
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer
File: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer (raw, json)
Hash identifier: y5OyYmiSplbttCufTnwKCWogMnrE3CM47dtuhcf3Buk=
Subject key identifier: E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 34C91C81E95BF9184F8809488F903474A04A5152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
caRepository: rsync://rpkica.twnic.tw/rpki/HST/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Fri 14 Aug 2026 06:59:00 +0000
Certificate not after: Fri 13 Aug 2027 07:04:00 +0000
Subordinate resources: AS: 131666
IP: 103.125.66.0/23
IP: 103.144.34.0/23
IP: 202.123.124.0/23
IP: 211.76.190.0/23
IP: 2405:6440::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 03:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c9:1c:81:e9:5b:f9:18:4f:88:09:48:8f:90:34:74:a0:4a:51:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: Aug 14 06:59:00 2026 GMT
Not After : Aug 13 07:04:00 2027 GMT
Subject: CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:dd:74:b1:82:dc:af:74:7a:f2:c6:0f:23:
13:fb:f0:86:6f:26:b4:cc:6b:db:ee:9e:8d:5c:99:
e4:f9:e1:a8:3b:6f:63:f9:bd:f2:69:d0:3e:f6:f7:
74:39:5b:7e:e2:d1:c1:80:44:ec:de:d2:bb:95:8a:
2a:ba:db:5f:31:5b:eb:3c:6d:8f:ce:94:c6:c0:c3:
d6:6e:39:9e:c3:1f:f2:fd:36:61:96:4c:c4:ab:f4:
08:c7:71:26:1e:49:85:6e:43:93:51:43:d2:30:45:
12:0d:99:80:0e:a5:75:eb:f2:34:48:29:4a:1e:ba:
cb:9d:2d:89:92:fa:e1:39:ca:02:9d:17:de:f6:c9:
cd:84:05:58:e1:15:00:57:0e:e7:10:db:08:db:ed:
09:88:ac:2c:ed:28:b4:bd:d5:47:7c:d5:ce:a4:c8:
3c:7e:2d:f0:d4:20:f6:11:c7:b9:55:fa:5d:13:8e:
d3:94:7c:fd:08:69:fb:a5:c4:4f:fe:d1:81:6e:8e:
bf:f7:f1:1e:b8:a8:05:55:44:2a:9f:f4:c8:e2:9b:
90:66:d6:74:4f:6b:d6:31:95:38:4e:a6:7e:52:4f:
8c:e1:74:f1:24:36:23:86:67:0c:08:8b:c9:1e:6d:
0c:6f:3e:0b:23:92:ee:ac:64:65:7c:45:51:97:80:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HST/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.66.0/23
103.144.34.0/23
202.123.124.0/23
211.76.190.0/23
IPv6:
2405:6440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131666
Signature Algorithm: sha256WithRSAEncryption
63:32:e1:18:76:a4:f1:1b:90:3c:77:01:77:f3:cd:65:38:99:
b1:19:d3:68:96:ac:8b:b0:e1:2d:e2:e6:fc:4b:af:16:ce:25:
d2:96:1c:a4:e9:d5:c4:e1:95:b9:28:00:b4:ec:37:16:cf:ec:
1d:a4:af:d0:0f:8a:82:00:f5:fa:d7:91:38:2a:cf:bd:19:01:
4a:75:ea:4d:d1:76:03:41:0b:92:5a:cd:e1:e0:31:48:fa:7f:
37:38:c9:c5:0d:fd:37:df:7a:c7:21:6e:54:4e:64:44:90:db:
33:1b:da:aa:fb:22:ce:41:bb:90:48:74:87:06:56:d1:23:4f:
f8:d0:d4:4f:aa:83:df:48:02:de:73:07:10:7a:43:c4:ad:45:
00:7c:23:37:bb:a5:b0:4e:83:24:b2:91:22:5a:fa:b7:29:6d:
eb:b3:f5:e3:da:2b:0d:4e:f1:47:c7:84:b2:18:89:49:bc:70:
3a:57:9f:80:cb:78:95:b8:1b:58:2b:90:64:7b:8e:77:9b:88:
a6:a8:99:79:62:7f:52:5a:53:4a:70:31:fa:2f:a5:22:3b:19:
45:15:81:1e:36:84:c4:1d:ff:55:4e:ef:ab:eb:e9:30:c7:2c:
a5:de:3b:73:54:92:84:70:1d:9c:24:0c:f7:fd:c1:39:90:2a:
5e:a0:98:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:37:40 2026 by rpki-client