
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer
File: voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer (raw, json)
Hash identifier: EYsscO/VgrhhVm4R1wnEvCE3yUU+L1E85by5VdKOLbg=
Subject key identifier: BE:8C:BC:05:88:CD:2D:17:33:DE:20:FA:04:7A:38:65:78:04:EA:D6
Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Certificate serial: 209E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Wed 04 Mar 2026 05:53:04 +0000
Certificate not after: Wed 24 Feb 2027 15:30:19 +0000
Subordinate resources: IP: 151.158.224.0/23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 13:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8350 (0x209e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Validity
Not Before: Mar 4 05:53:04 2026 GMT
Not After : Feb 24 15:30:19 2027 GMT
Subject: CN=BE8CBC0588CD2D1733DE20FA047A38657804EAD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:66:9f:ab:62:fa:0b:85:4a:d0:4d:e9:d7:
cc:47:6e:6e:74:78:40:ee:41:30:a6:84:34:11:4d:
c7:8c:de:a1:ae:f7:0d:f8:6c:c8:61:2e:d7:d0:22:
39:2c:e4:d1:79:1d:77:34:8e:2a:bd:0f:47:04:8d:
51:8e:d2:d6:96:79:5e:e5:ac:d3:bb:62:63:73:c6:
33:d2:7c:ff:32:2a:4a:25:58:0a:f6:0d:7d:3a:6e:
5b:1e:c4:e7:f5:3c:7d:e0:6a:67:05:8f:2c:48:02:
c7:8a:4e:df:0d:0c:fe:d9:7e:9c:e8:4b:49:96:47:
d7:a3:32:fd:8a:ff:85:c9:a7:b3:a8:a4:ab:2a:b9:
c3:b9:bb:ec:8a:91:17:a4:81:f5:b9:d3:64:3b:88:
c2:fa:5b:59:e8:2f:f9:b1:9d:89:8c:bd:9e:77:66:
71:cd:7a:c6:90:01:49:ac:c8:01:4d:04:95:e6:2b:
69:41:01:84:ee:ee:1a:36:7b:0c:0a:b1:1e:5e:5c:
d2:e0:ba:71:45:cd:9d:56:3e:b5:8e:fd:15:6b:a1:
a1:26:7f:a8:a9:f3:df:b8:09:d8:88:1d:01:6c:ae:
5e:4d:82:12:56:91:42:04:87:0f:41:3d:f7:68:0a:
16:8d:b3:86:05:f3:b6:80:c2:6a:a2:39:a3:11:5c:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:BC:05:88:CD:2D:17:33:DE:20:FA:04:7A:38:65:78:04:EA:D6
X509v3 Authority Key Identifier:
keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.224.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:dd:97:22:71:83:8a:0e:8b:f3:94:b1:13:38:7b:da:4a:d3:
c2:ac:dc:bb:74:a2:43:11:93:30:e9:30:0e:04:ab:79:f0:ef:
da:c6:dc:86:68:e2:bc:f9:84:b8:2f:d7:1f:6c:13:25:a0:40:
62:35:81:19:bc:0d:d8:a8:40:75:f2:65:9a:a1:ee:1e:69:45:
eb:d7:90:a8:34:99:9f:74:f3:12:0a:ec:d5:90:d3:f7:d4:84:
80:55:b9:e5:cd:bc:87:f7:46:e7:93:b5:1c:1e:13:23:5f:5f:
fe:32:ca:7c:99:45:a8:3f:1b:d3:a0:9a:83:dd:09:68:31:60:
f4:17:24:10:8d:34:93:ca:19:c5:8d:3e:72:81:cf:18:70:99:
88:4b:c7:49:99:71:ce:92:53:1e:4c:29:c3:64:41:8c:e7:66:
6b:7e:ea:4a:20:46:63:9b:0a:51:81:9c:99:c7:35:ae:28:21:
d9:da:79:e6:34:0c:59:7c:5e:50:0b:de:ed:06:e2:e0:42:dd:
4a:4a:4c:64:6e:27:de:a4:b8:59:01:93:2f:ca:0b:b0:2b:0a:
d5:d6:92:2d:17:fc:07:21:81:b4:5a:48:85:7c:c1:7d:36:1d:
b9:41:6b:1c:bf:14:45:3d:a1:7b:e6:9a:f8:88:86:1f:ec:74:
07:dd:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:42:09 2026 by rpki-client