
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/B1E9EC411F7E99BD5EB36577F635B6C1C392F5E9.cer
File: B1E9EC411F7E99BD5EB36577F635B6C1C392F5E9.cer (raw, json)
Hash identifier: wDztGPvmEP+jlfEU+UE0tfi5R8/h4WZyA/JtEJ7vbS8=
Subject key identifier: B1:E9:EC:41:1F:7E:99:BD:5E:B3:65:77:F6:35:B6:C1:C3:92:F5:E9
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 6DC6C3FD633A1AE4EAC1545CE49A5B19A931F08C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/WALKSCLOUD/0/B1E9EC411F7E99BD5EB36577F635B6C1C392F5E9.mft
caRepository: rsync://rpkica.twnic.tw/rpki/WALKSCLOUD/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 16:00:38 +0000
Certificate not after: Mon 10 May 2027 16:05:38 +0000
Subordinate resources: AS: 17414
AS: 17422
AS: 38856
IP: 103.159.118.0/23
IP: 2406:d040::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c6:c3:fd:63:3a:1a:e4:ea:c1:54:5c:e4:9a:5b:19:a9:31:f0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 16:00:38 2026 GMT
Not After : May 10 16:05:38 2027 GMT
Subject: CN=B1E9EC411F7E99BD5EB36577F635B6C1C392F5E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:30:47:80:c7:6b:8f:e6:6a:a5:4f:2c:d8:
4c:59:d2:bf:68:b2:68:28:21:88:36:ae:c6:c8:97:
8d:7a:24:9e:3d:9b:9a:9d:44:32:32:c6:ae:e2:b7:
96:74:5a:49:dd:7a:5d:19:b0:fe:9e:2f:65:b6:17:
4a:34:2a:83:c4:f6:e5:f6:1d:66:7d:99:34:5d:c5:
55:d7:1d:6f:0f:d6:6b:68:eb:49:0a:dc:80:18:81:
ef:f6:7a:e3:4a:50:6d:5e:44:e3:8f:f7:1e:c0:ec:
c6:88:bb:b4:ed:86:dd:04:4d:b5:f8:14:e7:5f:7b:
7c:f0:19:4e:59:22:67:c1:69:dd:37:82:a3:dd:e3:
3a:1f:da:59:5b:85:e8:e5:08:a1:63:c8:f6:09:4c:
f4:9e:72:02:d7:d9:b9:ae:40:0a:c2:ad:00:fb:29:
60:78:d4:ba:75:2e:5b:95:6a:9e:96:cc:62:8a:d6:
31:31:b0:b8:c4:d8:68:dd:ca:ab:2a:ef:32:8b:14:
26:e9:3e:47:6d:b2:95:18:b5:df:e8:12:ae:e5:94:
38:6e:7c:ac:4c:cd:33:e4:16:4e:13:ed:a8:be:92:
c5:2c:1e:9f:78:97:05:6c:11:1e:1b:76:0b:b1:7b:
d3:41:b4:5e:9d:6a:ca:31:8c:c5:fc:bf:44:b9:ed:
d1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B1:E9:EC:41:1F:7E:99:BD:5E:B3:65:77:F6:35:B6:C1:C3:92:F5:E9
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/WALKSCLOUD/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/WALKSCLOUD/0/B1E9EC411F7E99BD5EB36577F635B6C1C392F5E9.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.118.0/23
IPv6:
2406:d040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17414
17422
38856
Signature Algorithm: sha256WithRSAEncryption
