$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer File: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer (raw, json) Hash identifier: K5HLwpU9K8C9zXXM9pFkkB7voyHPSspmMQ7T1EAc2Ws= Subject key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 5E6575CF2BDACBF788B00663BC720B98465E07F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft caRepository: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:54 +0000 Certificate not after: Mon 10 May 2027 15:49:54 +0000 Subordinate resources: IP: 165.99.170.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:65:75:cf:2b:da:cb:f7:88:b0:06:63:bc:72:0b:98:46:5e:07:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:44:54 2026 GMT Not After : May 10 15:49:54 2027 GMT Subject: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:df:e6:be:78:bb:c7:16:55:81:ff:b5:ac: 6b:45:4c:5a:fc:77:8a:59:13:9e:b7:a4:93:64:ad: 2b:01:ea:0a:18:dd:58:73:8f:d7:6c:b1:e9:9b:78: 3a:8f:31:0f:f9:9d:0a:49:9d:0a:3e:ee:07:72:94: 35:4d:56:00:4f:8a:c8:c4:46:a0:2b:84:38:52:f6: f7:fd:b7:f0:33:4c:cc:60:80:d2:85:d5:7f:71:c4: f1:6d:a8:58:d3:61:6b:6d:5f:f8:10:20:51:da:12: c5:62:02:a5:e5:e3:61:f6:db:19:9a:bb:a3:9a:68: 0d:5f:30:3d:e9:f9:73:27:a5:61:70:b6:54:7b:d0: ee:10:79:c6:f1:fc:34:67:e5:28:f9:51:18:20:b5: 9f:ae:0a:8a:5b:fe:a5:5c:af:ed:49:82:68:03:a3: d0:35:0b:ef:3a:fd:3a:2e:bd:55:fb:72:00:73:f8: 6b:01:ca:69:33:d5:6b:55:93:3e:b5:4d:63:24:05: 04:4c:6c:19:32:56:2c:34:8f:76:87:09:4e:02:22: 51:0f:da:93:7d:64:8e:b6:7e:40:89:b7:31:47:d0: 90:b9:df:d3:7d:ab:33:d3:e9:04:74:3e:76:29:e7: 90:8e:56:4e:66:b9:ff:59:a4:0f:22:11:5b:6a:d1: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.170.0/23 Signature Algorithm: sha256WithRSAEncryption 92:59:cc:f1:f5:6c:b7:ca:89:35:8b:da:8e:78:bc:93:22:d5: 82:93:33:27:c2:55:85:24:b4:96:f4:cf:7f:20:a2:5b:c5:09: 1c:2f:c9:68:14:00:97:f9:5e:a1:33:57:0f:ca:09:8b:87:1e: b0:09:ba:ba:0d:31:f9:7c:69:38:86:59:92:f8:bc:68:79:81: 5e:8a:cf:62:99:e3:0f:83:bc:cd:21:19:18:28:be:f4:e2:fe: 45:7a:a1:87:85:cf:57:a4:de:47:f1:0d:87:b6:d1:0b:e6:32: 6e:f5:cb:94:fb:90:55:d2:5b:65:1d:a5:d7:78:00:66:f5:85: 54:64:27:b2:4f:f1:7c:02:32:78:60:e1:d2:28:cd:6f:63:77: 37:e6:77:9a:d1:31:e7:03:0c:fa:ea:a4:56:09:54:d3:3b:38: 64:be:69:76:b5:9a:2c:11:14:b7:e2:52:e1:b0:b1:78:22:4f: 76:1d:1e:02:3c:93:04:24:da:de:cf:cc:0e:6e:bc:d6:0a:c9: cb:44:ba:91:02:05:b7:21:44:09:a4:1a:60:23:1c:50:52:12: 95:e7:0d:62:ae:51:be:eb:83:fb:ed:f9:d7:ea:d1:0e:e4:44: ee:90:40:47:15:f3:fa:cb:82:8d:f5:66:b5:a8:b3:54:a8:a8: 83:e3:e3:dc -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUXmV1zyvay/eIsAZjvHILmEZeB/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDQ1NFoX DTI3MDUxMDE1NDk1NFowMzExMC8GA1UEAxMoOEE1QkY0N0EzQjZBNjY4QjZDQjMy MzY5RjUyQjlFQTAzNTM5MDcwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1s3+a+eLvHFlWB/7Wsa0VMWvx3ilkTnrekk2StKwHqChjdWHOP12yx6Zt4 Oo8xD/mdCkmdCj7uB3KUNU1WAE+KyMRGoCuEOFL29/238DNMzGCA0oXVf3HE8W2o WNNha21f+BAgUdoSxWICpeXjYfbbGZq7o5poDV8wPen5cyelYXC2VHvQ7hB5xvH8 NGflKPlRGCC1n64Kilv+pVyv7UmCaAOj0DUL7zr9Oi69VftyAHP4awHKaTPVa1WT PrVNYyQFBExsGTJWLDSPdocJTgIiUQ/ak31kjrZ+QIm3MUfQkLnf032rM9PpBHQ+ dinnkI5WTma5/1mkDyIRW2rR2y8CAwEAAaOCAmwwggJoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIpb9Ho7amaLbLMjafUrnqA1OQcJMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9EQlNCQU5LU0cv MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJT QkFOS1NHLzAvOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcw OS5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaVjqjANBgkqhkiG9w0BAQsFAAOCAQEAklnM 8fVst8qJNYvajni8kyLVgpMzJ8JVhSS0lvTPfyCiW8UJHC/JaBQAl/leoTNXD8oJ i4cesAm6ug0x+XxpOIZZkvi8aHmBXorPYpnjD4O8zSEZGCi+9OL+RXqhh4XPV6Te R/ENh7bRC+YybvXLlPuQVdJbZR2l13gAZvWFVGQnsk/xfAIyeGDh0ijNb2N3N+Z3 mtEx5wMM+uqkVglU0zs4ZL5pdrWaLBEUt+JS4bCxeCJPdh0eAjyTBCTa3s/MDm68 1grJy0S6kQIFtyFECaQaYCMcUFISlecNYq5RvuuD++351+rRDuRE7pBARxXz+suC jfVmtaizVKiog+Pj3A== -----END CERTIFICATE-----Generated at Wed May 13 06:26:37 2026 by rpki-client