$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/13E8B55761EE5026D94F5285C563C1B503C409F0.cer File: 13E8B55761EE5026D94F5285C563C1B503C409F0.cer (raw, json) Hash identifier: hbdOymiQs6MlzTm3eAJ02x9t6orbcyYRORYB7Ogu5pE= Subject key identifier: 13:E8:B5:57:61:EE:50:26:D9:4F:52:85:C5:63:C1:B5:03:C4:09:F0 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 329E47B06C62F31BCCBAFCA5F4B4D5AE75399F2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/MINGXI/0/13E8B55761EE5026D94F5285C563C1B503C409F0.mft caRepository: rsync://rpkica.twnic.tw/rpki/MINGXI/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:35 +0000 Certificate not after: Mon 10 May 2027 15:53:35 +0000 Subordinate resources: AS: 24162 IP: 2402:3560::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:9e:47:b0:6c:62:f3:1b:cc:ba:fc:a5:f4:b4:d5:ae:75:39:9f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:48:35 2026 GMT Not After : May 10 15:53:35 2027 GMT Subject: CN=13E8B55761EE5026D94F5285C563C1B503C409F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:59:72:ba:3e:dd:6f:0e:00:10:67:d1:25:2e: f2:4b:99:dd:59:f8:bc:5b:47:87:cc:75:b2:4b:0e: f6:01:c3:04:fd:dd:7b:0e:05:0c:7d:cc:e4:a4:85: 10:c1:4a:97:79:e3:6e:bc:5f:fa:54:d2:33:88:37: 5c:06:57:a0:e4:17:9b:e2:70:a4:42:a1:91:62:a3: 96:68:6d:da:e6:92:58:b9:a2:7c:a4:51:77:45:b6: 2e:74:8d:0f:75:ac:27:aa:fc:44:db:69:e0:d5:3a: 94:6b:2e:c1:37:5d:03:fd:3b:d0:32:02:cc:b4:bc: 09:ac:00:cc:2b:6e:0c:2c:45:6b:29:99:b6:3d:dc: 4b:b1:b2:fe:dc:51:e3:2e:83:3c:af:c0:e5:b8:45: 00:a0:1d:07:b5:65:55:72:7a:f2:0a:56:7a:9e:4d: 6d:a9:e1:8a:28:24:f8:97:53:8f:94:8c:14:68:7c: 5e:cd:27:ef:5c:66:08:87:6c:fa:f7:b0:d6:c9:e6: 33:bd:8b:7a:25:04:a3:a4:74:57:ff:e5:2b:63:ee: cf:ba:20:cc:5d:78:43:74:d6:4f:86:7a:da:eb:ec: 1d:f4:63:cf:0d:b1:5d:2d:96:f8:3e:ec:99:30:4b: fb:5f:e1:e0:73:4b:9a:c9:d0:36:d6:0f:9f:ea:97: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:E8:B5:57:61:EE:50:26:D9:4F:52:85:C5:63:C1:B5:03:C4:09:F0 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/0/13E8B55761EE5026D94F5285C563C1B503C409F0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:3560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24162 Signature Algorithm: sha256WithRSAEncryption 78:a7:ae:26:5d:6b:53:89:d3:27:b7:3e:65:90:1c:58:6f:84: 0a:76:ac:b6:11:b3:17:d1:9c:d9:b7:b3:14:cf:60:87:7b:9a: 0b:5f:93:40:6d:e7:50:d7:83:6e:d1:f0:50:e3:1e:ea:c6:3f: 4f:4e:21:f2:7d:f3:ae:af:93:e7:e8:a1:44:46:6e:37:24:24: d3:a6:cf:53:11:af:01:85:e4:c3:d8:e4:67:6e:85:87:20:f0: a8:48:df:1b:8c:cb:15:04:93:dc:d8:eb:81:b8:f2:65:34:f9: 77:12:14:5a:ef:d2:b6:0c:68:c1:8a:23:60:c7:0d:e0:73:cd: 89:0c:36:d1:45:72:f0:50:68:23:33:18:cf:5c:fa:b4:67:8f: ef:94:39:59:b2:89:b9:85:cf:5b:6c:c7:88:03:85:31:77:63: ac:22:0b:10:a9:a4:da:3a:31:43:46:6a:19:6f:e5:7d:9f:46: c7:43:ed:2f:73:f7:58:78:74:ce:dc:f2:d8:03:98:84:1a:9b: 32:50:40:ca:39:2d:cd:15:90:d5:01:b7:83:84:0d:b0:d1:51: fc:02:ae:44:ff:86:c2:ea:4c:e1:8f:dc:59:b9:ed:4c:71:28: ab:30:24:4b:4b:3d:55:6e:6a:ce:d7:e9:5e:7b:b4:f2:5e:5f: fb:47:a2:ef -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUMp5HsGxi8xvMuvyl9LTVrnU5nywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDgzNVoX DTI3MDUxMDE1NTMzNVowMzExMC8GA1UEAxMoMTNFOEI1NTc2MUVFNTAyNkQ5NEY1 Mjg1QzU2M0MxQjUwM0M0MDlGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRZcro+3W8OABBn0SUu8kuZ3Vn4vFtHh8x1sksO9gHDBP3dew4FDH3M5KSF EMFKl3njbrxf+lTSM4g3XAZXoOQXm+JwpEKhkWKjlmht2uaSWLmifKRRd0W2LnSN D3WsJ6r8RNtp4NU6lGsuwTddA/070DICzLS8CawAzCtuDCxFaymZtj3cS7Gy/txR 4y6DPK/A5bhFAKAdB7VlVXJ68gpWep5Nbanhiigk+JdTj5SMFGh8Xs0n71xmCIds +vew1snmM72LeiUEo6R0V//lK2Puz7ogzF14Q3TWT4Z62uvsHfRjzw2xXS2W+D7s mTBL+1/h4HNLmsnQNtYPn+qXCokCAwEAAaOCAoIwggJ+MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBPotVdh7lAm2U9ShcVjwbUDxAnwMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NSU5HWEkvMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJ LzAvMTNFOEI1NTc2MUVFNTAyNkQ5NEY1Mjg1QzU2M0MxQjUwM0M0MDlGMC5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACQCNWAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICXmIw DQYJKoZIhvcNAQELBQADggEBAHinriZda1OJ0ye3PmWQHFhvhAp2rLYRsxfRnNm3 sxTPYId7mgtfk0Bt51DXg27R8FDjHurGP09OIfJ9866vk+fooURGbjckJNOmz1MR rwGF5MPY5GduhYcg8KhI3xuMyxUEk9zY64G48mU0+XcSFFrv0rYMaMGKI2DHDeBz zYkMNtFFcvBQaCMzGM9c+rRnj++UOVmyibmFz1tsx4gDhTF3Y6wiCxCppNo6MUNG ahlv5X2fRsdD7S9z91h4dM7c8tgDmIQamzJQQMo5Lc0VkNUBt4OEDbDRUfwCrkT/ hsLqTOGP3Fm57UxxKKswJEtLPVVuas7X6V57tPJeX/tHou8= -----END CERTIFICATE-----Generated at Tue May 12 22:45:50 2026 by rpki-client