
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer
File: E812027AE484273C81255DEF31441251E758ED82.cer (raw, json)
Hash identifier: SbxSsGuRt5XE93Iir6Vi31sZZQ9dmFI6K0tUwKe+s8A=
Subject key identifier: E8:12:02:7A:E4:84:27:3C:81:25:5D:EF:31:44:12:51:E7:58:ED:82
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 2C90C4E059180EE38B05BCB974BE3C24FC80C7D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.mft
caRepository: rsync://rpkica.twnic.tw/rpki/ASSMAU/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:43:03 +0000
Certificate not after: Mon 10 May 2027 15:48:03 +0000
Subordinate resources: AS: 24153
IP: 103.122.116.0/22
IP: 2403:8ec0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:90:c4:e0:59:18:0e:e3:8b:05:bc:b9:74:be:3c:24:fc:80:c7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:43:03 2026 GMT
Not After : May 10 15:48:03 2027 GMT
Subject: CN=E812027AE484273C81255DEF31441251E758ED82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:97:a9:4c:ba:43:6e:e9:a9:b3:ff:12:93:
32:e5:5e:70:de:eb:58:99:0b:b7:d5:f1:0a:cc:12:
11:18:97:ed:31:bc:de:f9:c7:f6:d0:8a:4e:9f:c4:
c2:a9:98:42:d5:4b:c9:f4:6a:3f:97:34:a0:32:e6:
d0:88:55:60:62:d1:8d:cf:d7:11:36:bb:8f:4f:bd:
4e:89:4a:a1:b6:ad:c8:36:c0:be:f8:8c:12:ee:4a:
03:17:5a:a5:72:9f:9b:40:cc:a6:06:7c:06:15:19:
93:43:15:4c:33:69:3f:65:89:f0:4a:1d:d8:1c:c0:
38:45:30:37:87:41:e0:91:35:63:02:6d:7f:e5:84:
a1:13:c4:d6:25:11:c0:4f:59:56:84:37:b6:6c:33:
d5:a3:72:c8:72:fd:9f:23:96:a5:03:5e:0d:f0:ac:
6b:81:45:16:fa:d4:89:f7:78:ca:5f:52:4a:25:e0:
42:1d:5d:6b:51:0b:cd:58:41:99:9b:1f:9f:d9:c6:
7a:84:06:3d:29:b1:bc:cc:4a:73:12:d9:08:30:ba:
31:4e:03:48:49:3d:d0:d5:27:e7:12:1e:b2:3c:66:
63:e6:f2:ca:33:dd:79:72:f1:d1:d4:3a:7e:bf:cf:
19:a9:aa:03:19:a8:d2:9e:d9:3b:d2:8b:38:4e:b2:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E8:12:02:7A:E4:84:27:3C:81:25:5D:EF:31:44:12:51:E7:58:ED:82
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ASSMAU/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.116.0/22
IPv6:
2403:8ec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24153
Signature Algorithm: sha256WithRSAEncryption
03:40:f6:78:c5:4b:46:25:bb:cb:50:fa:ba:9e:72:fb:e6:67:
db:56:a5:ca:13:0e:00:ad:17:d9:42:da:aa:50:55:f9:c3:a6:
92:af:99:82:b6:25:64:e8:a7:4f:5b:f8:de:b3:07:ae:ac:1b:
7d:04:fd:a4:99:8f:09:62:65:26:e0:d0:4e:70:d0:24:e6:50:
7d:0e:e2:6e:7b:bb:4e:3a:01:ce:e5:41:db:6b:f6:b4:c8:91:
da:ea:eb:ae:2c:9b:2d:6f:d0:37:2d:ac:21:93:7e:aa:78:1f:
10:3c:c8:62:04:82:08:7f:d6:a2:d0:a1:dd:74:cf:3d:55:e6:
41:e3:c9:25:b9:bf:28:e7:27:07:d7:09:da:6e:f7:b3:80:29:
9f:7f:91:c8:89:24:fa:ee:5c:2d:e2:86:a1:cd:bd:06:d4:21:
ca:ae:47:96:06:6d:ec:d4:cf:ec:5a:ec:af:29:15:e4:ad:43:
5e:d6:8a:b8:45:c4:18:73:8f:29:80:2d:d0:5c:a5:b9:b0:87:
bb:ef:46:5e:fa:67:bb:94:f3:42:9f:f2:6d:f7:6e:e7:32:f4:
ec:29:e2:4a:f7:aa:64:44:a7:2a:b3:37:af:a3:a2:e3:60:fa:
15:50:b6:04:03:15:7d:50:5e:47:40:08:7b:6f:8b:83:90:ce:
61:10:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:58:28 2026 by rpki-client