Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
File: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer (raw, json)
Hash identifier: uPRdi+Dsppfh9mh/GcB1FDwbJZFHD3M1n7snIAra5W0=
Subject key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 673219D6A9A96F64B711A132C728F7EC51F77C04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
caRepository: rsync://rpkica.twnic.tw/rpki/NARL/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:48:52 +0000
Certificate not after: Mon 10 May 2027 15:53:52 +0000
Subordinate resources: AS: 18426
IP: 103.124.72.0/22
IP: 203.145.192.0/19
IP: 211.73.72.0 -- 211.73.95.255
IP: 2001:4500::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:32:19:d6:a9:a9:6f:64:b7:11:a1:32:c7:28:f7:ec:51:f7:7c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:48:52 2026 GMT
Not After : May 10 15:53:52 2027 GMT
Subject: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:5d:92:da:b0:ab:99:4b:88:4e:eb:41:90:
82:f7:19:c7:7c:e7:5c:e8:e5:08:18:38:8c:93:0b:
a4:bc:56:04:01:d4:e3:bf:3f:89:ed:3b:2b:8c:19:
69:0e:9f:6a:0b:11:8b:ea:70:29:ee:74:74:b7:fb:
63:f7:81:32:7f:de:0f:30:f3:13:c7:34:3b:ed:2b:
23:dd:12:a3:8a:f9:18:bc:4c:07:56:ef:71:e2:a3:
1f:22:30:d5:b0:e6:fd:d6:82:eb:f7:71:d1:32:18:
45:38:a7:15:da:58:e4:16:73:83:6e:36:25:00:fa:
7d:c8:b5:d1:99:5b:85:d0:40:18:e4:3e:00:73:11:
16:0e:30:b7:ae:b5:68:76:51:27:6a:0b:2c:81:26:
f5:b8:6f:3c:d4:aa:ff:d0:fc:79:81:df:b0:ea:18:
be:5e:d5:03:bc:52:51:17:be:dc:0d:53:b9:ae:73:
f3:5e:12:6a:f4:d6:0b:e1:fa:4f:c4:5a:a1:5b:ff:
b9:22:49:0e:f5:41:73:60:af:c6:c6:39:18:30:b5:
22:40:cc:67:40:0b:2c:43:1e:5e:4e:14:c5:96:5c:
c9:b3:f4:69:59:f4:0c:f1:c3:91:55:33:85:b0:02:
7f:20:2f:34:59:bb:8b:82:2f:25:f7:49:3b:32:3a:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.72.0/22
203.145.192.0/19
211.73.72.0-211.73.95.255
IPv6:
2001:4500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18426
Signature Algorithm: sha256WithRSAEncryption
2a:8c:d3:4b:08:8d:2b:6e:2f:bc:ca:ff:98:9e:7d:c9:c5:98:
11:ee:f9:dc:b0:2f:dc:7b:d5:3f:e4:99:69:94:71:7e:09:53:
e5:11:da:7a:dd:f5:8e:31:bd:a3:f0:50:6f:b5:8c:e9:a3:4a:
ab:63:19:3c:08:f5:da:3e:ac:e5:c9:d6:85:6e:79:a9:24:f5:
0a:63:33:8b:43:52:39:86:d9:f1:4f:f1:51:63:18:0f:8a:3a:
93:27:af:a8:ed:3a:c6:97:7d:3b:69:55:c3:97:83:93:5f:29:
37:de:d4:85:4f:d6:48:f7:d6:d0:05:0d:07:6f:11:6c:ab:90:
24:f2:b1:d6:5a:f4:90:78:40:fb:f5:5a:e1:86:c1:3f:d6:dd:
66:b2:35:78:43:85:ac:a8:f3:f7:19:4f:d5:44:cb:41:92:7c:
11:8c:f5:58:43:18:2a:6c:86:59:69:09:47:c6:1a:39:20:08:
40:59:7b:42:1a:80:89:6c:58:8e:93:56:9f:5e:f7:5b:6d:20:
c5:7e:33:e3:91:19:28:fa:23:52:85:a3:79:00:0f:58:06:4b:
ef:4f:0a:fe:d6:d7:c8:7d:27:db:48:26:49:1d:7e:17:6d:4d:
9b:b0:a7:69:41:fe:ef:c8:1a:56:5c:d2:b2:d0:f8:71:c0:44:
2c:5e:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:47 2026 by rpki-client