$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer File: 0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer (raw, json) Hash identifier: QAnhLqNMpCso5X9Rp+r0W0jJAtlzLZ4SEonw+ScxZVQ= Subject key identifier: 0C:16:4C:EA:BA:2A:C5:8B:25:41:F9:04:71:E0:9C:21:EF:47:02:B0 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 01413F21DA6FBF722D174B2639F866443F4C97E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft caRepository: rsync://rpkica.twnic.tw/rpki/FUYU/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:45:52 +0000 Certificate not after: Mon 10 May 2027 15:50:52 +0000 Subordinate resources: AS: 63906 AS: 150771 IP: 2401:81a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:41:3f:21:da:6f:bf:72:2d:17:4b:26:39:f8:66:44:3f:4c:97:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:45:52 2026 GMT Not After : May 10 15:50:52 2027 GMT Subject: CN=0C164CEABA2AC58B2541F90471E09C21EF4702B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a0:43:43:b7:e2:76:a7:17:38:d6:c5:92:3e: ed:5b:17:89:53:62:c4:1a:d4:1a:0a:d5:f9:c3:79: 87:66:6e:48:97:48:05:62:de:2c:6b:f0:c6:e0:41: d8:e6:9a:67:1c:69:22:af:0e:0b:5b:eb:3b:db:ce: 61:72:06:ff:fb:90:bc:01:cc:ae:5c:23:bb:45:24: 46:04:07:bc:f2:b0:3d:61:2b:7e:70:5c:7a:68:af: 11:b4:e4:27:86:a6:ef:46:d1:b3:e7:42:2f:01:c4: e8:ef:8d:2f:ef:b0:df:01:0c:63:6d:e2:f8:25:13: 2d:b3:19:bf:2d:b3:9d:81:da:28:80:00:62:81:d7: c7:2c:e7:57:ed:7b:ec:9a:29:f0:5e:0a:41:fb:fe: 28:63:f2:15:a5:74:d7:3e:07:a9:56:6d:23:d4:94: 4e:15:e3:21:9a:9c:7e:1e:6a:66:a5:94:4c:df:b0: 7b:07:7e:ae:aa:4d:19:5d:e6:54:dc:ed:43:68:0e: 75:03:3a:13:cf:dc:11:47:60:0e:dd:78:82:4c:77: 4f:6d:cc:8f:c8:60:32:95:7a:ef:a1:d2:42:0e:9c: a5:31:94:66:26:8c:75:fa:9d:06:76:3e:83:2b:17: 61:3f:1f:b6:3b:91:39:6a:74:22:8c:44:eb:ce:f7: dc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:16:4C:EA:BA:2A:C5:8B:25:41:F9:04:71:E0:9C:21:EF:47:02:B0 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/FUYU/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:81a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63906 150771 Signature Algorithm: sha256WithRSAEncryption 4c:16:f2:df:aa:85:fe:6d:bf:3f:4f:65:a2:32:f9:78:15:87: 18:29:a8:11:08:db:32:e4:66:41:37:14:f0:29:3a:5b:12:f9: 90:8f:30:99:31:c5:8e:7a:6f:8f:35:d4:8f:3e:25:87:46:79: e9:c9:f6:48:bf:81:e1:74:12:01:07:1f:60:b0:26:fc:9d:11: 85:99:3d:3f:8d:b0:b8:f4:ac:4b:e4:5e:f0:21:cc:75:91:56: fc:a9:c2:2e:46:43:ea:a0:70:ae:24:70:9d:05:7f:42:ba:c8: 11:23:50:38:c9:e3:99:e1:b2:07:c8:fe:25:2b:0e:ce:0b:4d: 55:30:36:f0:88:1f:bd:90:ef:cf:77:09:a5:ea:c3:e4:c3:5a: dc:94:a2:11:08:c5:e2:9d:01:61:86:c3:14:e1:20:67:9d:c4: 09:48:14:42:4d:f6:fd:03:3c:ed:04:0d:b5:fa:ae:a2:a3:07: b8:1e:f8:77:dd:6f:97:e5:1a:0c:d8:4e:3e:3e:c3:98:42:4c: 5e:79:b7:f9:d9:1f:22:cc:ba:43:4a:80:9a:80:03:2d:71:f0: 55:15:71:af:70:79:12:b8:6e:2f:2a:9e:dc:53:62:a6:de:d2: 0f:08:1c:6a:20:79:39:71:a3:ac:7e:39:44:ca:7c:ab:6e:c5: 5f:14:aa:b9 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUAUE/Idpvv3ItF0smOfhmRD9Ml+AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDU1MloX DTI3MDUxMDE1NTA1MlowMzExMC8GA1UEAxMoMEMxNjRDRUFCQTJBQzU4QjI1NDFG OTA0NzFFMDlDMjFFRjQ3MDJCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCgQ0O34nanFzjWxZI+7VsXiVNixBrUGgrV+cN5h2ZuSJdIBWLeLGvwxuBB 2OaaZxxpIq8OC1vrO9vOYXIG//uQvAHMrlwju0UkRgQHvPKwPWErfnBcemivEbTk J4am70bRs+dCLwHE6O+NL++w3wEMY23i+CUTLbMZvy2znYHaKIAAYoHXxyznV+17 7Jop8F4KQfv+KGPyFaV01z4HqVZtI9SUThXjIZqcfh5qZqWUTN+wewd+rqpNGV3m VNztQ2gOdQM6E8/cEUdgDt14gkx3T23Mj8hgMpV676HSQg6cpTGUZiaMdfqdBnY+ gysXYT8ftjuROWp0IoxE68733AECAwEAAaOCAoQwggKAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAwWTOq6KsWLJUH5BHHgnCHvRwKwMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9GVVlVLzAvMFwG CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ZVWVUvMC8w QzE2NENFQUJBMkFDNThCMjU0MUY5MDQ3MUUwOUMyMUVGNDcwMkIwLm1mdDA3Bggr BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw DzANBAIAAjAHAwUAJAGBoDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA+aICAwJM 8zANBgkqhkiG9w0BAQsFAAOCAQEATBby36qF/m2/P09lojL5eBWHGCmoEQjbMuRm QTcU8Ck6WxL5kI8wmTHFjnpvjzXUjz4lh0Z56cn2SL+B4XQSAQcfYLAm/J0RhZk9 P42wuPSsS+Re8CHMdZFW/KnCLkZD6qBwriRwnQV/QrrIESNQOMnjmeGyB8j+JSsO zgtNVTA28IgfvZDvz3cJperD5MNa3JSiEQjF4p0BYYbDFOEgZ53ECUgUQk32/QM8 7QQNtfquoqMHuB74d91vl+UaDNhOPj7DmEJMXnm3+dkfIsy6Q0qAmoADLXHwVRVx r3B5ErhuLyqe3FNipt7SDwgcaiB5OXGjrH45RMp8q27FXxSquQ== -----END CERTIFICATE-----Generated at Tue May 12 22:03:17 2026 by rpki-client