A secure RISC-V CPU that is designed for lightweight secure applications is presented. It adopts multiple secure measures, including side-channel attack countermeasures, running monitor, state clearance, operation integrity protection, and cache attack countermeasure in addition to extension of the privilege features defined by the instruction set architecture specification. The CPU has been fabricated and tested. Some test method addressing the challenge of security verification are also introduced in this paper. Tests show that it has up to 350MHz clock frequency and 328 mW power consumption on average.