Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.cer
File:                     C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.cer (raw, json)
Hash identifier:          vqpeC6WW5nn8gR35G1+DXlYj5H3zDLVOEijYHRhu9kQ=
Subject key identifier:   C7:01:A9:F0:60:8C:B5:B5:7D:7C:24:22:A6:4B:BE:BE:06:D7:89:B9
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       71C1E478D4CA36967DF9C8EABD378ED000E0C385
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/WISTRON/0/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/WISTRON/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 16:00:52 +0000
Certificate not after:    Mon 10 May 2027 16:05:52 +0000
Subordinate resources:    AS: 131599
                          IP: 103.200.0.0/22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c1:e4:78:d4:ca:36:96:7d:f9:c8:ea:bd:37:8e:d0:00:e0:c3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 16:00:52 2026 GMT
            Not After : May 10 16:05:52 2027 GMT
        Subject: CN=C701A9F0608CB5B57D7C2422A64BBEBE06D789B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9a:fd:2f:4a:c2:24:2f:7c:18:fc:99:ab:47:
                    ee:f6:1d:93:f0:e1:ea:56:a6:59:30:fc:60:8d:e7:
                    a4:fc:b0:6d:c9:8c:91:9c:99:20:ec:50:e6:55:18:
                    55:25:eb:c9:83:30:53:f0:1a:88:0f:78:f1:aa:22:
                    e7:4e:f7:bc:26:71:59:c6:cf:f2:00:2b:55:14:f0:
                    1d:3d:2a:2f:fa:17:97:15:f4:b8:ba:ea:ab:3b:6c:
                    dc:51:7b:08:bb:95:93:e4:35:2f:c3:6b:ef:12:06:
                    82:a7:51:9f:d8:8b:69:5a:bf:93:b5:06:b3:cd:5f:
                    cf:af:9b:a1:d8:0b:1e:4c:71:49:60:b8:fc:62:72:
                    62:e2:67:d1:77:70:c9:69:d3:b0:19:a4:51:d5:9c:
                    8f:7b:fe:73:25:df:3c:f0:39:a1:61:c9:8f:d3:57:
                    54:e1:a3:1c:8e:c0:b7:fe:36:03:4d:23:8f:13:51:
                    1c:2f:81:cc:9e:3b:de:cc:9d:9a:bd:ca:93:ef:2a:
                    dd:7a:19:58:6f:6b:18:d2:0f:6d:a8:e7:8a:cd:68:
                    c6:61:a5:0b:4f:b8:9b:f5:17:8d:39:5b:22:b0:ee:
                    17:cc:01:45:2c:8c:05:86:0e:27:56:bc:e2:6d:12:
                    f9:60:7b:da:93:b3:eb:f5:0d:f8:09:10:66:ae:72:
                    66:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:01:A9:F0:60:8C:B5:B5:7D:7C:24:22:A6:4B:BE:BE:06:D7:89:B9
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/WISTRON/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/WISTRON/0/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131599

    Signature Algorithm: sha256WithRSAEncryption
         94:c3:88:c1:1e:98:c3:bc:bc:2b:9b:f1:dd:50:ae:32:45:1a:
         93:04:09:b9:4c:1d:51:66:37:8a:27:78:60:49:7a:a9:77:63:
         9c:ec:94:6e:34:de:a6:5b:fc:19:ec:99:a2:0f:d7:40:f3:6c:
         5e:d6:af:53:c6:58:25:8a:ea:1a:e3:09:0a:69:9d:b5:96:0f:
         cc:65:e1:d8:69:06:55:f8:0f:67:20:27:0c:f8:6b:27:b0:51:
         0a:43:04:bf:19:8f:c1:20:1a:26:a4:6b:91:80:48:68:42:53:
         c1:16:44:21:1d:d8:1b:04:bf:a5:aa:76:e7:1f:88:fb:09:75:
         b1:92:fd:80:b8:2f:c3:7c:0c:a5:bd:b1:58:24:f7:38:96:2a:
         40:19:44:88:19:36:1b:d2:53:59:ba:c0:03:ae:53:58:f8:27:
         7d:63:03:54:cb:a3:d4:63:72:b3:6e:2b:43:e3:b5:8c:54:51:
         ca:2c:99:c4:18:9e:06:c7:de:40:c3:dc:ff:2f:5d:8a:3e:ba:
         31:00:2a:c3:1a:b9:42:e2:b3:c7:83:9a:37:17:74:c5:38:97:
         6b:13:6c:e0:50:e2:e6:21:b4:de:13:d6:db:56:a8:b0:2a:bc:
         58:21:54:61:2e:ea:a6:3e:6c:ae:f7:01:c1:c4:d3:dc:c3:f2:
         f5:fc:73:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:58:13 2026 by rpki-client