$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer File: BE02DA0D44FE912955460231A0186A486B0C371B.cer (raw, json) Hash identifier: jkdYiWeF0NHsY6jMKTMuH9k2/Pv7NWKgwJRfW/1BurI= Subject key identifier: BE:02:DA:0D:44:FE:91:29:55:46:02:31:A0:18:6A:48:6B:0C:37:1B Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 15C9FEEE88277990B50528AF890602E645E98D5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft caRepository: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:56 +0000 Certificate not after: Mon 10 May 2027 15:49:56 +0000 Subordinate resources: IP: 165.99.168.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c9:fe:ee:88:27:79:90:b5:05:28:af:89:06:02:e6:45:e9:8d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:44:56 2026 GMT Not After : May 10 15:49:56 2027 GMT Subject: CN=BE02DA0D44FE912955460231A0186A486B0C371B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:2e:9c:98:8c:22:46:0f:47:e7:49:e0:64: 00:fe:f1:3f:ab:ac:b8:0c:8a:3e:7a:57:19:19:c3: aa:f8:b2:56:52:b1:60:23:fa:ce:76:7b:1e:c2:e1: 92:b4:9f:a5:37:8d:b6:50:68:04:d9:f5:22:d0:f3: b6:af:de:29:b5:ee:45:ee:21:89:df:98:d8:a9:4f: 2b:aa:7c:34:dc:88:24:b6:f8:df:e0:5a:da:09:92: f5:77:60:ae:62:ce:e0:db:d0:e2:bc:6b:0d:2f:50: 6a:4a:99:0a:3a:0d:b2:41:03:84:b2:09:42:a8:2c: 5b:7b:9b:86:04:25:45:2a:5f:d0:c5:2a:70:2d:db: 77:a2:02:4a:b2:4b:16:82:28:0d:17:d5:f4:21:7f: 88:23:56:c2:2b:57:8f:ad:14:f4:bf:f4:69:64:ce: 93:20:4b:e1:4e:55:04:a9:37:32:f0:52:ed:b2:86: b7:fb:54:49:f9:a6:24:6c:e2:e7:04:31:4f:e0:64: b1:03:19:3f:27:68:9f:8f:35:56:15:b4:d3:67:88: 3a:9b:7f:e6:04:19:f3:90:5e:65:db:67:fb:f6:53: d3:bf:1c:75:2f:57:d4:45:ca:c1:ef:c8:a9:85:f5: c8:07:9e:f3:a3:18:a4:0b:32:79:3c:30:fe:c8:3d: 3c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:02:DA:0D:44:FE:91:29:55:46:02:31:A0:18:6A:48:6B:0C:37:1B X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.168.0/23 Signature Algorithm: sha256WithRSAEncryption 93:ce:be:e7:25:ba:42:f9:53:e2:55:23:bf:a7:e0:87:8f:b8: a5:8e:1a:50:7a:29:04:e6:ca:c0:5f:50:a8:84:ca:99:44:d5: 40:51:01:74:8f:24:c0:4b:f3:39:0b:7f:23:b2:25:13:29:ff: 1f:53:05:3a:50:59:94:1b:1d:f3:ad:1b:3a:42:91:a8:bd:da: 65:f9:f1:a7:14:20:fc:26:4d:29:28:eb:bf:18:8a:e4:77:83: f8:bc:cf:75:5b:f7:14:cf:ba:95:60:56:14:7f:de:0c:6e:48: e9:5e:67:66:4b:59:c0:9b:f9:0e:fd:08:da:19:3a:f0:bc:7e: d2:2b:94:ff:8b:d9:79:a5:66:b9:40:6d:d2:e5:28:10:f7:df: bf:7a:23:71:f9:41:4b:9b:98:8f:ca:85:f3:6c:30:71:c3:61: db:89:3e:2d:b2:f3:01:5d:6e:79:ab:9d:e4:b2:3c:00:3d:69: 59:2f:66:4a:81:34:5d:64:9d:00:20:67:3f:37:18:89:70:70: 95:da:11:08:c1:39:0c:68:1c:26:5d:c8:e1:22:80:16:8f:12: d6:95:84:51:7d:24:46:0c:ea:da:7c:39:1f:b8:b4:82:43:3d: f6:b9:37:18:3b:a9:ab:a5:9a:f5:77:2f:d8:a8:9f:31:bb:be: 12:37:28:de -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUFcn+7ogneZC1BSiviQYC5kXpjVowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDQ1NloX DTI3MDUxMDE1NDk1NlowMzExMC8GA1UEAxMoQkUwMkRBMEQ0NEZFOTEyOTU1NDYw MjMxQTAxODZBNDg2QjBDMzcxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4MLpyYjCJGD0fnSeBkAP7xP6usuAyKPnpXGRnDqviyVlKxYCP6znZ7HsLh krSfpTeNtlBoBNn1ItDztq/eKbXuRe4hid+Y2KlPK6p8NNyIJLb43+Ba2gmS9Xdg rmLO4NvQ4rxrDS9QakqZCjoNskEDhLIJQqgsW3ubhgQlRSpf0MUqcC3bd6ICSrJL FoIoDRfV9CF/iCNWwitXj60U9L/0aWTOkyBL4U5VBKk3MvBS7bKGt/tUSfmmJGzi 5wQxT+BksQMZPydon481VhW002eIOpt/5gQZ85BeZdtn+/ZT078cdS9X1EXKwe/I qYX1yAee86MYpAsyeTww/sg9PCcCAwEAAaOCAmwwggJoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL4C2g1E/pEpVUYCMaAYakhrDDcbMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9EQlNCQU5LVFcv MS8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJT QkFOS1RXLzEvQkUwMkRBMEQ0NEZFOTEyOTU1NDYwMjMxQTAxODZBNDg2QjBDMzcx Qi5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaVjqDANBgkqhkiG9w0BAQsFAAOCAQEAk86+ 5yW6QvlT4lUjv6fgh4+4pY4aUHopBObKwF9QqITKmUTVQFEBdI8kwEvzOQt/I7Il Eyn/H1MFOlBZlBsd860bOkKRqL3aZfnxpxQg/CZNKSjrvxiK5HeD+LzPdVv3FM+6 lWBWFH/eDG5I6V5nZktZwJv5Dv0I2hk68Lx+0iuU/4vZeaVmuUBt0uUoEPffv3oj cflBS5uYj8qF82wwccNh24k+LbLzAV1ueaud5LI8AD1pWS9mSoE0XWSdACBnPzcY iXBwldoRCME5DGgcJl3I4SKAFo8S1pWEUX0kRgzq2nw5H7i0gkM99rk3GDupq6Wa 9Xcv2KifMbu+Ejco3g== -----END CERTIFICATE-----Generated at Tue May 12 22:29:06 2026 by rpki-client