Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E0FEB164B6853991E67682AD08989FDEC117BBB7.cer
File:                     E0FEB164B6853991E67682AD08989FDEC117BBB7.cer (raw, json)
Hash identifier:          aCkbby5OWrCUPS3c5QvH6H6fCKv4Os25GWwivjyj5VA=
Subject key identifier:   E0:FE:B1:64:B6:85:39:91:E6:76:82:AD:08:98:9F:DE:C1:17:BB:B7
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       6B2432E167A7E89D99A1CF4C7016EE31810777D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/CHIRUE/0/E0FEB164B6853991E67682AD08989FDEC117BBB7.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/CHIRUE/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:44:06 +0000
Certificate not after:    Mon 10 May 2027 15:49:06 +0000
Subordinate resources:    AS: 131643
                          IP: 103.129.164.0/22
                          IP: 2403:8140::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:24:32:e1:67:a7:e8:9d:99:a1:cf:4c:70:16:ee:31:81:07:77:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:44:06 2026 GMT
            Not After : May 10 15:49:06 2027 GMT
        Subject: CN=E0FEB164B6853991E67682AD08989FDEC117BBB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:32:77:06:40:d7:12:2d:df:e4:b9:e8:53:
                    49:6b:a1:f9:f0:a7:50:57:55:f6:48:ac:91:0b:cb:
                    8d:41:c5:8c:c5:37:0b:19:c9:34:26:54:76:ea:2c:
                    4e:5f:4e:19:be:c2:6b:ca:e5:a6:5e:08:12:28:13:
                    18:63:4b:b1:36:6a:4c:7f:16:a3:59:23:7a:78:b7:
                    fe:fd:77:1e:c7:9a:1d:bb:06:dc:f5:12:7f:41:7b:
                    28:b6:53:14:c1:74:fa:67:a6:aa:fb:09:4e:40:5a:
                    7d:d0:bb:7a:d3:11:49:95:47:16:79:5e:73:31:7a:
                    43:51:53:65:e8:fc:f1:44:b9:18:e8:12:f0:f4:72:
                    1d:29:f6:22:8d:c0:44:97:65:25:2a:be:a8:fc:6e:
                    be:d9:37:4a:2c:8e:1e:d0:e2:6a:b8:05:7a:a9:85:
                    2d:c9:d3:7c:09:3c:08:15:04:48:bc:00:26:5c:c6:
                    9c:1b:84:81:47:7d:a4:54:cd:d7:49:c1:5e:0e:4d:
                    61:1e:fe:23:72:f6:ef:c1:36:51:6a:f6:22:1e:be:
                    b1:45:07:44:c0:ef:1f:9b:73:b7:b7:e4:8b:39:8f:
                    c2:1c:90:63:3f:01:3e:2a:22:b1:6e:d1:30:39:2e:
                    65:c2:93:10:53:3d:9e:5c:56:50:6f:cb:4e:a4:2c:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:FE:B1:64:B6:85:39:91:E6:76:82:AD:08:98:9F:DE:C1:17:BB:B7
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHIRUE/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHIRUE/0/E0FEB164B6853991E67682AD08989FDEC117BBB7.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.164.0/22
                IPv6:
                  2403:8140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131643

    Signature Algorithm: sha256WithRSAEncryption
         80:89:21:c8:cc:78:f7:53:11:30:79:22:a4:0e:90:b8:95:3a:
         41:76:4b:44:23:6b:44:aa:da:01:84:21:7d:f8:f4:9d:75:79:
         b3:90:20:1f:bd:9a:54:d3:72:98:60:d9:97:22:16:a0:2c:c0:
         d3:71:55:08:7d:a3:c2:bc:77:b1:7f:29:a3:45:36:2b:45:c4:
         a3:88:10:aa:f2:99:3b:79:bd:85:53:1d:20:fb:26:b5:74:d5:
         1a:8e:7f:7f:c4:9c:75:85:3d:90:82:da:93:19:fe:da:07:5a:
         db:2b:36:3e:60:3c:33:35:8a:8a:64:3a:32:46:b5:27:6f:77:
         b4:15:80:a2:b5:89:a2:d3:1c:5d:46:69:cb:a1:b1:39:97:23:
         a7:dc:7b:9e:b4:23:93:59:8c:ca:0c:c0:6b:88:bf:ef:36:90:
         8c:db:f6:fc:9d:0d:81:cc:ec:1e:91:82:2c:19:c0:00:ed:cc:
         2a:85:ef:00:54:4c:47:5f:7c:25:39:e3:4c:bc:6c:60:10:68:
         19:43:c9:b3:7b:eb:34:95:3d:4a:e5:70:c2:3f:ad:e1:1a:46:
         5c:5f:f6:07:4f:8b:ee:62:8a:e6:c4:29:f2:1b:c0:28:8b:00:
         a7:94:be:dc:7e:e5:16:01:2a:41:87:ee:fd:d6:87:41:30:61:
         13:09:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:43 2026 by rpki-client