$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/08CD1627824D54B3123EE8D800B211C5C2457F0B.cer File: 08CD1627824D54B3123EE8D800B211C5C2457F0B.cer (raw, json) Hash identifier: fm39yw9VlFCvbunuABgrZroEqMStBuSl3bd7kFOIVBg= Subject key identifier: 08:CD:16:27:82:4D:54:B3:12:3E:E8:D8:00:B2:11:C5:C2:45:7F:0B Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 1E36BB7C6F05D19408A11F16F7B1C39A188544A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.mft caRepository: rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:56:59 +0000 Certificate not after: Mon 10 May 2027 16:01:59 +0000 Subordinate resources: IP: 103.122.124.0/22 IP: 2403:8f40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:36:bb:7c:6f:05:d1:94:08:a1:1f:16:f7:b1:c3:9a:18:85:44:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:56:59 2026 GMT Not After : May 10 16:01:59 2027 GMT Subject: CN=08CD1627824D54B3123EE8D800B211C5C2457F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:f2:b3:f7:8d:73:bd:9d:da:28:c4:9c:43: 01:69:f4:7b:e1:d9:4f:02:e6:95:cb:2d:9f:44:61: e1:38:14:6e:73:51:bc:59:13:34:ef:5a:f8:79:b8: 6b:47:8e:ed:43:87:70:55:f8:7b:92:98:d0:ca:02: 98:2d:ad:96:85:48:10:73:dd:b9:7d:5b:13:19:5b: 61:a6:59:94:ce:bd:16:95:99:9b:d8:95:51:88:a7: d5:ef:34:84:a6:6b:5c:0c:f0:22:bf:2b:6d:73:a5: 0a:e0:5e:31:fe:04:d8:a9:9d:b8:84:41:04:43:9c: 1a:0d:a8:95:fd:c8:7c:43:52:f7:24:f0:a4:57:5f: ec:21:8e:e7:ae:ad:3e:4b:17:48:74:67:ed:fb:d3: 4c:00:92:07:35:a8:24:0e:63:87:24:81:e6:fd:70: 24:c0:40:35:f6:7a:dc:87:d3:24:6c:23:87:00:4b: 97:94:48:70:76:52:c6:f5:95:7c:b6:1c:bb:9a:d7: 37:84:86:89:65:4d:eb:78:4e:9e:3f:b1:61:79:ea: e3:f9:9c:c2:25:d6:bf:92:34:32:ed:d2:2e:cc:1c: f8:65:0f:5a:2a:6c:96:53:6d:87:58:a4:fd:51:48: 98:c4:7d:ed:b8:de:93:1b:81:0f:d6:29:a6:0a:4f: e2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:CD:16:27:82:4D:54:B3:12:3E:E8:D8:00:B2:11:C5:C2:45:7F:0B X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.124.0/22 IPv6: 2403:8f40::/32 Signature Algorithm: sha256WithRSAEncryption 2f:bb:1a:e1:7f:6e:77:c9:d9:ab:13:92:26:d2:97:b4:28:e8: 0e:37:df:b8:73:71:f0:f7:83:3b:1f:b0:b7:b0:4d:b3:9a:85: ff:ed:71:4a:ae:36:4e:e5:14:c4:ef:2f:b7:8b:22:da:91:30: 36:fd:0d:16:ea:8a:b2:76:6c:75:5a:d7:d3:1f:6c:7d:75:de: a5:c6:18:1c:83:82:97:5e:bb:f6:f2:f7:89:52:33:c4:d6:e5: c3:76:3f:d6:6e:f9:35:e6:61:c7:56:bc:96:58:0b:e4:dd:b5: 9b:9f:06:bc:5f:05:f1:a4:12:f9:6c:29:6a:65:c1:18:50:a6: cf:f9:52:43:5a:d2:ec:0a:c0:2b:7e:ce:18:83:05:c0:4b:41: a2:ae:72:73:87:c7:50:ae:d3:b6:5c:99:ca:d6:81:7f:00:79: e2:e9:83:a2:2a:c2:0a:89:ab:2b:7c:f6:12:9a:f5:6d:08:76: 89:ef:36:e5:ef:5c:61:68:42:dc:45:a4:67:85:62:1d:35:aa: 31:23:37:fc:86:03:b0:d3:1f:0e:15:55:8e:9b:9f:43:d3:5f: 75:a4:47:cd:97:d4:de:fc:5a:4a:07:00:b0:d2:3c:4c:0e:ea: 04:68:d6:c3:55:a5:f7:8f:4d:7e:92:fa:11:6b:8f:a0:a8:1d: 60:a7:2e:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUHja7fG8F0ZQIoR8W97HDmhiFRKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTY1OVoX DTI3MDUxMDE2MDE1OVowMzExMC8GA1UEAxMoMDhDRDE2Mjc4MjRENTRCMzEyM0VF OEQ4MDBCMjExQzVDMjQ1N0YwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMX88rP3jXO9ndooxJxDAWn0e+HZTwLmlcstn0Rh4TgUbnNRvFkTNO9a+Hm4 a0eO7UOHcFX4e5KY0MoCmC2tloVIEHPduX1bExlbYaZZlM69FpWZm9iVUYin1e80 hKZrXAzwIr8rbXOlCuBeMf4E2KmduIRBBEOcGg2olf3IfENS9yTwpFdf7CGO566t PksXSHRn7fvTTACSBzWoJA5jhySB5v1wJMBANfZ63IfTJGwjhwBLl5RIcHZSxvWV fLYcu5rXN4SGiWVN63hOnj+xYXnq4/mcwiXWv5I0Mu3SLswc+GUPWipsllNth1ik /VFImMR97bjekxuBD9YppgpP4nUCAwEAAaOCAncwggJzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAjNFieCTVSzEj7o2ACyEcXCRX8LMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TS1lCSVJELzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NLWUJJ UkQvMC8wOENEMTYyNzgyNEQ1NEIzMTIzRUU4RDgwMEIyMTFDNUMyNDU3RjBCLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCZ3p8MA0EAgACMAcDBQAkA49AMA0GCSqGSIb3DQEB CwUAA4IBAQAvuxrhf253ydmrE5Im0pe0KOgON9+4c3Hw94M7H7C3sE2zmoX/7XFK rjZO5RTE7y+3iyLakTA2/Q0W6oqydmx1WtfTH2x9dd6lxhgcg4KXXrv28veJUjPE 1uXDdj/Wbvk15mHHVryWWAvk3bWbnwa8XwXxpBL5bClqZcEYUKbP+VJDWtLsCsAr fs4YgwXAS0GirnJzh8dQrtO2XJnK1oF/AHni6YOiKsIKiasrfPYSmvVtCHaJ7zbl 71xhaELcRaRnhWIdNaoxIzf8hgOw0x8OFVWOm59D0191pEfNl9Te/FpKBwCw0jxM DuoEaNbDVaX3j01+kvoRa4+gqB1gpy5r -----END CERTIFICATE-----Generated at Tue May 12 22:28:59 2026 by rpki-client