Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
File:                     8B6578CFFA2564370C947633B4222B38FBE04787.cer (raw, json)
Hash identifier:          LpO9HR1JchqEeckJIZkbe1oDxowAJ3aDZDz0yTJSdFA=
Subject key identifier:   8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       6BA7BFD4BAE1682032C159F2C2488945B6C3C6C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/CENTROID/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:43:43 +0000
Certificate not after:    Mon 10 May 2027 15:48:43 +0000
Subordinate resources:    AS: 131617
                          IP: 103.104.148.0/22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a7:bf:d4:ba:e1:68:20:32:c1:59:f2:c2:48:89:45:b6:c3:c6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:43:43 2026 GMT
            Not After : May 10 15:48:43 2027 GMT
        Subject: CN=8B6578CFFA2564370C947633B4222B38FBE04787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:ba:f3:e8:e8:cf:f3:db:fe:58:cb:f8:3e:
                    d0:05:77:14:03:72:ce:f6:ce:88:f9:c9:5d:a7:98:
                    29:c8:5a:10:ab:3b:b3:8f:1e:f9:67:9f:2c:6d:3a:
                    3d:a4:b5:b4:5f:ba:51:b4:77:87:29:81:60:7b:b1:
                    46:ea:22:7f:f4:3f:7d:4e:fb:b0:c8:b7:3d:33:f1:
                    cb:b4:d8:7b:46:9e:09:5b:7c:66:59:f6:f0:1f:d5:
                    39:ca:12:5f:f4:b7:1f:bf:27:92:0a:b4:78:09:ad:
                    57:ff:fe:c5:97:74:83:39:30:ee:ff:6e:3f:5d:df:
                    46:e4:a1:5f:90:92:80:c6:50:44:7b:4a:eb:ba:a9:
                    ab:db:92:bd:ac:5b:08:c3:c5:0f:58:ec:ba:ba:8c:
                    4e:77:d5:e0:f6:08:8f:11:2a:cb:5a:7d:49:86:2e:
                    06:10:d7:7f:8b:3a:6d:5e:52:9b:b0:9d:b9:9c:60:
                    06:c2:73:a0:93:f5:a5:8e:67:94:ab:f4:d0:a3:ab:
                    89:05:37:88:06:86:cd:cb:29:12:fe:40:95:1f:46:
                    b1:bf:23:89:b7:57:54:eb:95:96:8a:04:27:c6:00:
                    ce:4f:2b:a7:7a:26:af:58:4b:6e:1c:a5:7b:05:2c:
                    68:52:94:1f:66:f0:8a:b5:5d:88:ba:38:e5:e1:d9:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.148.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131617

    Signature Algorithm: sha256WithRSAEncryption
         25:d0:c1:c6:b0:37:b2:ef:f9:53:fb:95:6b:f9:86:fb:15:f8:
         01:cc:0c:59:b0:78:b7:8c:c1:77:b7:ec:a0:a7:b5:77:6b:93:
         2c:b4:37:b5:ae:ed:20:b3:e6:53:0f:aa:e8:f2:7f:a1:96:67:
         c2:af:e7:0a:a8:17:f3:44:f6:f0:fa:51:9a:84:2d:0a:3f:3f:
         2e:a6:99:2d:d7:2d:b1:c5:75:5b:92:23:c6:aa:ee:e5:18:d7:
         a2:6f:52:8d:6f:f7:2d:37:6c:26:ed:65:a1:0d:78:39:0b:6f:
         eb:b8:05:05:5a:0d:bf:d5:95:51:ae:3b:cf:15:54:a4:0f:9f:
         0e:43:e6:7c:8e:c9:64:08:f5:b3:c4:9b:27:8a:dd:62:0d:e7:
         ef:8c:c1:db:85:3a:bb:69:36:fe:7a:f1:94:e3:bd:f7:7e:37:
         19:43:20:88:59:7d:fc:16:ac:72:48:40:77:bc:46:52:72:01:
         bd:10:d7:53:e1:2a:c6:b9:bf:4b:c4:6b:fd:26:f0:b7:58:81:
         60:8a:b8:da:65:6b:db:8b:79:57:17:c7:be:de:52:16:12:cc:
         7f:6e:31:dd:0b:54:b4:2e:d4:f0:fd:27:de:95:a0:d5:97:57:
         73:39:db:2d:47:f1:b9:ce:28:bc:b9:be:8b:10:52:59:bf:66:
         5a:af:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:58 2026 by rpki-client