Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
File:                     E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer (raw, json)
Hash identifier:          RiWRtaOKP4B++EVSS105T9PTqWQZmdq0jA87yuJVWEc=
Subject key identifier:   E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       78E062ACF8D0200C35D6852FE7C6C2D77DFC9630
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:57:23 +0000
Certificate not after:    Mon 10 May 2027 16:02:23 +0000
Subordinate resources:    AS: 131584
                          IP: 43.255.12.0/22
                          IP: 101.3.0.0/16
                          IP: 103.31.196.0/22
                          IP: 111.125.128.0/21
                          IP: 111.235.192.0/18
                          IP: 2400:4e80::/32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e0:62:ac:f8:d0:20:0c:35:d6:85:2f:e7:c6:c2:d7:7d:fc:96:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:57:23 2026 GMT
            Not After : May 10 16:02:23 2027 GMT
        Subject: CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5e:bb:19:e5:ca:22:5e:5e:79:1b:9b:87:b7:
                    e5:14:96:f9:8c:c0:9a:ae:2e:3c:bc:aa:76:9d:94:
                    9c:78:65:c0:2d:33:52:88:c5:33:e2:22:4d:5a:59:
                    b9:45:6e:3d:37:89:e2:55:a1:e3:0f:56:29:c9:0f:
                    9a:3b:ed:8b:91:30:a2:c3:0d:d4:2d:c8:d9:b2:f8:
                    eb:6a:88:a0:94:26:19:a6:29:6a:d3:1d:e7:73:a1:
                    00:64:81:43:49:70:36:27:24:57:d9:af:49:2a:95:
                    36:a5:3c:e2:03:f5:31:f4:e3:8e:83:a3:38:4a:25:
                    06:6e:28:c1:1c:04:67:1a:cc:1f:aa:9d:ef:af:38:
                    04:53:73:18:1d:50:9f:c9:35:f7:77:f6:eb:59:7f:
                    bf:d8:7f:3b:8d:68:60:49:c0:fb:52:e1:e4:90:68:
                    4c:33:5a:8b:fc:f7:60:2b:20:33:4c:d0:a8:96:e7:
                    d2:21:44:76:fc:66:f9:1f:3f:cc:0e:bc:65:2e:ca:
                    13:27:98:d1:35:04:87:9d:b9:d2:f5:22:16:7c:85:
                    dc:81:d4:9b:dd:c6:e0:43:df:ff:3d:49:68:22:72:
                    00:5d:9d:0c:d5:0f:2c:ed:87:ea:45:bb:79:b0:88:
                    b5:5b:20:6f:52:ad:22:55:ae:b0:48:18:c5:db:c7:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.12.0/22
                  101.3.0.0/16
                  103.31.196.0/22
                  111.125.128.0/21
                  111.235.192.0/18
                IPv6:
                  2400:4e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131584

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:0f:f6:15:71:be:ba:d4:8c:7f:c1:4f:f1:c1:24:34:4c:
         e4:29:78:1c:d9:e9:46:cb:d0:4e:6a:7d:26:e7:0a:1b:58:1c:
         3c:76:bd:55:b5:4d:91:ec:97:ad:6c:60:42:73:68:e4:52:32:
         e1:aa:75:49:f2:e0:4c:2e:16:05:a9:1a:78:ee:e1:00:70:47:
         37:a8:cb:0b:72:78:78:4e:38:05:21:ca:be:82:bd:54:1c:ae:
         bb:22:9f:9e:1e:72:4b:7f:3d:b1:f9:4a:7b:7c:a0:b5:04:ab:
         f8:43:91:db:dc:46:52:18:59:c9:0e:ee:d3:99:7a:48:ab:16:
         1a:77:96:0e:33:68:39:d9:92:bd:e1:d9:d1:33:e9:cf:c8:7a:
         b8:c6:c7:22:82:c2:67:dc:c6:c3:eb:c9:8a:b1:2c:24:d9:f1:
         37:66:6f:f9:e9:e1:16:53:7b:2a:77:2e:f7:9b:37:3d:d2:09:
         3b:91:81:cf:8f:2e:a2:ee:a8:5f:a5:42:f2:0f:2e:59:40:a1:
         93:75:07:df:88:d2:c5:0f:24:eb:af:10:54:26:b7:38:69:6d:
         4a:5a:24:6a:57:05:89:00:b3:5a:3c:84:e2:6b:85:92:3b:77:
         41:d8:a6:a0:39:19:00:51:64:a4:87:96:a0:93:84:d1:10:bc:
         00:b7:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:57:49 2026 by rpki-client