
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E41CA6D6B740DAA6C89671809353E36E2765E6F8.cer
File: E41CA6D6B740DAA6C89671809353E36E2765E6F8.cer (raw, json)
Hash identifier: x4fIh4sl02WQx0IqAyEUEkicKqT47zXX9OartrIcOPU=
Subject key identifier: E4:1C:A6:D6:B7:40:DA:A6:C8:96:71:80:93:53:E3:6E:27:65:E6:F8
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 3165D3DB0A6D8FA73AE075B30EB34C5077CC8566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft
caRepository: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:44:08 +0000
Certificate not after: Mon 10 May 2027 15:49:08 +0000
Subordinate resources: AS: 152615
IP: 2401:caa0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:65:d3:db:0a:6d:8f:a7:3a:e0:75:b3:0e:b3:4c:50:77:cc:85:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:44:08 2026 GMT
Not After : May 10 15:49:08 2027 GMT
Subject: CN=E41CA6D6B740DAA6C89671809353E36E2765E6F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:8b:11:57:a9:0e:43:41:cd:e2:a3:6a:2b:
cb:fe:cb:ce:0d:97:39:4d:df:a0:32:83:a2:ff:54:
e2:12:9f:f9:00:63:ce:1b:f0:2f:1e:2c:90:3e:a2:
c9:04:a7:28:97:04:9e:1c:7e:5d:61:5c:75:a2:4b:
7c:26:b9:02:7b:8e:cb:a3:24:3e:f2:18:52:79:57:
c9:50:64:60:76:03:62:9e:c4:3f:f8:f7:d6:71:0a:
b2:b1:dd:54:f3:79:9d:90:49:b8:f6:f8:f2:e2:c5:
45:c7:f9:0d:c4:ca:26:38:51:cf:0a:f5:36:fc:49:
f0:56:26:e1:46:28:ec:49:7a:8e:37:1e:2b:c4:27:
f8:d6:8e:1a:a4:74:2d:dc:3c:12:bd:66:92:2d:23:
14:0d:1c:1e:88:8a:85:06:06:a3:e8:c7:37:bc:e5:
b3:65:a9:b3:78:0f:bf:ae:50:f2:e3:6d:bd:c7:51:
df:a1:b6:4b:54:19:ca:48:3a:14:ee:c8:94:02:34:
22:26:11:ba:af:a0:d4:1a:f2:b0:20:e7:71:59:fa:
23:89:e2:a2:9a:0e:eb:47:e3:b6:d0:6a:88:36:1d:
ac:ba:f0:2e:5e:43:87:62:40:d2:b3:b6:9d:3a:33:
f7:dc:13:6a:9f:0f:8b:32:f7:98:c2:2a:27:e4:f2:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E4:1C:A6:D6:B7:40:DA:A6:C8:96:71:80:93:53:E3:6E:27:65:E6:F8
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:caa0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152615
Signature Algorithm: sha256WithRSAEncryption
5b:22:cd:cf:59:62:c7:a1:39:ac:64:85:61:f7:7b:d6:5c:11:
26:d1:7d:50:4b:ff:67:bb:1d:45:b8:bf:65:91:5d:1a:df:95:
08:5f:7b:74:15:62:f2:58:a6:71:8f:9e:66:05:a2:36:3b:12:
73:43:19:f5:b7:ac:87:03:25:7a:ea:a0:d4:b1:b8:72:b7:75:
24:6e:51:9b:1c:e4:4c:c6:25:c0:db:05:ac:85:c0:16:f3:d8:
d5:5b:55:3f:3c:4f:82:0e:48:fe:b7:61:76:cf:01:8b:a1:70:
12:90:7f:c1:ff:49:db:1e:79:8a:b3:6e:a8:e3:82:0b:a3:d8:
0e:dd:af:e1:97:01:48:13:c7:ba:b1:cc:17:08:ee:ea:f2:1d:
9c:cd:a3:1b:c3:5e:b8:f7:90:1a:8f:30:71:39:e8:68:52:40:
44:6c:90:9d:c4:3b:ab:1d:0c:48:69:8e:de:08:1f:42:77:4d:
83:cb:1b:d3:a8:7a:98:1f:bd:91:99:2e:26:a0:75:8f:ce:a0:
ac:f2:f9:ed:0d:ba:12:5a:57:0e:ae:9f:a9:0e:4d:7b:37:2d:
f3:16:a1:d1:aa:9e:98:30:fb:8c:9b:c7:f6:a0:94:d2:78:0d:
76:1c:c8:ce:80:13:c7:ce:fd:ab:c1:96:6b:d3:e5:e3:ce:b1:
0a:a0:ab:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:58:08 2026 by rpki-client