Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.cer
File:                     6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.cer (raw, json)
Hash identifier:          3v12WGgOHt7xRr0YOGZtadCLZsugua6PS5Oj+GXiCHE=
Subject key identifier:   6B:95:C6:B7:D1:D7:23:82:DF:E9:5F:9E:71:54:79:7A:4E:1F:F0:5D
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       70FECCDFD455D7536EB7C26F06287ED29E44F4B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 16:00:22 +0000
Certificate not after:    Mon 10 May 2027 16:05:22 +0000
Subordinate resources:    IP: 103.131.112.0/22
                          IP: 2403:c940::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fe:cc:df:d4:55:d7:53:6e:b7:c2:6f:06:28:7e:d2:9e:44:f4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 16:00:22 2026 GMT
            Not After : May 10 16:05:22 2027 GMT
        Subject: CN=6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:49:3a:b4:ab:d2:02:b7:32:8a:a5:88:73:
                    10:f6:b1:62:b5:cd:a9:87:58:2f:af:c3:ec:36:81:
                    f5:95:5b:6a:79:ee:af:76:a1:64:48:c7:14:9e:9f:
                    5b:cf:99:e5:cf:54:4e:ac:db:28:42:2d:d7:88:dd:
                    82:aa:59:e6:a7:3e:88:c1:d0:22:24:66:b8:56:46:
                    74:5f:5e:d3:28:b4:5b:f0:25:98:0f:9e:5f:dc:79:
                    3e:84:64:98:92:8e:83:e1:22:a3:67:22:08:57:c4:
                    82:b6:69:4c:58:81:99:a1:ca:0c:cc:00:8b:61:90:
                    7b:92:fc:dc:0c:fd:95:7d:6a:52:54:2d:cc:c7:59:
                    2c:64:6a:9b:a3:d7:5a:2b:a4:89:db:4b:81:30:ae:
                    87:14:f6:26:6c:4f:4c:87:9a:95:b0:0d:c2:d5:ef:
                    e6:3b:83:3c:02:ea:0f:71:d4:32:39:dd:42:d0:61:
                    cb:f1:c3:1f:ee:d7:2d:b1:8c:16:3a:e6:53:a5:66:
                    98:fa:3b:96:af:d0:25:6c:7e:0c:8d:e9:a4:96:27:
                    b0:76:a7:81:37:ca:aa:2f:0d:7a:1a:49:d0:ee:b0:
                    96:e2:64:9e:d6:1b:b7:7f:7f:18:65:98:e6:ca:e3:
                    79:f2:33:89:b4:ae:7a:21:50:aa:74:e5:36:a5:4b:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:95:C6:B7:D1:D7:23:82:DF:E9:5F:9E:71:54:79:7A:4E:1F:F0:5D
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.112.0/22
                IPv6:
                  2403:c940::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ff:fa:d3:9c:4c:29:55:61:2a:8a:c6:84:d3:31:c8:b7:a8:
         c6:cd:38:0a:44:79:2a:72:b5:ad:33:89:8f:ad:77:e6:11:60:
         02:46:7f:d0:12:1c:81:80:e8:2f:70:d5:6b:c7:a2:75:92:6d:
         dc:a0:a7:34:33:5c:8f:bc:5c:5c:76:fc:ae:bc:e7:51:6c:e5:
         7d:a2:a3:9c:b3:25:08:54:b4:05:95:21:63:a9:84:1e:3b:b9:
         e5:16:ae:f7:8d:61:e7:e7:bb:3f:c4:a5:78:31:fe:12:0f:79:
         8f:bf:0f:bf:1d:0a:6e:a6:59:3c:a8:64:31:6c:f7:f9:2d:87:
         87:3d:ff:6f:d2:3f:21:2d:c6:4e:ec:21:66:75:b9:dd:fa:58:
         f4:98:34:51:ec:a0:80:30:d8:0e:7a:93:ee:48:be:4f:b1:dd:
         0f:f3:5b:6c:a8:fa:48:04:8f:b2:88:b9:a4:c3:2c:9b:1a:89:
         84:b5:d5:1f:da:af:6d:4a:2e:0b:25:61:ab:10:ab:e3:8f:76:
         a7:b6:ab:e0:c9:45:e3:3b:9d:c3:88:c6:31:4f:8a:17:b6:79:
         47:5c:78:2a:a7:fd:d7:c7:01:21:4a:85:02:e1:0d:55:73:bb:
         cc:f9:26:cc:b4:22:ff:22:65:3c:b2:93:c6:93:35:9c:0c:bd:
         07:af:55:48
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUcP7M39RV11Nut8JvBih+0p5E9LMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDAyMloX
DTI3MDUxMDE2MDUyMlowMzExMC8GA1UEAxMoNkI5NUM2QjdEMUQ3MjM4MkRGRTk1
RjlFNzE1NDc5N0E0RTFGRjA1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMRWSTq0q9ICtzKKpYhzEPaxYrXNqYdYL6/D7DaB9ZVbannur3ahZEjHFJ6f
W8+Z5c9UTqzbKEIt14jdgqpZ5qc+iMHQIiRmuFZGdF9e0yi0W/AlmA+eX9x5PoRk
mJKOg+Eio2ciCFfEgrZpTFiBmaHKDMwAi2GQe5L83Az9lX1qUlQtzMdZLGRqm6PX
WiukidtLgTCuhxT2JmxPTIealbANwtXv5juDPALqD3HUMjndQtBhy/HDH+7XLbGM
FjrmU6VmmPo7lq/QJWx+DI3ppJYnsHangTfKqi8NehpJ0O6wluJkntYbt39/GGWY
5srjefIzibSueiFQqnTlNqVLNK8CAwEAAaOCAn0wggJ5MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGuVxrfR1yOC3+lfnnFUeXpOH/BdMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr
BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9VTklURURTT0ZU
LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1VO
SVRFRFNPRlQvMC82Qjk1QzZCN0QxRDcyMzgyREZFOTVGOUU3MTU0Nzk3QTRFMUZG
MDVELm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG
AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ4NwMA0EAgACMAcDBQAkA8lAMA0GCSqG
SIb3DQEBCwUAA4IBAQBD//rTnEwpVWEqisaE0zHIt6jGzTgKRHkqcrWtM4mPrXfm
EWACRn/QEhyBgOgvcNVrx6J1km3coKc0M1yPvFxcdvyuvOdRbOV9oqOcsyUIVLQF
lSFjqYQeO7nlFq73jWHn57s/xKV4Mf4SD3mPvw+/HQpuplk8qGQxbPf5LYeHPf9v
0j8hLcZO7CFmdbnd+lj0mDRR7KCAMNgOepPuSL5Psd0P81tsqPpIBI+yiLmkwyyb
GomEtdUf2q9tSi4LJWGrEKvjj3antqvgyUXjO53DiMYxT4oXtnlHXHgqp/3XxwEh
SoUC4Q1Vc7vM+SbMtCL/ImU8spPGkzWcDL0Hr1VI
-----END CERTIFICATE-----
Generated at Wed May 13 19:57:45 2026 by rpki-client