$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer File: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer (raw, json) Hash identifier: en7zOxXRtn1OXVeX1jIrf7vh2AXYPTmjoNPJEG9tlvU= Subject key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 035321030EC8DA1C92CE1DD444EAD5688B4A0CFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft caRepository: rsync://rpkica.twnic.tw/rpki/ITRINET/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:13 +0000 Certificate not after: Mon 10 May 2027 15:52:13 +0000 Subordinate resources: AS: 18422 IP: 61.61.240.0/20 IP: 2001:ed8::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:53:21:03:0e:c8:da:1c:92:ce:1d:d4:44:ea:d5:68:8b:4a:0c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:13 2026 GMT Not After : May 10 15:52:13 2027 GMT Subject: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:3c:9d:d0:2c:a0:a2:02:9e:22:cd:b4:2f: d0:0c:0d:8f:2d:d6:0d:0e:a4:f1:e0:36:cd:f5:bb: af:d7:77:19:c8:8a:be:4a:b3:59:79:f8:d5:d0:86: 8d:8d:fa:b3:c6:e8:e5:5c:d6:40:33:0b:46:ca:f4: e6:02:90:e9:25:d5:40:20:15:45:90:f0:2b:74:32: 63:0d:dd:75:6d:00:ba:bb:b7:93:e4:6d:b2:2e:a2: 3f:d0:e5:82:79:54:95:32:de:b9:63:bb:39:1f:cd: 78:20:8a:87:26:55:b3:73:1c:d9:c2:88:5c:36:aa: 03:a4:d7:6a:9a:d9:35:c9:d3:d3:f9:99:c1:05:3b: 18:b1:82:91:d2:0c:d2:b2:bc:39:6a:21:76:77:64: 60:0d:d2:ed:2f:13:a7:cf:a3:18:fa:65:e1:5e:29: f9:b8:7e:ca:eb:44:a0:40:79:13:98:af:20:15:8e: d2:6f:88:f0:3d:10:0a:88:47:b3:08:1b:ec:4f:99: 21:22:19:a4:a2:fb:45:86:b6:da:3b:2a:fc:8e:fb: ba:cc:ae:db:86:cf:52:70:23:73:92:60:d6:0e:5b: bc:7b:d5:60:1b:0f:3a:93:a9:24:55:c9:65:5e:56: 9b:39:69:23:cf:5d:34:fc:c2:c8:c1:b8:98:c6:81: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.61.240.0/20 IPv6: 2001:ed8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18422 Signature Algorithm: sha256WithRSAEncryption 24:86:32:87:0f:0e:0c:0e:e5:db:3f:99:cb:0c:44:b1:a7:33: df:12:5f:37:53:8d:e1:46:cf:69:44:1d:48:c2:dc:74:21:e7: 71:6b:e6:42:47:2e:dd:af:ed:51:d2:a8:23:c7:a6:a9:59:73: 20:79:fc:a1:2a:f6:d9:5f:59:1d:94:e1:38:7a:d5:1a:05:44: 35:65:b0:5e:d3:f4:a3:12:1d:c8:68:c5:27:8a:f2:27:4f:7d: 10:c8:a2:0b:9d:01:2b:f4:10:b1:cf:63:20:f6:be:ed:c0:68: ea:1d:56:be:e7:8e:9b:73:78:9d:15:d9:68:de:0b:67:a1:c5: 2f:9e:d9:2b:17:6a:7d:60:1f:e0:f7:76:4a:c3:eb:9e:0c:e1: c2:17:31:98:59:42:fe:8f:c1:26:2d:e2:88:8d:84:41:7a:72: 78:c6:03:8e:dd:c5:6b:53:13:29:f1:11:f7:86:a6:26:0e:b6: 5e:47:65:88:8f:d8:4a:7b:f5:50:53:ee:3d:6d:49:75:87:10: dc:a9:4f:de:db:67:6e:d5:62:15:ff:6f:77:79:79:19:33:e9: d6:4d:a6:6c:c4:81:ad:72:43:0d:82:db:f5:f3:ac:aa:81:f4: c2:41:15:ba:38:a6:5b:6d:1f:02:d8:4a:1f:a7:ad:02:7f:e7: 09:2b:5e:2c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUA1MhAw7I2hySzh3UROrVaItKDPwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDcxM1oX DTI3MDUxMDE1NTIxM1owMzExMC8GA1UEAxMoMEFFRkJGQ0M1MjY2MjIyQzg0NTNG RTVCNDY4QzM2N0MwOTVDOEY2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQOPJ3QLKCiAp4izbQv0AwNjy3WDQ6k8eA2zfW7r9d3GciKvkqzWXn41dCG jY36s8bo5VzWQDMLRsr05gKQ6SXVQCAVRZDwK3QyYw3ddW0Auru3k+Rtsi6iP9Dl gnlUlTLeuWO7OR/NeCCKhyZVs3Mc2cKIXDaqA6TXaprZNcnT0/mZwQU7GLGCkdIM 0rK8OWohdndkYA3S7S8Tp8+jGPpl4V4p+bh+yutEoEB5E5ivIBWO0m+I8D0QCohH swgb7E+ZISIZpKL7RYa22jsq/I77usyu24bPUnAjc5Jg1g5bvHvVYBsPOpOpJFXJ ZV5WmzlpI89dNPzCyMG4mMaBjWkCAwEAAaOCApIwggKOMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFArvv8xSZiIshFP+W0aMNnwJXI9nMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JVFJJTkVULzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0lUUklO RVQvMC8wQUVGQkZDQzUyNjYyMjJDODQ1M0ZFNUI0NjhDMzY3QzA5NUM4RjY3Lm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEPT3wMA0EAgACMAcDBQAgAQ7YMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAkf2MA0GCSqGSIb3DQEBCwUAA4IBAQAkhjKHDw4MDuXbP5nL DESxpzPfEl83U43hRs9pRB1Iwtx0Iedxa+ZCRy7dr+1R0qgjx6apWXMgefyhKvbZ X1kdlOE4etUaBUQ1ZbBe0/SjEh3IaMUnivInT30QyKILnQEr9BCxz2Mg9r7twGjq HVa+546bc3idFdlo3gtnocUvntkrF2p9YB/g93ZKw+ueDOHCFzGYWUL+j8EmLeKI jYRBenJ4xgOO3cVrUxMp8RH3hqYmDrZeR2WIj9hKe/VQU+49bUl1hxDcqU/e22du 1WIV/293eXkZM+nWTaZsxIGtckMNgtv186yqgfTCQRW6OKZbbR8C2Eofp60Cf+cJ K14s -----END CERTIFICATE-----Generated at Wed May 13 00:21:20 2026 by rpki-client