
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/EBF0E219709816EEEB7BC07FB24315A91B57F285.cer
File: EBF0E219709816EEEB7BC07FB24315A91B57F285.cer (raw, json)
Hash identifier: kfIEMi8ImPdLhVlKd5ST42EDMtXn0VjGA350OcVlI/0=
Subject key identifier: EB:F0:E2:19:70:98:16:EE:EB:7B:C0:7F:B2:43:15:A9:1B:57:F2:85
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 25B518F897969AAD8C13DE60CD476DE05D8EEBA1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/DQWL/0/EBF0E219709816EEEB7BC07FB24315A91B57F285.mft
caRepository: rsync://rpkica.twnic.tw/rpki/DQWL/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:45:17 +0000
Certificate not after: Mon 10 May 2027 15:50:17 +0000
Subordinate resources: AS: 131678
IP: 103.149.66.0/23
IP: 2405:e540::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b5:18:f8:97:96:9a:ad:8c:13:de:60:cd:47:6d:e0:5d:8e:eb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:45:17 2026 GMT
Not After : May 10 15:50:17 2027 GMT
Subject: CN=EBF0E219709816EEEB7BC07FB24315A91B57F285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:1e:07:7b:33:d0:3e:79:18:72:3d:e6:49:
ca:6a:07:68:0c:c5:62:1a:8f:bc:ba:6e:96:7f:2a:
20:ed:7a:ab:20:c7:9e:fb:1c:9a:3d:40:45:d8:7b:
97:31:d5:ee:31:e8:3d:7d:b7:2d:f1:c8:53:14:a9:
d1:01:e2:73:5f:00:fa:9b:85:ff:05:a3:5b:fa:e2:
20:b4:09:0d:8f:ed:2c:f2:d5:a1:a8:56:d3:79:f8:
18:10:d5:c0:06:5f:eb:65:dd:3e:78:70:d1:13:63:
01:bd:42:30:06:f5:25:b7:67:ed:b3:92:0f:93:23:
ce:1e:29:21:9f:db:f7:9c:2a:87:ee:53:e9:95:4b:
13:93:a5:92:8e:1f:11:b2:71:c5:5e:e0:4d:d7:3c:
63:02:ca:a3:49:90:99:29:a0:e2:00:3d:11:fc:24:
ff:2c:f4:68:42:62:7c:a8:ca:7c:b9:4f:79:db:cf:
ab:52:75:c2:62:71:33:b9:7b:f4:c6:e2:d7:24:8d:
40:30:1b:38:db:4f:81:88:05:c6:4f:27:fe:7b:d9:
9b:c4:08:30:c4:98:e9:58:42:cb:ec:83:34:a3:38:
61:d7:5f:ce:ab:5a:ca:c0:e2:a2:80:1a:e2:7b:ad:
89:81:68:b0:5f:0b:83:78:bc:24:c7:0d:6a:e6:19:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EB:F0:E2:19:70:98:16:EE:EB:7B:C0:7F:B2:43:15:A9:1B:57:F2:85
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DQWL/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DQWL/0/EBF0E219709816EEEB7BC07FB24315A91B57F285.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.66.0/23
IPv6:
2405:e540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131678
Signature Algorithm: sha256WithRSAEncryption
1f:03:30:cd:84:50:d2:7c:b5:16:da:e7:b9:81:41:6c:38:e4:
6f:e1:91:1a:a3:76:8a:7a:ee:1e:5a:94:04:41:d5:09:60:bc:
e3:5d:ef:2a:24:62:db:a2:97:71:e6:07:00:9b:1e:85:02:5a:
4e:90:41:fa:bc:5c:89:65:e1:3e:90:26:b5:3c:ce:36:02:09:
af:0f:9a:2b:2b:e7:3b:70:d4:c3:47:0c:26:e5:0b:c0:fc:d3:
79:ff:4f:ea:da:37:44:70:5c:c7:98:ef:60:31:39:18:df:9b:
df:29:f6:82:3b:2a:13:6a:0d:85:69:ac:83:b4:20:15:55:53:
32:9b:2e:e9:a5:43:f0:d5:e3:3e:14:1a:a6:0a:18:11:d7:68:
85:27:3c:0d:f9:73:1b:0e:0e:84:84:ec:65:5b:c1:d9:e7:1e:
c0:62:b3:89:a3:3c:9a:1e:3c:6b:76:ac:be:f9:0e:91:9e:52:
85:e2:fe:c3:40:9f:cd:16:e4:bb:3c:0f:8e:e3:c4:59:f6:25:
4d:1d:25:fd:54:26:4a:55:35:dc:9d:76:68:8b:cb:4b:4e:b7:
2e:82:b3:84:17:a5:f9:b9:c3:02:72:6b:8e:d4:9e:72:4e:db:
ce:fe:0e:7a:bb:af:6a:27:5c:79:93:c5:aa:c7:d9:12:cc:b5:
fe:ce:5d:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 19:57:57 2026 by rpki-client