Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
File: 9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer (raw, json)
Hash identifier: 81caFnE6jHFffaVlsxVhx1rsJy0ie87F7wD7dCZHILY=
Subject key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 654463AEB144EA7605D84942B569ABC5AA3BCC06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
caRepository: rsync://rpkica.twnic.tw/rpki/SAVECOM/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 01:03:09 +0000
Certificate not after: Tue 11 May 2027 01:08:09 +0000
Subordinate resources: AS: 7533
AS: 9676
IP: 60.245.0.0/18
IP: 61.58.192.0/18
IP: 61.60.128.0/18
IP: 61.63.128.0/17
IP: 61.65.0.0 -- 61.65.191.255
IP: 101.0.128.0 -- 101.0.223.255
IP: 103.224.204.0/22
IP: 118.99.128.0/17
IP: 122.201.128.0/17
IP: 150.107.60.0/22
IP: 210.62.176.0/20
IP: 211.73.0.0/19
IP: 211.79.64.0/19
IP: 2402:9c00::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:44:63:ae:b1:44:ea:76:05:d8:49:42:b5:69:ab:c5:aa:3b:cc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 12 01:03:09 2026 GMT
Not After : May 11 01:08:09 2027 GMT
Subject: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:35:2d:e1:e1:18:82:d6:7c:15:a1:29:ea:
82:79:7b:2e:f1:20:a0:f2:c5:0d:a5:cc:82:19:55:
bd:7e:ad:5e:f9:28:7a:64:91:af:c5:8c:25:d2:09:
71:07:6e:f6:f0:87:e7:a0:bd:85:bb:97:ef:3b:25:
37:d4:e8:b9:90:ec:95:bc:f3:54:74:05:02:b6:71:
90:9c:62:74:e1:dd:24:9d:90:39:86:4b:5b:47:3e:
82:36:b0:92:c1:51:25:2e:a4:4a:e2:95:4e:ab:94:
df:63:f4:59:df:09:a4:4c:21:b4:d7:c8:e5:08:00:
9a:11:e0:42:9c:66:6e:3b:c3:a2:b2:83:11:a6:51:
e1:76:11:aa:1d:13:36:1b:3c:7f:f7:d5:bc:df:ce:
c7:a7:ee:f9:67:3b:23:6b:76:78:bf:58:7d:ac:fc:
bc:a9:f1:83:ba:39:a1:57:a3:02:64:a0:a8:60:ab:
b1:c8:5d:31:e1:04:86:33:83:f5:4a:99:82:b8:e5:
13:73:6f:bd:2c:a3:36:30:8b:f6:04:0b:e2:51:46:
5e:9a:3f:75:7c:83:f9:ff:a9:06:2a:a4:85:dd:6b:
0c:eb:d5:bd:b7:bc:ec:30:c2:23:18:e3:93:4d:eb:
87:a2:c5:c9:2f:11:29:de:5c:2f:9f:be:11:1b:0b:
90:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.245.0.0/18
61.58.192.0/18
61.60.128.0/18
61.63.128.0/17
61.65.0.0-61.65.191.255
101.0.128.0-101.0.223.255
103.224.204.0/22
118.99.128.0/17
122.201.128.0/17
150.107.60.0/22
210.62.176.0/20
211.73.0.0/19
211.79.64.0/19
IPv6:
2402:9c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7533
9676
Signature Algorithm: sha256WithRSAEncryption
0d:d3:a9:90:66:21:48:42:39:5a:f5:9d:a1:30:a0:c8:73:f8:
3a:05:c3:c7:e5:78:74:1e:48:59:60:14:d4:ec:b3:da:39:e7:
07:da:94:d3:50:35:6b:a5:45:1a:8f:62:98:bc:77:4a:f0:67:
35:17:46:e5:c2:d0:34:7a:f2:c5:b2:0c:13:97:6d:65:e1:ed:
9a:d6:24:d1:02:fe:91:0f:8b:7d:26:f3:c4:71:72:52:a9:b1:
07:31:19:91:c6:e0:53:ab:e7:53:15:c7:70:03:fc:90:bd:5c:
7a:bc:79:e6:6f:e4:2c:a5:cb:69:30:bc:c4:30:af:ed:34:4f:
11:18:4e:9b:ec:7d:e0:67:79:da:9c:c1:da:a4:ed:e4:7e:49:
bf:3b:16:9e:49:32:f0:f7:08:9f:9b:bb:0e:33:ca:8d:5c:b9:
9d:08:45:0d:0b:30:fa:74:fc:09:07:31:7c:79:1c:ea:2c:a5:
f7:4e:8d:73:7b:9a:20:63:d3:a9:34:68:58:a8:7e:f5:7d:98:
4c:63:75:79:04:ba:b5:e2:57:41:e1:fc:97:30:95:67:1f:00:
53:1b:55:81:f9:5c:f8:ee:b8:7e:1b:a6:f2:f9:80:be:07:ad:
de:7f:62:54:61:90:11:45:d1:e9:ba:f9:7b:2a:58:60:d3:32:
0c:4e:14:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 18:45:33 2026 by rpki-client