$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer File: 28E8C034945DF0971A657E251911BBA0B2819562.cer (raw, json) Hash identifier: 8U/oMg8YZ5f92v4RKuS7aZAzIlimGay1ZbJacOjMb64= Subject key identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 4489760AAB86EE38C57CD968BC09B8BEE12A25BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft caRepository: rsync://rpkica.twnic.tw/rpki/FANTASY/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:45:38 +0000 Certificate not after: Mon 10 May 2027 15:50:38 +0000 Subordinate resources: AS: 131671 IP: 103.146.212.0/23 IP: 2405:a0c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:89:76:0a:ab:86:ee:38:c5:7c:d9:68:bc:09:b8:be:e1:2a:25:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:45:38 2026 GMT Not After : May 10 15:50:38 2027 GMT Subject: CN=28E8C034945DF0971A657E251911BBA0B2819562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b7:70:d6:09:84:06:7a:c0:99:a5:3e:b1:36: 51:f8:ee:bc:d5:56:2c:19:89:39:2a:1b:f0:43:5d: 96:62:6c:15:32:3a:a5:b9:2c:77:33:73:92:77:eb: 18:79:bd:9c:6b:b0:5d:15:31:ce:9a:fd:36:fb:8c: 2d:36:1a:a9:dc:24:07:d4:d3:51:0f:f8:51:85:ab: 9f:09:ee:18:67:ef:cc:ba:39:bf:a4:83:0b:2a:f2: 83:de:fd:c0:7e:15:ce:00:54:e4:76:52:be:f1:5a: c3:41:4d:bb:a2:98:9b:fe:4c:b0:66:19:b2:16:f7: 0f:dd:5d:e1:1b:72:ac:55:38:a8:45:87:d9:b2:a1: 28:c2:3b:f7:25:94:b2:bb:71:cf:e6:4c:92:f3:be: 15:76:a1:73:dd:ea:8e:2b:af:ed:63:f5:7c:70:3b: de:ad:a9:86:93:b3:52:91:b7:d5:84:26:8f:a7:11: f0:c0:b6:59:64:aa:27:7c:cf:4e:ca:ef:f1:c7:a6: 6d:96:f4:cd:4d:89:e2:84:40:99:72:69:1d:fa:0c: 2f:fa:69:89:dc:e3:f6:4e:b4:21:95:11:36:27:3c: d8:af:83:61:17:88:f7:66:d6:dd:ea:23:6e:38:9f: 21:24:cc:94:9e:e4:44:a0:1a:26:cf:00:d8:2e:04: 12:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.212.0/23 IPv6: 2405:a0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131671 Signature Algorithm: sha256WithRSAEncryption 42:01:8d:0a:c3:21:2b:ff:7c:ab:8f:7b:17:13:0e:d4:9a:6d: 84:cc:35:60:2a:41:0c:d3:bc:d7:0a:5d:9b:3f:ab:29:b5:81: 04:d9:00:25:a6:94:78:8b:3a:ae:fd:58:50:8d:4d:e2:26:00: 8f:22:21:30:18:43:51:74:36:31:5d:8b:16:7e:19:64:52:95: 92:14:a3:b2:2c:e2:66:e1:83:f2:98:06:a8:91:75:74:a3:3a: bf:8c:e1:76:8b:6c:09:75:71:88:f8:08:1d:43:da:3f:66:2c: 1a:89:c7:b8:ab:63:1d:7a:4b:d2:44:2e:86:0c:e6:97:76:4f: 47:05:f3:45:6a:7a:db:ff:23:1f:e9:60:22:6d:e7:e7:d4:43: 88:6b:5f:70:13:98:44:84:49:15:f3:90:a4:b0:5b:b5:5f:60: 50:d6:25:51:cc:4f:9c:93:60:54:6c:25:f2:52:a2:38:a5:3f: 76:60:09:91:b2:d3:19:92:33:8b:5a:80:db:86:67:c9:d8:af: 52:cf:4e:e6:07:35:9b:c3:dd:44:36:d6:f5:39:1f:60:7e:27: 16:da:43:13:77:29:4a:86:9a:a3:cb:42:98:ab:ba:d6:fb:53: 67:ba:cc:2a:d7:b0:f0:e7:bd:ae:c2:28:e9:81:f2:70:b4:4b: 8e:a0:6f:60 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIURIl2CquG7jjFfNlovAm4vuEqJb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDUzOFoX DTI3MDUxMDE1NTAzOFowMzExMC8GA1UEAxMoMjhFOEMwMzQ5NDVERjA5NzFBNjU3 RTI1MTkxMUJCQTBCMjgxOTU2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANK3cNYJhAZ6wJmlPrE2UfjuvNVWLBmJOSob8ENdlmJsFTI6pbksdzNzknfr GHm9nGuwXRUxzpr9NvuMLTYaqdwkB9TTUQ/4UYWrnwnuGGfvzLo5v6SDCyryg979 wH4VzgBU5HZSvvFaw0FNu6KYm/5MsGYZshb3D91d4RtyrFU4qEWH2bKhKMI79yWU srtxz+ZMkvO+FXahc93qjiuv7WP1fHA73q2phpOzUpG31YQmj6cR8MC2WWSqJ3zP Tsrv8cembZb0zU2J4oRAmXJpHfoML/ppidzj9k60IZURNic82K+DYReI92bW3eoj bjifISTMlJ7kRKAaJs8A2C4EEscCAwEAAaOCApMwggKPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCjowDSUXfCXGmV+JRkRu6CygZViMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9GQU5UQVNZLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ZBTlRB U1kvMC8yOEU4QzAzNDk0NURGMDk3MUE2NTdFMjUxOTExQkJBMEIyODE5NTYyLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ5LUMA0EAgACMAcDBQAkBaDAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwICVzANBgkqhkiG9w0BAQsFAAOCAQEAQgGNCsMhK/98q497 FxMO1JpthMw1YCpBDNO81wpdmz+rKbWBBNkAJaaUeIs6rv1YUI1N4iYAjyIhMBhD UXQ2MV2LFn4ZZFKVkhSjsiziZuGD8pgGqJF1dKM6v4zhdotsCXVxiPgIHUPaP2Ys GonHuKtjHXpL0kQuhgzml3ZPRwXzRWp62/8jH+lgIm3n59RDiGtfcBOYRIRJFfOQ pLBbtV9gUNYlUcxPnJNgVGwl8lKiOKU/dmAJkbLTGZIzi1qA24ZnydivUs9O5gc1 m8PdRDbW9TkfYH4nFtpDE3cpSoaao8tCmKu61vtTZ7rMKtew8Oe9rsIo6YHycLRL jqBvYA== -----END CERTIFICATE-----Generated at Tue May 12 22:15:50 2026 by rpki-client