
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E1310307C759363EC8F58DE8C47E388703148352.cer
File: E1310307C759363EC8F58DE8C47E388703148352.cer (raw, json)
Hash identifier: rSv1dBlBDFSegpj/GJUr/N2fvJ8wb6bwvZlmT6SPH2k=
Subject key identifier: E1:31:03:07:C7:59:36:3E:C8:F5:8D:E8:C4:7E:38:87:03:14:83:52
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 1407E2B9EB93C7D9512262499463BC48A941627F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/0/E1310307C759363EC8F58DE8C47E388703148352.mft
caRepository: rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:56:49 +0000
Certificate not after: Mon 10 May 2027 16:01:49 +0000
Subordinate resources: AS: 9917
IP: 2401:83e0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:07:e2:b9:eb:93:c7:d9:51:22:62:49:94:63:bc:48:a9:41:62:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:56:49 2026 GMT
Not After : May 10 16:01:49 2027 GMT
Subject: CN=E1310307C759363EC8F58DE8C47E388703148352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:65:fc:17:3b:a2:87:da:b7:69:c5:ad:7c:
5e:a5:64:c4:2c:e4:d1:1a:a4:1a:8b:06:69:27:54:
04:64:6a:cf:fe:61:3f:04:6f:85:6c:c2:0b:99:6e:
17:32:77:6b:bb:eb:9e:98:b1:57:84:70:3e:4d:87:
82:2d:ee:14:dc:c8:07:de:c7:55:9c:19:fe:7d:8c:
e0:4d:73:54:03:46:6f:65:5a:a2:65:a7:e9:f7:9e:
49:95:c2:6c:2e:d3:27:22:05:74:67:19:64:da:ba:
4e:a7:23:46:67:df:32:0a:a3:0c:ca:8d:b7:dc:89:
18:5f:1d:9d:13:4d:43:ed:db:27:7f:0b:8a:c9:f6:
77:ee:a5:f2:66:7d:68:7c:c2:8a:96:ce:c9:8a:4f:
80:7e:93:80:39:57:09:ab:f6:9d:ff:8d:a0:18:cf:
5d:b8:62:58:ed:5a:f8:01:8b:49:b8:11:88:15:db:
5a:1d:0f:d9:8c:68:2a:16:32:8f:40:f4:f2:db:cf:
8f:b7:03:5c:9b:6e:41:02:54:f0:f5:df:4c:57:65:
f5:ae:e2:0c:e1:96:54:41:af:8f:1f:8a:dc:67:4f:
36:b1:e1:57:81:4f:d9:37:9d:bc:37:d5:a2:08:31:
a0:87:87:bc:e0:3e:3e:a1:ce:14:55:70:55:d8:e2:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E1:31:03:07:C7:59:36:3E:C8:F5:8D:E8:C4:7E:38:87:03:14:83:52
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/0/E1310307C759363EC8F58DE8C47E388703148352.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:83e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9917
Signature Algorithm: sha256WithRSAEncryption
75:30:9b:8c:f1:22:a2:71:dc:f8:70:59:c4:9f:84:5d:d8:6d:
28:32:ba:c6:72:88:14:1f:95:4e:8e:86:68:8a:d4:d4:58:37:
c6:ae:37:22:ab:d5:d1:f2:cf:76:93:79:4e:39:21:f2:2e:22:
7b:79:6c:98:8d:68:ae:7d:cd:73:65:c6:96:84:00:e1:6a:ae:
23:4b:3f:4d:d3:78:b9:ca:e5:b0:17:a9:29:c4:66:7d:fd:f3:
4d:a6:75:38:10:a5:a4:5f:e1:54:8f:f3:e3:04:c5:61:73:f2:
20:54:d5:c5:dc:78:24:0b:05:21:42:24:17:85:e9:ce:e7:5a:
5a:22:f4:2e:70:af:1b:4f:17:4b:f5:54:7f:1e:fc:ec:68:a8:
af:e6:db:e8:63:89:f9:51:28:18:37:dd:96:c4:73:13:2d:77:
39:b1:aa:af:1f:06:cf:db:e9:57:76:af:e3:7b:c6:5a:1e:ea:
c6:55:21:a1:cf:42:57:5a:56:8c:d6:d3:cb:96:35:02:2c:a4:
10:23:c0:a8:c4:e4:3f:91:46:3e:9d:20:58:17:88:8e:1d:e0:
2f:cf:12:68:32:5b:a3:f3:8c:f6:b1:57:d1:07:dc:6d:f6:94:
e7:13:76:5d:6b:3d:35:b0:f0:f6:a6:b4:de:76:e8:c0:3d:3b:
5d:42:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:58:14 2026 by rpki-client