Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer
File:                     voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer (raw, json)
Hash identifier:          EYsscO/VgrhhVm4R1wnEvCE3yUU+L1E85by5VdKOLbg=
Subject key identifier:   BE:8C:BC:05:88:CD:2D:17:33:DE:20:FA:04:7A:38:65:78:04:EA:D6
Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Certificate issuer:       /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Certificate serial:       209E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Wed 04 Mar 2026 05:53:04 +0000
Certificate not after:    Wed 24 Feb 2027 15:30:19 +0000
Subordinate resources:    IP: 151.158.224.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 13:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8350 (0x209e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
        Validity
            Not Before: Mar  4 05:53:04 2026 GMT
            Not After : Feb 24 15:30:19 2027 GMT
        Subject: CN=BE8CBC0588CD2D1733DE20FA047A38657804EAD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:66:9f:ab:62:fa:0b:85:4a:d0:4d:e9:d7:
                    cc:47:6e:6e:74:78:40:ee:41:30:a6:84:34:11:4d:
                    c7:8c:de:a1:ae:f7:0d:f8:6c:c8:61:2e:d7:d0:22:
                    39:2c:e4:d1:79:1d:77:34:8e:2a:bd:0f:47:04:8d:
                    51:8e:d2:d6:96:79:5e:e5:ac:d3:bb:62:63:73:c6:
                    33:d2:7c:ff:32:2a:4a:25:58:0a:f6:0d:7d:3a:6e:
                    5b:1e:c4:e7:f5:3c:7d:e0:6a:67:05:8f:2c:48:02:
                    c7:8a:4e:df:0d:0c:fe:d9:7e:9c:e8:4b:49:96:47:
                    d7:a3:32:fd:8a:ff:85:c9:a7:b3:a8:a4:ab:2a:b9:
                    c3:b9:bb:ec:8a:91:17:a4:81:f5:b9:d3:64:3b:88:
                    c2:fa:5b:59:e8:2f:f9:b1:9d:89:8c:bd:9e:77:66:
                    71:cd:7a:c6:90:01:49:ac:c8:01:4d:04:95:e6:2b:
                    69:41:01:84:ee:ee:1a:36:7b:0c:0a:b1:1e:5e:5c:
                    d2:e0:ba:71:45:cd:9d:56:3e:b5:8e:fd:15:6b:a1:
                    a1:26:7f:a8:a9:f3:df:b8:09:d8:88:1d:01:6c:ae:
                    5e:4d:82:12:56:91:42:04:87:0f:41:3d:f7:68:0a:
                    16:8d:b3:86:05:f3:b6:80:c2:6a:a2:39:a3:11:5c:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8C:BC:05:88:CD:2D:17:33:DE:20:FA:04:7A:38:65:78:04:EA:D6
            X509v3 Authority Key Identifier:
                keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:dd:97:22:71:83:8a:0e:8b:f3:94:b1:13:38:7b:da:4a:d3:
         c2:ac:dc:bb:74:a2:43:11:93:30:e9:30:0e:04:ab:79:f0:ef:
         da:c6:dc:86:68:e2:bc:f9:84:b8:2f:d7:1f:6c:13:25:a0:40:
         62:35:81:19:bc:0d:d8:a8:40:75:f2:65:9a:a1:ee:1e:69:45:
         eb:d7:90:a8:34:99:9f:74:f3:12:0a:ec:d5:90:d3:f7:d4:84:
         80:55:b9:e5:cd:bc:87:f7:46:e7:93:b5:1c:1e:13:23:5f:5f:
         fe:32:ca:7c:99:45:a8:3f:1b:d3:a0:9a:83:dd:09:68:31:60:
         f4:17:24:10:8d:34:93:ca:19:c5:8d:3e:72:81:cf:18:70:99:
         88:4b:c7:49:99:71:ce:92:53:1e:4c:29:c3:64:41:8c:e7:66:
         6b:7e:ea:4a:20:46:63:9b:0a:51:81:9c:99:c7:35:ae:28:21:
         d9:da:79:e6:34:0c:59:7c:5e:50:0b:de:ed:06:e2:e0:42:dd:
         4a:4a:4c:64:6e:27:de:a4:b8:59:01:93:2f:ca:0b:b0:2b:0a:
         d5:d6:92:2d:17:fc:07:21:81:b4:5a:48:85:7c:c1:7d:36:1d:
         b9:41:6b:1c:bf:14:45:3d:a1:7b:e6:9a:f8:88:86:1f:ec:74:
         07:dd:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:42:09 2026 by rpki-client