$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer File: 19CD307B99E39576032EDA2043070E1F0D7E34FC.cer (raw, json) Hash identifier: N5Mw0J2ytAap2z2iUctAomX7G/DQT4Jh3uB8oVHxdv0= Subject key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 4A4876D9F53EBB75630BAF1C155F83C18A430B0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft caRepository: rsync://rpkica.twnic.tw/rpki/LEEMON/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:46 +0000 Certificate not after: Mon 10 May 2027 15:52:46 +0000 Subordinate resources: AS: 9915 IP: 103.67.160.0/23 IP: 2400:d4a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:48:76:d9:f5:3e:bb:75:63:0b:af:1c:15:5f:83:c1:8a:43:0b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:46 2026 GMT Not After : May 10 15:52:46 2027 GMT Subject: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:25:bb:7d:c3:98:c2:f3:8a:85:00:53:ff:43: 50:ad:6a:4b:08:00:f1:4b:11:a5:29:3a:6c:b8:97: 3f:5f:06:85:6f:19:67:1b:df:a5:f8:f6:7f:f5:c0: af:3e:f7:4b:89:36:6f:9f:7e:3e:36:81:f6:f0:f1: 68:8c:e4:47:5c:a3:29:b2:69:75:0f:28:c9:21:25: cb:70:dc:4f:52:c6:5d:94:e8:85:a4:36:40:52:60: f2:a4:2a:06:88:e5:bb:e9:72:5a:3d:d2:ef:ab:0b: 8d:12:70:a4:4c:de:68:cb:5e:b3:7e:5e:6c:20:62: 2a:7c:7e:0f:fb:ed:f3:35:19:2e:06:f2:36:31:e5: 2a:da:6c:83:99:ce:c3:fa:2d:27:d7:12:ab:9f:cd: e4:c9:3b:5a:2d:65:94:12:28:d3:10:87:db:ce:76: 35:b2:6b:c9:b8:59:b9:4f:d1:2e:e4:f0:2c:f0:7c: 0d:d0:ff:81:f4:da:d6:d8:12:cf:e6:b3:85:f2:be: e8:34:b2:39:5a:77:81:3b:91:d8:bc:7a:fb:7a:3b: 72:ce:b2:5f:3a:87:30:de:df:94:bd:55:8b:a2:67: 5b:64:61:1d:69:0a:5a:22:b9:0a:91:b9:c7:7f:0c: 57:15:3d:38:62:eb:75:17:63:be:24:18:08:7a:e5: 01:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.160.0/23 IPv6: 2400:d4a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9915 Signature Algorithm: sha256WithRSAEncryption 48:f4:ad:a4:53:a3:44:63:d9:fa:95:35:95:c6:84:b0:a7:9c: 96:a5:19:30:89:78:6e:27:ef:e8:26:51:b7:5a:fe:e6:c1:ca: 92:8e:d5:5c:3b:85:ae:68:18:0a:bb:85:51:3d:6e:37:af:d0: 92:c7:b2:82:69:3c:40:45:45:ba:55:c4:2c:53:c3:7d:c1:a1: 6a:51:19:f1:10:ff:a5:6e:10:3f:37:7b:d1:cf:7e:46:89:4a: 10:94:8d:b8:45:40:c8:98:53:9a:a9:42:c5:e0:10:bc:4e:74: 40:4e:23:a4:05:e6:0f:62:73:09:34:cf:d3:b3:67:56:71:ed: 71:03:b5:d9:61:bb:37:c5:3c:d5:d3:7e:8f:b7:a2:19:9c:0a: 0e:33:9f:18:c8:45:af:7a:e9:47:ed:18:74:cb:ec:c4:07:a7: dc:b0:0b:fc:87:4d:61:ca:a6:cc:6c:8b:4c:91:93:39:26:5c: b8:d6:48:0d:50:63:9d:7f:52:52:6e:72:2b:a8:d9:4e:53:59: cf:ab:54:4b:d5:99:c6:e9:cd:1d:ed:fc:0d:45:02:90:3a:85: 96:04:85:13:22:2e:52:c8:58:fb:80:b1:b6:0c:ed:83:eb:63: 61:04:fc:77:37:90:47:45:a7:f9:0d:6c:18:35:16:2f:07:bc: 3f:52:6f:7b -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUSkh22fU+u3VjC68cFV+DwYpDCwowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDc0NloX DTI3MDUxMDE1NTI0NlowMzExMC8GA1UEAxMoMTlDRDMwN0I5OUUzOTU3NjAzMkVE QTIwNDMwNzBFMUYwRDdFMzRGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANolu33DmMLzioUAU/9DUK1qSwgA8UsRpSk6bLiXP18GhW8ZZxvfpfj2f/XA rz73S4k2b59+PjaB9vDxaIzkR1yjKbJpdQ8oySEly3DcT1LGXZTohaQ2QFJg8qQq Bojlu+lyWj3S76sLjRJwpEzeaMtes35ebCBiKnx+D/vt8zUZLgbyNjHlKtpsg5nO w/otJ9cSq5/N5Mk7Wi1llBIo0xCH2852NbJrybhZuU/RLuTwLPB8DdD/gfTa1tgS z+azhfK+6DSyOVp3gTuR2Lx6+3o7cs6yXzqHMN7flL1Vi6JnW2RhHWkKWiK5CpG5 x38MVxU9OGLrdRdjviQYCHrlAZcCAwEAAaOCApAwggKMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBnNMHuZ45V2Ay7aIEMHDh8NfjT8MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MRUVNT04vMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9O LzAvMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAWdDoDANBAIAAjAHAwUAJADUoDAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgImuzANBgkqhkiG9w0BAQsFAAOCAQEASPStpFOjRGPZ+pU1lcaE sKeclqUZMIl4bifv6CZRt1r+5sHKko7VXDuFrmgYCruFUT1uN6/Qkseygmk8QEVF ulXELFPDfcGhalEZ8RD/pW4QPzd70c9+RolKEJSNuEVAyJhTmqlCxeAQvE50QE4j pAXmD2JzCTTP07NnVnHtcQO12WG7N8U81dN+j7eiGZwKDjOfGMhFr3rpR+0YdMvs xAen3LAL/IdNYcqmzGyLTJGTOSZcuNZIDVBjnX9SUm5yK6jZTlNZz6tUS9WZxunN He38DUUCkDqFlgSFEyIuUshY+4Cxtgztg+tjYQT8dzeQR0Wn+Q1sGDUWLwe8P1Jv ew== -----END CERTIFICATE-----Generated at Tue May 12 22:32:37 2026 by rpki-client