Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
File: 91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer (raw, json)
Hash identifier: IzNS6IBYF1sE/jmTVH4tJz11DWWcJRg0skvpgaJwNLs=
Subject key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 66133B1CFCDD3637A871A23E4DFA418B9CEFDAD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft
caRepository: rsync://rpkica.twnic.tw/rpki/KBT/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Sun 21 Jun 2026 13:59:13 +0000
Certificate not after: Sun 20 Jun 2027 14:04:13 +0000
Subordinate resources: AS: 9416
AS: 9539
AS: 18042
IP: 58.86.0.0/16
IP: 58.114.0.0/15
IP: 61.63.0.0 -- 61.63.95.255
IP: 61.67.128.0/17
IP: 61.70.0.0/15
IP: 111.184.0.0/15
IP: 182.233.0.0 -- 182.235.255.255
IP: 202.2.52.0/22
IP: 203.133.0.0/17
IP: 203.187.0.0/17
IP: 203.203.0.0 -- 203.204.255.255
IP: 219.68.0.0/14
IP: 2001:d58::/32
IP: 2400:df40::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 14:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:13:3b:1c:fc:dd:36:37:a8:71:a2:3e:4d:fa:41:8b:9c:ef:da:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: Jun 21 13:59:13 2026 GMT
Not After : Jun 20 14:04:13 2027 GMT
Subject: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:ab:3f:84:3e:fd:f3:b9:d6:eb:03:10:30:
69:8a:b4:ec:f5:ba:00:6f:27:33:9d:31:0f:2e:d6:
98:49:e0:99:4e:3a:2c:91:13:ef:37:66:c8:3a:45:
3c:a2:db:a8:62:44:47:a6:89:dd:43:34:d9:5d:f1:
03:86:f6:fd:a4:76:a0:6d:9b:5c:8f:72:b7:1e:eb:
25:b9:ca:3c:7d:73:6d:e8:ce:42:d2:89:70:c2:e6:
32:1e:90:13:00:0a:3e:4b:c5:fa:d3:42:aa:9a:17:
94:50:83:f7:46:c9:27:04:14:9b:45:f4:b2:32:e7:
1a:31:e2:a7:48:c4:0c:42:75:7e:c6:da:43:05:b7:
24:84:14:87:56:cb:5a:d3:6b:08:21:04:31:0c:ef:
c4:ea:a0:6b:1b:29:c5:1d:4e:f3:4a:55:d3:67:59:
50:25:ae:ed:55:62:5f:5d:b0:cb:2b:8f:42:d5:ac:
38:87:a7:82:88:e8:b3:98:8c:73:3a:df:e9:23:66:
7a:5a:86:c9:97:5f:a8:4c:ed:2c:b8:7f:e3:3a:cb:
b8:fd:84:f4:4f:b3:72:15:7a:cd:23:6a:bb:4b:6b:
6e:da:e6:0c:0f:5b:d8:9c:68:e6:af:51:c2:e9:51:
d0:e0:eb:cb:bd:1c:47:c7:45:dc:77:72:46:c9:56:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.86.0.0/16
58.114.0.0/15
61.63.0.0-61.63.95.255
61.67.128.0/17
61.70.0.0/15
111.184.0.0/15
182.233.0.0-182.235.255.255
202.2.52.0/22
203.133.0.0/17
203.187.0.0/17
203.203.0.0-203.204.255.255
219.68.0.0/14
IPv6:
2001:d58::/32
2400:df40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9416
9539
18042
Signature Algorithm: sha256WithRSAEncryption
8b:28:b7:8a:dd:5b:74:d7:06:99:97:ce:34:9d:a1:2d:92:d9:
06:c1:01:d0:a0:6c:23:c5:77:30:60:47:b5:24:6f:d1:fc:4a:
