Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer
File:                     N5n7efOuuEUWoQOON9L4rDy2Z8k.cer (raw, json)
Hash identifier:          G5xqaPyVr39D+eKN9gl51U+mXlYR5gyjxhu34I8YC7M=
Subject key identifier:   37:99:FB:79:F3:AE:B8:45:16:A1:03:8E:37:D2:F8:AC:3C:B6:67:C9
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer:       /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial:       1F2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Wed 22 Oct 2025 05:25:07 +0000
Certificate not after:    Fri 16 Oct 2026 15:30:24 +0000
Subordinate resources:    IP: 138.252.54.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7981 (0x1f2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
        Validity
            Not Before: Oct 22 05:25:07 2025 GMT
            Not After : Oct 16 15:30:24 2026 GMT
        Subject: CN=3799FB79F3AEB84516A1038E37D2F8AC3CB667C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:28:9e:dc:c3:7b:0b:47:18:8d:ff:c8:d4:
                    ed:ff:4b:23:1b:4c:e5:98:d4:3b:8c:4b:0b:d8:4b:
                    7b:8b:a8:11:b9:b6:43:96:3a:db:bf:0e:52:b8:14:
                    a9:a9:98:85:37:e8:d9:f9:c2:26:c0:a5:33:5f:24:
                    e8:ea:19:f2:12:e9:e2:e0:97:1b:9f:3b:5e:85:67:
                    f9:3c:39:4e:e7:ef:19:b9:3f:ae:46:08:3a:93:ba:
                    67:5a:b1:5c:59:bf:84:94:19:69:43:db:f2:af:4d:
                    83:8c:87:cb:d1:ad:e5:f8:8f:cd:50:b3:3a:d5:05:
                    b9:61:22:c9:29:a9:f9:e6:b1:58:85:53:8d:6c:4e:
                    35:97:04:36:8d:00:42:38:20:cc:d9:2f:ef:77:92:
                    8d:25:fc:5c:23:fc:b0:9d:24:9e:a7:51:33:b1:29:
                    3f:3c:e4:48:5f:b1:5f:2e:a1:76:9c:a3:fe:ab:c1:
                    1e:6a:94:ef:d1:a6:05:f3:ba:98:f7:a5:8b:3e:0f:
                    0b:d1:bf:96:0e:40:df:d5:a7:1b:2c:7d:66:b2:e0:
                    7e:ec:69:96:65:91:eb:22:41:ca:c7:e9:9f:4d:71:
                    9d:0d:43:25:1f:61:92:8d:4a:8c:bf:87:07:6a:58:
                    d2:ff:55:bd:d6:d7:b1:8b:60:c6:b9:dc:a8:a3:ba:
                    62:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:99:FB:79:F3:AE:B8:45:16:A1:03:8E:37:D2:F8:AC:3C:B6:67:C9
            X509v3 Authority Key Identifier:
                keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:95:12:27:0c:62:46:ee:e8:29:a8:89:c7:f9:c9:0e:1f:e1:
         22:bb:1c:11:8b:37:25:bf:bf:5c:4f:eb:fa:f2:a0:47:82:33:
         27:1c:2d:8a:5d:b4:01:4e:25:47:8a:9a:1c:13:99:58:fe:bb:
         f4:2d:f5:03:75:0a:72:9b:0f:97:b9:e0:ec:f3:61:03:05:df:
         89:94:ca:18:d3:ae:82:b9:fc:7c:ec:d5:45:77:81:c6:ce:9e:
         c6:f9:1f:54:39:af:58:84:e8:95:df:69:7c:77:f6:d0:45:62:
         48:76:8c:93:5c:38:1f:bf:b1:c9:d9:12:b1:ee:ba:95:43:ce:
         86:bf:0f:49:df:67:18:b9:e9:ec:4a:eb:83:c2:8a:c4:c0:37:
         7c:9a:d0:91:05:3c:6c:4f:3d:d7:98:d3:01:04:84:27:d3:d1:
         dc:97:eb:7f:d8:0f:aa:5e:68:20:cc:f4:a6:06:12:10:a2:66:
         45:3a:23:a5:36:60:83:a3:5b:29:8a:0d:c8:49:a9:fe:91:30:
         4f:c3:16:3b:49:f6:fb:b1:f9:36:2b:28:23:d3:ab:43:66:bb:
         ed:df:17:29:c7:48:d7:61:b7:6a:94:b9:3a:77:bf:db:fa:d6:
         3a:ef:73:98:d8:b3:20:9c:42:d9:a4:2d:f2:43:bf:89:34:4f:
         c0:1e:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:05:46 2025 by rpki-client