$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/169D1AB53FAE2B461575777987FB5BDA593BB6F7.cer File: 169D1AB53FAE2B461575777987FB5BDA593BB6F7.cer (raw, json) Hash identifier: 1mb5k8fWm0NVBQualkOWHh24J+RoFfskKE84muW7wc4= Subject key identifier: 16:9D:1A:B5:3F:AE:2B:46:15:75:77:79:87:FB:5B:DA:59:3B:B6:F7 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 1B576B0B714647B655C8942334E673D96F65B0D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/PSYDEA/0/169D1AB53FAE2B461575777987FB5BDA593BB6F7.mft caRepository: rsync://rpkica.twnic.tw/rpki/PSYDEA/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:56:02 +0000 Certificate not after: Mon 10 May 2027 16:01:02 +0000 Subordinate resources: IP: 103.136.224.0/23 IP: 2404:9e40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:57:6b:0b:71:46:47:b6:55:c8:94:23:34:e6:73:d9:6f:65:b0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:56:02 2026 GMT Not After : May 10 16:01:02 2027 GMT Subject: CN=169D1AB53FAE2B461575777987FB5BDA593BB6F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:05:d8:8f:5a:f1:81:5b:9a:12:41:25:fc:f2: 00:3a:c7:a5:c9:3d:4f:96:df:5b:ad:79:f0:ca:00: f9:5f:5d:9b:2b:7e:ad:82:33:25:72:a6:1b:88:24: ec:f2:29:95:cd:83:df:ed:85:c5:ff:b1:38:f8:97: 26:75:ba:ff:72:ce:c8:e8:a3:d4:b4:3c:11:0d:9c: ea:53:d1:9d:5b:47:b7:d4:e8:33:7e:fe:1e:fa:f1: ab:f4:a1:87:11:bd:88:54:87:5f:9b:48:17:73:40: 55:45:d2:73:2b:7a:5a:0a:f6:39:00:64:65:b6:8d: b9:1b:68:b9:3c:c5:40:62:51:20:3e:ed:a7:4a:eb: e9:50:a3:fd:70:ab:b2:85:e0:cf:8d:23:6b:f3:04: 47:1c:91:e8:aa:aa:c7:9f:83:25:52:58:e4:a1:c3: c8:d7:e4:1d:e8:f3:35:6b:d0:45:8d:c7:80:21:48: a4:a7:15:40:54:c7:c2:0c:45:61:84:a9:68:85:61: e9:66:8c:8a:33:02:94:df:48:c2:22:2d:82:de:d5: 2c:90:4e:18:69:b7:9d:8d:9d:10:dc:be:e2:80:05: fd:9d:35:53:0a:70:9d:96:d1:d9:41:d4:19:2d:a6: ad:e6:8b:fa:ef:07:97:b7:3c:1e:c7:49:42:ea:c4: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:9D:1A:B5:3F:AE:2B:46:15:75:77:79:87:FB:5B:DA:59:3B:B6:F7 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PSYDEA/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PSYDEA/0/169D1AB53FAE2B461575777987FB5BDA593BB6F7.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.224.0/23 IPv6: 2404:9e40::/32 Signature Algorithm: sha256WithRSAEncryption 8b:ca:40:68:ce:ad:c3:72:64:47:be:cf:56:e5:a1:e1:f9:4a: 26:fb:2e:c7:d6:0d:2d:cf:4c:33:a5:3f:7c:3d:4e:1d:f7:2a: 65:7a:b0:05:b4:cc:d4:a5:1a:a7:2d:d3:46:d9:af:e2:e2:30: 57:ef:c9:a7:86:dc:b6:7e:7b:85:bb:82:94:f2:f5:0c:02:95: ea:e6:88:d3:a4:e2:00:aa:b7:7f:a9:2b:c0:0e:88:77:5c:44: a5:c3:2b:b0:6b:7c:be:ea:f2:b2:41:8a:e0:b3:a4:fe:3f:aa: 8e:33:9d:6a:df:b6:dc:d7:f8:50:a4:06:53:70:20:35:22:b7: 01:7c:b0:63:b2:5b:89:f8:d5:a5:d7:0e:67:e1:91:b2:82:9f: d8:8c:7c:4d:2d:81:6e:5a:c0:d7:b7:f4:ff:1a:f8:ac:02:5c: d1:d9:12:97:9f:da:4a:c8:57:1b:cb:e0:8f:8a:06:ab:15:d5: 56:51:75:fa:e6:df:58:53:e6:d0:ec:b1:e3:d3:9f:64:0c:00: 5d:2e:44:10:4d:05:2e:31:03:7c:9e:4c:5b:5d:56:a3:1b:5a: e3:aa:18:84:a3:37:95:51:a5:33:b2:c2:cd:50:81:9e:a8:5e: 4c:42:d4:ef:43:52:d8:b1:17:9f:4f:31:fd:46:bd:27:e0:f6: ec:7f:61:43 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIUG1drC3FGR7ZVyJQjNOZz2W9lsNgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTYwMloX DTI3MDUxMDE2MDEwMlowMzExMC8GA1UEAxMoMTY5RDFBQjUzRkFFMkI0NjE1NzU3 Nzc5ODdGQjVCREE1OTNCQjZGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwF2I9a8YFbmhJBJfzyADrHpck9T5bfW6158MoA+V9dmyt+rYIzJXKmG4gk 7PIplc2D3+2Fxf+xOPiXJnW6/3LOyOij1LQ8EQ2c6lPRnVtHt9ToM37+Hvrxq/Sh hxG9iFSHX5tIF3NAVUXScyt6Wgr2OQBkZbaNuRtouTzFQGJRID7tp0rr6VCj/XCr soXgz40ja/MERxyR6Kqqx5+DJVJY5KHDyNfkHejzNWvQRY3HgCFIpKcVQFTHwgxF YYSpaIVh6WaMijMClN9IwiItgt7VLJBOGGm3nY2dENy+4oAF/Z01UwpwnZbR2UHU GS2mreaL+u8Hl7c8HsdJQurERt0CAwEAAaOCAnUwggJxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBadGrU/ritGFXV3eYf7W9pZO7b3MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QU1lERUEvMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFNZREVB LzAvMTY5RDFBQjUzRkFFMkI0NjE1NzU3Nzc5ODdGQjVCREE1OTNCQjZGNy5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAWeI4DANBAIAAjAHAwUAJASeQDANBgkqhkiG9w0BAQsF AAOCAQEAi8pAaM6tw3JkR77PVuWh4flKJvsux9YNLc9MM6U/fD1OHfcqZXqwBbTM 1KUapy3TRtmv4uIwV+/Jp4bctn57hbuClPL1DAKV6uaI06TiAKq3f6krwA6Id1xE pcMrsGt8vuryskGK4LOk/j+qjjOdat+23Nf4UKQGU3AgNSK3AXywY7JbifjVpdcO Z+GRsoKf2Ix8TS2BblrA17f0/xr4rAJc0dkSl5/aSshXG8vgj4oGqxXVVlF1+ubf WFPm0Oyx49OfZAwAXS5EEE0FLjEDfJ5MW11Woxta46oYhKM3lVGlM7LCzVCBnqhe TELU70NS2LEXn08x/Ua9J+D27H9hQw== -----END CERTIFICATE-----Generated at Tue May 12 22:33:09 2026 by rpki-client