b0:40:2f:7b:8b:9f:e4:22:6d:da:f4:5d:ed:64:e8:08:ca:06:
ec:14:d2:82:ad:7d:eb:1e:06:cc:62:0d:f8:d7:74:c9:b8:44:
1f:72:44:a2:bb:65:8b:27:e8:8d:6b:40:54:44:88:6e:fe:51:
67:25:a8:bf:bc:3f:c0:90:04:be:c5:45:3f:22:8c:fc:89:b1:
5b:99:78:e9:d1:b1:52:85:40:35:db:ac:2d:44:f5:6b:70:53:
66:08:97:10:76:5f:0e:ab:18:6c:ce:03:3b:fb:8b:53:f1:38:
72:1d:83:73:69:d5:21:c5:e0:80:2b:b6:1c:4f:3d:d9:89:27:
86:7d:e6:29:15:b0:5e:c1:70:24:70:b0:aa:0e:17:9a:dc:62:
e2:66:b5:aa:55:6d:59:1c:75:d7:ea:45:cd:74:92:c0:1c:fe:
be:85:fb:f0:30:53:30:10:26:ec:a0:90:0e:1f:9c:71:42:6e:
a7:5c:82:b1:c9:99:e7:54:89:f7:e3:97:75:be:6b:e7:e5:71:
6a:bb:0a:67:db:a9:d9:26:0f:98:09:a7:cc:4c:ac:93:9a:52:
d7:22:b2:80
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUZhM7HPzdNjeocaI+TfpBi5zv2tkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDYyMTEzNTkxM1oX
DTI3MDYyMDE0MDQxM1owMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYy
OTM2REFBQTJCNEFCN0VBMTU4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMyuqz+EPv3zudbrAxAwaYq07PW6AG8nM50xDy7WmEngmU46LJET7zdmyDpF
PKLbqGJER6aJ3UM02V3xA4b2/aR2oG2bXI9ytx7rJbnKPH1zbejOQtKJcMLmMh6Q
EwAKPkvF+tNCqpoXlFCD90bJJwQUm0X0sjLnGjHip0jEDEJ1fsbaQwW3JIQUh1bL
WtNrCCEEMQzvxOqgaxspxR1O80pV02dZUCWu7VViX12wyyuPQtWsOIengojos5iM
czrf6SNmelqGyZdfqEztLLh/4zrLuP2E9E+zchV6zSNqu0trbtrmDA9b2Jxo5q9R
wulR0ODry70cR8dF3HdyRslW07ECAwEAAaOCAuowggLmMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJFAnaHB+vMao98pNtqqK0q36hWJMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHXBggrBgEFBQcBCwSByjCBxzAvBggr
BgEFBQcwBYYjcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9LQlQvMC8wWwYI
KwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvOTE0
MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5tZnQwNwYIKwYB
BQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNhdGlvbi54
bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBhQYIKwYBBQUHAQcBAf8EdjB0
MFwEAgABMFYDAwA6VgMDATpyMAsDAwA9PwMEBT0/QAMEBz1DgAMDAT1GAwMBb7gw
CgMDALbpAwMCtugDBALKAjQDBAfLhQADBAfLuwAwCgMDAMvLAwMAy8wDAwLbRDAU
BAIAAjAOAwUAIAENWAMFACQA30AwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICJMgC
AiVDAgJGejANBgkqhkiG9w0BAQsFAAOCAQEAiyi3it1bdNcGmZfONJ2hLZLZBsEB
0KBsI8V3MGBHtSRv0fxKsEAve4uf5CJt2vRd7WToCMoG7BTSgq196x4GzGIN+Nd0
ybhEH3JEortliyfojWtAVESIbv5RZyWov7w/wJAEvsVFPyKM/ImxW5l46dGxUoVA
NdusLUT1a3BTZgiXEHZfDqsYbM4DO/uLU/E4ch2Dc2nVIcXggCu2HE892Yknhn3m
KRWwXsFwJHCwqg4Xmtxi4ma1qlVtWRx11+pFzXSSwBz+voX78DBTMBAm7KCQDh+c
cUJup1yCscmZ51SJ9+OXdb5r5+VxarsKZ9up2SYPmAmnzEysk5pS1yKygA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:02:59 2026 by rpki-client