Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer
File:                     73E6AC8F948D0C97D941F26531617C19223508E6.cer (raw, json)
Hash identifier:          QL2p8P0EVqyxLN5J+II5YBx8wvCDaQIuyIx/Cs595JQ=
Subject key identifier:   73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       52E41CAE9A4F3B14074C1427ECFFF664A245FE25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/CARL-NET/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:43:28 +0000
Certificate not after:    Mon 10 May 2027 15:48:28 +0000
Subordinate resources:    AS: 131618
                          IP: 103.103.80.0/22
                          IP: 211.79.102.0/23
                          IP: 2403:84c0::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e4:1c:ae:9a:4f:3b:14:07:4c:14:27:ec:ff:f6:64:a2:45:fe:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:43:28 2026 GMT
            Not After : May 10 15:48:28 2027 GMT
        Subject: CN=73E6AC8F948D0C97D941F26531617C19223508E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:4f:9f:36:ea:40:1d:c6:f8:d6:2a:00:ed:
                    de:b7:f5:62:df:34:5c:e9:b5:8c:88:11:c7:22:b0:
                    4e:10:8c:e4:d3:9f:35:a8:dc:f5:5b:8e:28:f5:e2:
                    89:63:d7:52:7c:12:fc:79:b3:37:f5:06:ba:a3:b3:
                    2f:44:62:78:5f:9f:89:d7:0b:f4:32:96:75:51:d8:
                    27:96:71:1d:75:0f:14:85:2e:ca:d8:29:ee:2a:77:
                    62:2c:48:a9:b4:de:57:cd:b3:4f:91:a8:cf:d6:8f:
                    2d:17:57:ec:ce:ca:a4:2b:4b:dc:81:de:de:e4:40:
                    50:32:61:19:d0:f8:ed:5c:c5:6e:f6:f9:ab:fc:ff:
                    5f:5a:75:73:f2:ff:db:56:52:03:2e:48:58:66:89:
                    21:98:13:f5:6b:d4:2a:08:09:f5:9f:08:56:8a:70:
                    0a:f8:03:f9:e3:f7:73:62:49:12:15:d2:44:df:f3:
                    06:8f:a0:b6:1e:4b:4e:87:ee:a5:1c:bf:cc:11:5e:
                    2f:e6:5d:da:b5:ef:26:9d:27:5a:06:50:56:06:f7:
                    ff:1d:ff:85:5b:04:5a:92:6c:0a:cf:2b:7a:75:ea:
                    50:bb:9b:ee:8d:05:35:36:cc:8c:e7:08:58:13:86:
                    63:78:dc:f5:1a:6c:6f:45:e2:ea:b8:a4:8e:7a:24:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.80.0/22
                  211.79.102.0/23
                IPv6:
                  2403:84c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131618

    Signature Algorithm: sha256WithRSAEncryption
         99:b9:c7:84:69:02:7c:1d:63:f4:2e:e5:89:98:3b:a4:af:54:
         3b:86:37:8c:b9:25:b4:49:f2:14:2e:4f:06:91:19:12:56:5d:
         9f:6a:ba:8c:d8:70:34:29:4a:86:6a:60:08:97:73:ee:a4:72:
         a7:f2:e8:7c:09:6a:b4:89:12:c4:9d:3f:83:e5:aa:52:14:5c:
         ab:43:00:1f:2a:82:2b:47:d8:84:78:a3:24:20:b8:6c:0c:6e:
         9e:85:f2:27:8f:95:26:bc:6d:c7:2e:e2:d0:88:13:21:e4:dd:
         24:46:7e:da:8e:66:d7:fe:31:83:56:66:f4:23:08:07:b9:b9:
         8f:08:cc:5a:26:69:5e:cf:f6:b8:11:75:bb:18:b2:89:7d:9f:
         aa:72:68:34:a0:8d:4d:6b:71:ef:ce:c2:ef:51:d4:ef:7c:bd:
         ec:bc:5a:87:d0:3f:31:b8:21:ab:ae:fb:e2:8d:81:71:2f:68:
         53:18:42:28:27:34:ef:4f:16:a2:e5:51:d2:a5:c1:65:5b:0f:
         13:53:29:e0:7c:1c:72:87:66:93:78:10:30:02:98:f9:74:90:
         cf:be:fc:64:10:32:21:76:c2:4b:f7:1f:e0:95:b2:e2:f2:bd:
         44:a4:3e:44:1a:1d:e5:e4:08:71:a7:db:32:69:b5:9c:ef:0a:
         59:35:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:58:01 2026 by rpki-client