
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.cer
File: 50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.cer (raw, json)
Hash identifier: xWQ/OnkhbLrWAkaJRJ0i+AZjkTl8CsRMUUMjcxfDEK4=
Subject key identifier: 50:A5:85:8B:F7:6C:23:B2:BE:C3:AD:C7:4D:B8:B3:40:1C:A3:ED:93
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 250578D8C1481B86D15A05BCE9A385E67DF945EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.mft
caRepository: rsync://rpkica.twnic.tw/rpki/FLOPPY/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:45:45 +0000
Certificate not after: Mon 10 May 2027 15:50:45 +0000
Subordinate resources: AS: 150756 -- 150757
IP: 203.99.146.0/23
IP: 2401:4ca0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:05:78:d8:c1:48:1b:86:d1:5a:05:bc:e9:a3:85:e6:7d:f9:45:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:45:45 2026 GMT
Not After : May 10 15:50:45 2027 GMT
Subject: CN=50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:b6:36:50:33:41:6f:bc:de:fe:55:b7:c0:
86:37:b7:9f:47:82:b4:d2:44:f0:42:b5:53:54:69:
37:d4:c4:d0:43:d9:37:d5:42:5a:64:d3:b7:9d:17:
12:b1:a9:5f:cd:0c:e2:2d:80:b1:9a:37:28:a9:cb:
18:fe:ab:65:3f:fd:d5:ba:03:ef:6d:ee:82:82:1b:
ff:4b:10:3a:cd:44:ef:b6:bb:46:33:c2:14:11:30:
b9:a3:e9:43:a8:8e:a6:6a:06:41:90:bd:4f:4c:86:
4a:26:34:28:de:cf:2f:7e:29:f5:36:58:44:11:87:
58:bc:36:69:27:8f:de:c6:9e:48:05:3b:1f:26:77:
12:00:a9:c9:1c:36:1f:9e:27:6a:b1:ee:87:67:86:
c4:f4:03:a9:f2:f3:75:14:a2:7e:21:53:6d:4c:db:
be:97:a2:b6:41:bd:83:1b:31:d1:93:db:cc:b3:98:
c9:80:e2:d1:50:56:42:1f:35:d8:ab:08:f8:47:54:
71:c6:13:c3:b5:0e:02:6d:e3:fb:da:32:79:b1:cd:
9e:5e:cf:2f:3c:07:d2:ee:2a:ca:ef:f2:57:01:bc:
c0:69:c4:c7:5b:d5:86:1c:0f:d3:79:5d:ae:0c:4a:
b7:71:45:6a:4e:79:97:8e:9d:15:8e:2a:04:b5:72:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
50:A5:85:8B:F7:6C:23:B2:BE:C3:AD:C7:4D:B8:B3:40:1C:A3:ED:93
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/FLOPPY/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.99.146.0/23
IPv6:
2401:4ca0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150756-150757
Signature Algorithm: sha256WithRSAEncryption
25:c4:49:0c:30:45:ae:8f:0d:0f:fa:c5:ea:cf:93:cb:33:3e:
6f:a3:14:04:96:1c:f3:58:8f:6c:ea:8f:c6:db:e4:72:03:03:
bb:21:6e:2c:59:b4:c2:b1:31:ef:f2:4c:8d:60:80:77:95:94:
e7:d6:44:6a:4e:0a:9b:b8:80:db:d5:99:ba:8f:ec:e8:06:35:
6d:c5:8b:d1:97:4b:ca:b2:29:3c:03:2b:5a:86:62:1b:18:09:
9b:71:55:0b:f3:14:c1:90:b9:e7:44:37:d6:4e:9c:62:0e:2c:
5a:89:8b:10:a4:66:45:51:a1:7e:28:9c:38:72:bd:be:23:7f:
f5:0a:3a:1a:13:d6:cd:0f:be:87:26:ae:20:80:16:43:1e:f6:
10:65:82:7d:fb:9a:68:9a:38:6c:16:33:b6:95:87:1a:ab:d3:
21:96:d7:8a:42:bd:25:7b:19:48:1d:7d:93:92:70:e5:e8:d6:
35:66:37:d4:60:24:14:d6:9a:77:fe:46:22:49:7e:59:41:d1:
72:11:0d:28:2a:10:a7:92:36:ac:06:63:2d:03:3f:0d:d9:67:
47:ce:68:40:7f:3a:6c:fe:f7:67:4a:9c:20:8b:ba:3c:20:7b:
94:76:4e:cf:ea:ca:33:38:30:c0:74:b4:0e:91:54:0c:72:23:
11:4c:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:49 2026 by rpki-client