP: 113.21.80.0/20
IP: 118.150.0.0/16
IP: 119.31.176.0/20
IP: 150.116.0.0/15
IP: 175.111.32.0/19
IP: 203.163.192.0/19
IP: 223.26.64.0/18
IP: 2401:5e00::/32
IP: 2406:d400::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7b:b3:a7:89:1a:c7:4b:ff:ba:95:bf:f0:11:f4:fd:1e:22:89:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:43:54 2026 GMT
Not After : May 10 15:48:54 2027 GMT
Subject: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:cb:a0:e0:ef:b6:b4:c1:47:9b:a8:d4:62:
78:44:7a:eb:4d:79:5e:6a:a7:2d:cf:e3:7b:f3:8f:
20:e2:1f:a8:4c:15:a6:89:28:0d:52:75:e1:f2:5b:
2b:3c:4b:ee:74:b8:52:91:e6:19:d7:73:36:e7:96:
c5:78:3b:0b:25:f4:81:b8:96:9c:fa:07:73:a0:e7:
8f:86:73:1f:47:62:48:e8:ea:63:38:ba:56:ef:f9:
05:66:f2:89:9a:c9:7c:95:fa:59:6a:86:04:26:93:
c2:07:d3:0b:a4:9b:4e:2f:26:76:22:79:12:4c:b8:
61:e4:90:95:4a:9f:2a:e6:2e:91:a6:6f:25:1e:28:
7f:46:0b:04:25:01:3e:2d:2a:96:4d:cc:5b:d7:7e:
cc:b4:c6:b3:95:05:59:0f:3a:2f:38:32:5d:c6:94:
59:29:e0:06:41:87:ca:a0:96:fd:d9:30:01:bd:c0:
be:a2:f8:2a:63:bd:3a:bc:f1:6a:26:87:01:6c:e6:
de:17:61:2b:e1:c6:f7:3c:6c:f3:5e:df:16:6f:fb:
3e:0e:28:07:d9:13:29:c6:07:ee:b2:5a:0c:3c:6f:
0e:5b:8f:ae:bb:30:38:1d:37:7f:e8:90:b5:1f:63:
8f:95:23:28:67:25:92:54:ab:ad:95:da:9d:66:9d:
03:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.152.0/22
103.5.100.0/22
113.21.80.0/20
118.150.0.0/16
119.31.176.0/20
150.116.0.0/15
175.111.32.0/19
203.163.192.0/19
223.26.64.0/18
IPv6:
2401:5e00::/32
2406:d400::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10133
131600
131606
131608
131615-131616
132737
136378
150761-150765
Signature Algorithm: sha256WithRSAEncryption
25:48:b1:43:81:54:3c:83:bc:ce:93:34:cf:c5:eb:9f:06:4c:
c5:57:1c:50:8a:a4:9b:13:43:84:3c:ee:14:1e:ff:a6:80:54:
8e:77:e8:5f:8f:ee:27:7b:b8:fa:4a:80:c2:e9:7b:56:7f:9e:
db:2e:83:da:8c:f9:5a:c4:71:af:4b:2d:20:cc:24:36:db:f1:
85:48:60:38:12:47:b1:df:86:5b:ef:bc:22:24:14:51:30:ed:
36:c6:2f:3f:5c:77:89:82:c2:18:6d:14:58:33:db:23:5f:dd:
7e:2f:71:30:fc:e0:27:33:16:40:04:63:16:12:ab:5d:ce:a2:
f0:37:9f:71:2e:fe:a6:62:26:10:69:a6:21:6c:35:90:1a:1b:
43:9a:dd:23:b2:42:57:87:d9:e7:b1:d1:75:83:90:d2:04:b6:
1f:68:78:ef:a3:82:56:94:47:20:b2:50:27:21:f5:1b:5d:f9:
a9:2a:1e:cf:81:36:80:b4:33:b5:c7:0a:4f:5b:9c:40:1c:7a:
43:05:9e:c4:dc:b7:70:b6:f2:12:af:15:17:26:ce:d7:d5:d2:
51:10:db:10:a1:f4:79:46:09:e5:87:7b:48:14:7d:4c:5d:86:
69:c4:56:b0:8a:aa:94:82:ed:e5:10:34:7a:48:dc:7a:db:fb:
f8:5b:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:47 2026 by rpki-client