a0:f1:13:f3:25:e9:b3:a4:5b:39:e7:bb:aa:1e:d3:ad:fd:63:
d5:3a:79:63:f4:d7:8f:dc:73:c7:95:d0:c4:2d:d4:de:a6:04:
9e:81:6b:56:d7:93:ad:db:09:85:5c:8b:07:10:ab:db:d2:63:
b4:51:86:90:16:f2:bc:5a:76:89:d2:94:c7:0c:53:e5:4f:36:
2d:bd:52:73:18:7d:22:9b:76:1a:45:14:2d:02:8a:ed:c1:1c:
d0:56:bf:6e:be:31:82:ac:cc:3c:d8:a0:7d:09:ed:5b:6c:a7:
82:27:61:25:90:f6:ab:6d:34:16:41:18:65:5b:5e:45:31:2f:
80:ea:b4:dd:a5:3e:f2:c0:c7:d4:e6:d8:2f:b7:5f:5c:01:6a:
a7:ed:7a:01:ca:e5:f9:2b:26:7f:83:ad:ce:94:5d:4b:3d:7e:
8c:ac:0d:71:c4:f0:33:7e:2e:ae:d4:75:8d:e8:9f:6e:43:5b:
42:4f:90:7b:c3:81:62:4b:21:36:ee:84:23:d3:b7:f1:04:23:
6f:c5:40:d2:8f:fa:79:23:04:35:6e:d3:55:cd:31:45:47:50:
08:41:0d:9b:7e:ad:0f:a2:f4:ad:a4:63:12:d5:d1:ee:cd:39:
b2:53:c8:d0:44:83:71:ce:50:dd:f1:07:8b:0f:79:a4:ec:b9:
ff:98:6c:cb
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIUbcbD/WM6GuTqwVRc5JpbGakx8IwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDAzOFoX
DTI3MDUxMDE2MDUzOFowMzExMC8GA1UEAxMoQjFFOUVDNDExRjdFOTlCRDVFQjM2
NTc3RjYzNUI2QzFDMzkyRjVFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDOMEeAx2uP5mqlTyzYTFnSv2iyaCghiDauxsiXjXoknj2bmp1EMjLGruK3
lnRaSd16XRmw/p4vZbYXSjQqg8T25fYdZn2ZNF3FVdcdbw/Wa2jrSQrcgBiB7/Z6
40pQbV5E44/3HsDsxoi7tO2G3QRNtfgU5197fPAZTlkiZ8Fp3TeCo93jOh/aWVuF
6OUIoWPI9glM9J5yAtfZua5ACsKtAPspYHjUunUuW5VqnpbMYorWMTGwuMTYaN3K
qyrvMosUJuk+R22ylRi13+gSruWUOG58rEzNM+QWThPtqL6SxSwen3iXBWwRHht2
C7F700G0Xp1qyjGMxfy/RLnt0aUCAwEAAaOCAqEwggKdMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLHp7EEffpm9XrNld/Y1tsHDkvXpMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr
BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQUxLU0NMT1VE
LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1dB
TEtTQ0xPVUQvMC9CMUU5RUM0MTFGN0U5OUJENUVCMzY1NzdGNjM1QjZDMUMzOTJG
NUU5Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG
AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ592MA0EAgACMAcDBQAkBtBAMCIGCCsG
AQUFBwEIAQH/BBMwEaAPMA0CAkQGAgJEDgIDAJfIMA0GCSqGSIb3DQEBCwUAA4IB
AQCg8RPzJemzpFs557uqHtOt/WPVOnlj9NeP3HPHldDELdTepgSegWtW15Ot2wmF
XIsHEKvb0mO0UYaQFvK8WnaJ0pTHDFPlTzYtvVJzGH0im3YaRRQtAortwRzQVr9u
vjGCrMw82KB9Ce1bbKeCJ2ElkParbTQWQRhlW15FMS+A6rTdpT7ywMfU5tgvt19c
AWqn7XoByuX5KyZ/g63OlF1LPX6MrA1xxPAzfi6u1HWN6J9uQ1tCT5B7w4FiSyE2
7oQj07fxBCNvxUDSj/p5IwQ1btNVzTFFR1AIQQ2bfq0PovStpGMS1dHuzTmyU8jQ
RINxzlDd8QeLD3mk7Ln/mGzL
-----END CERTIFICATE-----
Generated at Wed May 13 19:58:02 2026 by rpki-client