$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.cer File: 084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.cer (raw, json) Hash identifier: u7/WBWDHW3K/aZhOHiS4Z0cNC0YomhAZmffRNI5ipeQ= Subject key identifier: 08:4F:CA:ED:B5:0B:B0:39:5F:4B:B9:1B:91:C0:F2:E4:E8:4C:B7:BD Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 4435475B56FC30BCA90F5A50E019CD9093314FB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft caRepository: rsync://rpkica.twnic.tw/rpki/KAIWEI/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Fri 04 Sep 2026 07:19:05 +0000 Certificate not after: Fri 03 Sep 2027 07:24:05 +0000 Subordinate resources: AS: 154880 IP: 202.47.172.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:35:47:5b:56:fc:30:bc:a9:0f:5a:50:e0:19:cd:90:93:31:4f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Sep 4 07:19:05 2026 GMT Not After : Sep 3 07:24:05 2027 GMT Subject: CN=084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:25:3b:a7:b5:5e:37:d8:7b:ab:77:14:a1: 5c:89:d2:ac:cd:7b:14:5f:a9:2a:71:7f:cb:7f:ec: 86:6c:e5:3a:22:00:f4:5d:5b:1f:8c:d7:67:1b:6e: 3e:ca:45:ea:b2:31:80:88:54:c0:e4:ef:1b:7d:85: 2d:a6:b9:e1:40:19:ce:64:bd:fe:45:52:0e:02:9a: cb:55:57:ca:c3:03:01:5f:56:31:df:b0:b3:0e:be: d0:df:9c:59:34:15:81:1b:21:95:fe:a2:0c:a2:e7: e9:4b:cf:98:57:b8:2a:d4:80:3f:50:98:26:b1:72: 87:36:66:e0:12:ee:8c:da:0e:b1:7b:b8:af:e7:cb: dc:37:29:0c:e6:ae:4a:28:10:f2:51:76:ce:66:84: 0b:3d:3f:1c:e4:da:00:d9:b8:74:e9:8c:da:37:63: 4e:51:54:6e:ca:16:3e:22:ae:39:5f:bc:a0:6d:6c: db:16:42:52:8a:5e:0b:e1:fd:af:45:83:32:01:de: fa:ef:47:2f:5e:18:08:7a:2a:81:73:94:c1:f5:b8: 7f:91:eb:ed:9b:e7:38:b6:58:2d:63:8e:fe:b8:eb: aa:b9:33:17:76:b5:a7:6e:a4:9f:f4:aa:ae:29:81: 62:72:2a:eb:a4:f4:53:e0:06:5f:a1:1a:3f:a0:70: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:4F:CA:ED:B5:0B:B0:39:5F:4B:B9:1B:91:C0:F2:E4:E8:4C:B7:BD X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/KAIWEI/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.172.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 154880 Signature Algorithm: sha256WithRSAEncryption 30:b5:7c:eb:c8:27:df:ff:52:31:b7:c1:af:51:4e:eb:32:20: f2:4b:5b:cd:03:57:15:b3:9f:c9:51:99:a7:f9:c9:2b:8e:94: f0:f0:bd:6d:03:7c:ad:10:20:ba:fd:94:c0:5f:15:8b:83:d4: 88:a8:b9:9f:2b:7d:2b:05:3c:6f:78:7d:48:02:4d:5b:42:9b: 62:a0:bc:0a:7a:ed:22:64:1e:c9:0c:fa:da:f1:47:0e:f1:b7: 70:b6:4e:99:2c:28:df:17:3d:b8:93:af:5f:d6:fc:1e:9c:fb: 8f:cb:e9:1f:d5:0d:d5:9e:52:fa:a4:e2:73:fd:23:dd:56:d0: fb:74:2b:4e:7e:f3:7d:76:e4:96:28:19:7c:d2:1e:93:0f:e3: 25:cc:d5:4b:0a:7a:5a:87:af:2b:dd:4b:7d:04:b2:ca:88:91: f7:0d:18:19:3e:4c:41:1e:71:28:9f:0f:d3:2f:c6:2d:62:4b: 4c:83:67:ba:40:e4:fd:5c:68:b9:c5:e8:ca:5e:0a:37:8b:9d: b5:c6:91:90:a8:ad:d8:8e:ff:e2:b6:d7:1b:a7:ad:48:36:21: 1f:aa:a0:39:d2:4d:50:d8:6d:fa:e6:cb:62:11:de:fc:2b:f7: dc:1a:c1:27:3b:4e:77:99:22:8e:3f:ad:00:1d:17:e9:8a:c7: a3:9f:32:fa -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIURDVHW1b8MLypD1pQ4BnNkJMxT7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkwNDA3MTkwNVoX DTI3MDkwMzA3MjQwNVowMzExMC8GA1UEAxMoMDg0RkNBRURCNTBCQjAzOTVGNEJC OTFCOTFDMEYyRTRFODRDQjdCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM70JTuntV432HurdxShXInSrM17FF+pKnF/y3/shmzlOiIA9F1bH4zXZxtu PspF6rIxgIhUwOTvG32FLaa54UAZzmS9/kVSDgKay1VXysMDAV9WMd+wsw6+0N+c WTQVgRshlf6iDKLn6UvPmFe4KtSAP1CYJrFyhzZm4BLujNoOsXu4r+fL3DcpDOau SigQ8lF2zmaECz0/HOTaANm4dOmM2jdjTlFUbsoWPiKuOV+8oG1s2xZCUopeC+H9 r0WDMgHe+u9HL14YCHoqgXOUwfW4f5Hr7ZvnOLZYLWOO/rjrqrkzF3a1p26kn/Sq rimBYnIq66T0U+AGX6EaP6BwtxkCAwEAAaOCAoIwggJ+MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAhPyu21C7A5X0u5G5HA8uToTLe9MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9LQUlXRUkvMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FJV0VJ LzAvMDg0RkNBRURCNTBCQjAzOTVGNEJCOTFCOTFDMEYyRTRFODRDQjdCRC5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAcovrDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCXQAw DQYJKoZIhvcNAQELBQADggEBADC1fOvIJ9//UjG3wa9RTusyIPJLW80DVxWzn8lR maf5ySuOlPDwvW0DfK0QILr9lMBfFYuD1IiouZ8rfSsFPG94fUgCTVtCm2KgvAp6 7SJkHskM+trxRw7xt3C2TpksKN8XPbiTr1/W/B6c+4/L6R/VDdWeUvqk4nP9I91W 0Pt0K05+83125JYoGXzSHpMP4yXM1UsKelqHryvdS30EssqIkfcNGBk+TEEecSif D9Mvxi1iS0yDZ7pA5P1caLnF6MpeCjeLnbXGkZCordiO/+K21xunrUg2IR+qoDnS TVDYbfrmy2IR3vwr99wawSc7TneZIo4/rQAdF+mKx6OfMvo= -----END CERTIFICATE-----Generated at Fri Sep 25 03:40:52 2026 by rpki-client