$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer File: 1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer (raw, json) Hash identifier: J8HnpXsm4omN2TVeZNL7Cq9z+qxnPMKSXmHzENNcncY= Subject key identifier: 1F:8D:4C:E1:1E:68:D7:B3:43:F4:92:77:0E:89:7C:AD:C2:15:7E:7F Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 131F7E31055BE4556900F370F7542E556B409855 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft caRepository: rsync://rpkica.twnic.tw/rpki/SIANGYU/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:56:41 +0000 Certificate not after: Mon 10 May 2027 16:01:41 +0000 Subordinate resources: AS: 131669 IP: 103.175.254.0/23 IP: 2400:1e20::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1f:7e:31:05:5b:e4:55:69:00:f3:70:f7:54:2e:55:6b:40:98:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:56:41 2026 GMT Not After : May 10 16:01:41 2027 GMT Subject: CN=1F8D4CE11E68D7B343F492770E897CADC2157E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:7b:cf:4a:a5:be:96:41:82:40:1e:47:40: 71:7f:0f:44:8c:31:b3:85:03:18:4f:8f:2b:18:fe: 5a:08:51:b1:2f:b6:15:0c:59:fe:10:df:26:fc:69: 5f:7e:9a:38:71:19:d6:6d:30:ba:45:e7:96:65:3e: 3c:a0:8b:21:8a:55:ad:67:d0:03:56:ec:d6:9e:62: 70:f6:95:e0:8e:95:3e:58:27:4c:0d:40:e0:ce:e8: 3e:39:03:76:c2:66:57:8b:d9:de:d7:4b:57:34:96: d5:6a:b3:39:b8:98:83:0b:a7:a1:d1:ef:93:aa:e4: 19:19:22:61:b3:17:47:94:b3:81:5a:b6:36:79:2d: 6a:20:b1:ac:81:c4:ed:2b:dc:73:47:78:16:91:7e: 79:c9:df:d3:12:f6:f6:81:e2:a0:7c:5c:34:c6:25: f9:c5:a6:a8:dd:2d:69:1d:92:5d:f3:a8:8e:56:3c: 91:73:d0:58:c3:25:8c:5c:3c:b2:51:08:1b:54:44: c8:42:58:94:22:2d:a4:03:3f:5d:27:72:83:e2:f8: ad:4b:ff:fb:fb:4a:9c:53:b4:e5:ac:4d:dd:f8:a8: db:ed:4f:3e:5e:b1:f7:1b:64:82:58:d6:b4:1f:09: bf:d5:7f:98:34:c8:7a:72:24:83:bc:f5:23:fe:19: 19:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:8D:4C:E1:1E:68:D7:B3:43:F4:92:77:0E:89:7C:AD:C2:15:7E:7F X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SIANGYU/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.254.0/23 IPv6: 2400:1e20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131669 Signature Algorithm: sha256WithRSAEncryption b4:b0:59:dd:6a:c7:36:c4:0d:6b:21:8b:0a:68:7a:b2:07:d7: 56:48:e8:69:28:b4:8b:44:8d:a6:fb:8d:30:5e:73:65:87:00: 3a:17:0e:c3:f0:e4:f9:ef:0c:47:0d:b4:fc:6a:e4:8a:0a:d2: 1b:37:5d:33:9a:9d:ce:ba:4d:c0:9e:e9:da:38:c3:67:66:3b: 4f:ee:da:5a:f0:5b:19:01:d7:d5:08:25:5c:e7:da:7e:0d:e9: 79:f0:c0:9f:eb:b9:5b:30:70:92:42:d8:a5:0b:09:d1:8b:51: 0b:ff:5f:b7:f3:eb:77:03:83:b7:84:96:42:62:43:80:47:a8: e4:63:fe:9d:c2:72:91:6f:70:c0:54:ab:17:5e:bf:5a:b0:82: da:aa:c9:95:b2:fe:77:ee:38:46:ee:f1:86:5c:d4:e2:79:28: 78:78:35:94:65:48:63:d9:81:21:24:a1:be:4c:d6:0e:40:42: 74:05:ac:75:1d:8f:12:2b:87:99:93:fa:02:1e:b6:e9:bd:af: 5b:38:e8:83:51:2b:57:40:26:67:a0:67:96:fa:b8:4d:5e:6a: 54:42:5d:d4:d2:80:17:b8:67:ce:e5:85:2c:a1:d4:ca:f5:be: e9:d8:a7:e6:4d:56:22:9b:7e:1c:ea:94:51:e2:d9:23:9b:a5: 56:4a:9d:11 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIUEx9+MQVb5FVpAPNw91QuVWtAmFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTY0MVoX DTI3MDUxMDE2MDE0MVowMzExMC8GA1UEAxMoMUY4RDRDRTExRTY4RDdCMzQzRjQ5 Mjc3MEU4OTdDQURDMjE1N0U3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+ze89Kpb6WQYJAHkdAcX8PRIwxs4UDGE+PKxj+WghRsS+2FQxZ/hDfJvxp X36aOHEZ1m0wukXnlmU+PKCLIYpVrWfQA1bs1p5icPaV4I6VPlgnTA1A4M7oPjkD dsJmV4vZ3tdLVzSW1WqzObiYgwunodHvk6rkGRkiYbMXR5SzgVq2NnktaiCxrIHE 7Svcc0d4FpF+ecnf0xL29oHioHxcNMYl+cWmqN0taR2SXfOojlY8kXPQWMMljFw8 slEIG1REyEJYlCItpAM/XSdyg+L4rUv/+/tKnFO05axN3fio2+1PPl6x9xtkgljW tB8Jv9V/mDTIenIkg7z1I/4ZGRsCAwEAAaOCApMwggKPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB+NTOEeaNezQ/SSdw6JfK3CFX5/MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUFOR1lVLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NJQU5H WVUvMC8xRjhENENFMTFFNjhEN0IzNDNGNDkyNzcwRTg5N0NBREMyMTU3RTdGLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ6/+MA0EAgACMAcDBQAkAB4gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwICVTANBgkqhkiG9w0BAQsFAAOCAQEAtLBZ3WrHNsQNayGL Cmh6sgfXVkjoaSi0i0SNpvuNMF5zZYcAOhcOw/Dk+e8MRw20/GrkigrSGzddM5qd zrpNwJ7p2jjDZ2Y7T+7aWvBbGQHX1QglXOfafg3pefDAn+u5WzBwkkLYpQsJ0YtR C/9ft/PrdwODt4SWQmJDgEeo5GP+ncJykW9wwFSrF16/WrCC2qrJlbL+d+44Ru7x hlzU4nkoeHg1lGVIY9mBISShvkzWDkBCdAWsdR2PEiuHmZP6Ah626b2vWzjog1Er V0AmZ6Bnlvq4TV5qVEJd1NKAF7hnzuWFLKHUyvW+6din5k1WIpt+HOqUUeLZI5ul VkqdEQ== -----END CERTIFICATE-----Generated at Tue May 12 22:16:30 2026 by rpki-client