
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/59239D21E304AD06D0AA54107AAA4D4D724743F3.cer
File: 59239D21E304AD06D0AA54107AAA4D4D724743F3.cer (raw, json)
Hash identifier: mdsn5wZVKgs8nUr8wYOj+qayShHtuWHCDej71lrCNdI=
Subject key identifier: 59:23:9D:21:E3:04:AD:06:D0:AA:54:10:7A:AA:4D:4D:72:47:43:F3
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 2E0F03758CFE411F8E788F288EC73BBB6C7A31F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/FOXCONN/0/59239D21E304AD06D0AA54107AAA4D4D724743F3.mft
caRepository: rsync://rpkica.twnic.tw/rpki/FOXCONN/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:45:46 +0000
Certificate not after: Mon 10 May 2027 15:50:46 +0000
Subordinate resources: AS: 131589
IP: 103.227.32.0/22
IP: 2400:b480::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:0f:03:75:8c:fe:41:1f:8e:78:8f:28:8e:c7:3b:bb:6c:7a:31:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:45:46 2026 GMT
Not After : May 10 15:50:46 2027 GMT
Subject: CN=59239D21E304AD06D0AA54107AAA4D4D724743F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:0c:e8:8e:1f:36:72:72:2c:9f:76:bc:22:
78:c6:70:34:6c:47:99:02:da:bc:df:15:cc:fe:8a:
c4:73:ba:be:3b:6b:76:ca:41:41:ad:72:a5:c8:22:
e4:9a:bb:60:a1:90:6a:9d:23:09:48:ff:8e:cb:68:
c4:d5:d2:a9:d4:9f:1a:b0:22:92:cf:ea:e0:67:6c:
f5:66:48:a8:46:fa:67:1e:73:86:b3:6a:59:99:14:
46:1a:af:93:ff:b0:ee:6a:cb:e3:87:1d:27:a8:45:
8d:f8:f8:12:0f:bf:c2:b0:cc:7d:e3:55:dc:5a:22:
b8:46:1b:f2:b0:83:c7:e0:4b:5e:e1:7b:dc:0b:b8:
74:9e:26:93:47:84:b6:c9:b0:20:e2:71:ba:d6:a2:
c6:fc:74:b9:67:38:31:1c:9f:3f:1c:6f:5b:a8:c7:
07:bf:64:3c:3e:7a:6c:d5:42:c7:b0:5c:3a:fd:2d:
4c:97:d5:9e:64:30:03:8b:c6:72:52:ae:99:b2:3e:
d6:b7:9c:6c:7d:30:5f:84:40:b1:67:70:ea:6c:fd:
ca:b3:a3:0c:a0:18:34:7c:e3:c8:ef:a2:f8:10:1b:
36:8e:30:c2:30:f6:76:c4:eb:61:cf:6f:05:4e:ad:
a6:eb:c7:a4:0c:59:c3:64:d0:4b:01:8c:4c:b4:b3:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
59:23:9D:21:E3:04:AD:06:D0:AA:54:10:7A:AA:4D:4D:72:47:43:F3
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/FOXCONN/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/FOXCONN/0/59239D21E304AD06D0AA54107AAA4D4D724743F3.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.32.0/22
IPv6:
2400:b480::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131589
Signature Algorithm: sha256WithRSAEncryption
73:88:28:18:b6:5c:2c:60:ce:c2:cb:f6:c3:5e:fe:5e:df:6a:
39:90:f3:d5:07:a4:ce:6d:99:b9:96:f0:1a:09:56:9d:1d:19:
a3:c8:24:3e:48:ef:c7:b6:d1:af:a6:61:c0:8a:d7:d8:29:a6:
46:85:0f:e0:c1:7a:49:ab:cc:23:dd:d7:56:2a:f0:6d:b0:7f:
78:0f:75:f5:a6:5f:5b:b4:76:7b:31:f6:30:db:96:cc:88:31:
6c:6b:dd:05:0d:26:d1:59:b4:20:f9:99:92:2b:42:e3:69:75:
39:42:f0:00:ac:3d:ba:d3:f5:af:f3:bf:51:d6:a7:fc:dc:8e:
d3:4f:20:0a:16:04:53:b8:20:65:57:2d:a0:59:5f:ee:44:19:
ec:e3:89:23:56:42:64:41:79:e9:96:2b:8a:4c:6f:23:93:c9:
1a:27:5d:95:6b:d4:b3:4a:c5:f2:ba:62:a6:6a:f5:4a:19:c0:
9d:41:8f:91:f7:01:8c:43:da:11:40:04:b4:fe:70:e3:58:b0:
d6:a5:b6:06:b4:be:63:12:1a:6e:59:58:b7:49:8d:34:cd:e3:
d6:72:97:42:31:1f:c6:2e:ac:b1:8f:52:d1:52:0c:a4:3d:04:
9f:46:48:8b:fa:31:8b:26:01:e5:d7:49:2e:a6:db:86:d5:81:
1a:c5:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:36 2026 by rpki-client