Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
File:                     E5067314CFC65098386A97E8110F787E073CA51E.cer (raw, json)
Hash identifier:          5KV/cJVXRTf+HySMf1mcMF4ywzECQB6o6JMolZ98vG4=
Subject key identifier:   E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       4384BFBD37234E0EDB423F17B2E501283695E294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/MPOWER/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:48:48 +0000
Certificate not after:    Mon 10 May 2027 15:53:48 +0000
Subordinate resources:    IP: 103.131.124.0/22
                          IP: 2403:c9c0::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:84:bf:bd:37:23:4e:0e:db:42:3f:17:b2:e5:01:28:36:95:e2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:48:48 2026 GMT
            Not After : May 10 15:53:48 2027 GMT
        Subject: CN=E5067314CFC65098386A97E8110F787E073CA51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:df:cd:80:eb:90:76:9b:41:b0:30:dd:2d:
                    7d:43:5e:df:6e:27:33:b3:ae:2c:d1:e1:7d:49:eb:
                    8b:76:0a:83:3b:60:68:ec:8c:1e:8f:41:d2:70:23:
                    17:92:0f:55:f2:6c:13:3c:8a:22:c0:0a:0f:53:10:
                    32:f0:e9:52:3a:18:8d:1e:86:f7:66:a9:e7:fb:ba:
                    55:ac:d1:96:f1:2e:21:27:0d:82:d2:45:54:b9:21:
                    6e:ed:cb:54:37:3a:39:0b:0b:9f:5f:47:9c:ef:75:
                    7d:f7:63:b0:5e:79:00:73:e8:78:d2:cb:e0:3f:c6:
                    45:c3:6e:ee:92:f9:60:7b:cf:79:8c:d3:8d:db:1d:
                    48:3b:f2:1d:f1:37:d3:11:e2:ce:8d:3d:34:db:2f:
                    3c:0e:c5:07:63:3a:e0:62:6c:ec:19:92:db:0c:ef:
                    79:28:40:8d:7f:41:f8:fb:b4:a3:58:09:26:e8:7d:
                    40:c8:75:59:5c:30:47:d3:9e:cc:60:cb:ea:0b:57:
                    31:1f:eb:1f:bf:74:32:2b:cc:27:3d:aa:fa:26:d8:
                    52:27:8e:ec:97:33:da:d7:05:59:54:a4:8f:d5:e1:
                    e6:13:a5:8b:a6:99:cf:dd:ba:6b:9f:5a:97:f4:ff:
                    58:16:76:57:7b:6d:a1:cf:dd:84:38:cb:20:05:b2:
                    54:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.124.0/22
                IPv6:
                  2403:c9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:96:ca:cd:66:61:f5:ef:8f:41:25:0d:85:3e:9d:be:b3:36:
         5e:4b:ef:58:a4:64:dc:da:3e:b1:fc:02:63:58:ce:0f:80:4c:
         c4:63:f1:ee:0f:9b:5a:d4:e6:27:ed:36:24:2b:b5:a4:56:93:
         3f:fe:9a:37:34:d1:88:3d:38:a5:bc:47:d1:7d:9e:c9:4c:f6:
         fa:ee:0f:f6:7b:e6:cf:25:55:53:a5:27:92:03:d1:c8:82:50:
         f6:9e:5c:c4:ca:2e:eb:40:e7:46:9e:fe:ed:08:ff:f3:c4:7e:
         68:ce:a2:dd:5d:64:c6:74:0c:9f:91:e6:dd:94:4c:99:9f:e5:
         96:85:13:5c:91:25:79:47:40:8e:61:73:f6:e3:f5:a6:98:e0:
         74:f2:e0:c3:58:fd:3b:59:ca:10:bd:29:cb:c0:3d:61:85:c2:
         5d:11:f7:d2:a4:d1:09:66:75:25:d4:58:f1:d9:0f:df:39:c8:
         66:d0:8e:ca:5e:9d:ad:01:11:78:52:d8:35:0c:a3:3f:17:cf:
         2d:4a:8f:2b:ae:c1:65:b9:aa:6e:91:f8:9b:a9:75:d1:9b:ea:
         14:41:3e:86:43:b8:20:f7:d7:00:85:31:8c:1d:1b:54:89:3a:
         7f:ff:52:2d:48:eb:eb:b0:cf:b7:82:f2:7c:b0:27:ce:41:a9:
         2c:de:eb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:58:08 2026 by rpki-client