$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/2ACE8EBB5D802619255E989E55D535E4E07C90CB.cer File: 2ACE8EBB5D802619255E989E55D535E4E07C90CB.cer (raw, json) Hash identifier: d97wnSCo/yV1Zf3X1/5luw9Bof7nrfl1uUoKD7oVDdQ= Subject key identifier: 2A:CE:8E:BB:5D:80:26:19:25:5E:98:9E:55:D5:35:E4:E0:7C:90:CB Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 79EE8D8EDB44C5F86180B983366E3DA6814778E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft caRepository: rsync://rpkica.twnic.tw/rpki/KKGAME/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:30 +0000 Certificate not after: Mon 10 May 2027 15:52:30 +0000 Subordinate resources: IP: 2402:30a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ee:8d:8e:db:44:c5:f8:61:80:b9:83:36:6e:3d:a6:81:47:78:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:30 2026 GMT Not After : May 10 15:52:30 2027 GMT Subject: CN=2ACE8EBB5D802619255E989E55D535E4E07C90CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:de:3e:25:a0:a1:e6:33:71:fe:de:21:c1: d8:a9:33:03:84:42:70:09:f0:fb:99:f6:d3:92:80: df:af:79:76:17:9e:4b:c8:5f:d9:0e:45:4a:78:ab: cb:a2:8c:f1:50:82:3d:98:a5:88:c2:6f:a8:01:29: c5:55:08:65:ab:61:9d:85:c5:5f:f4:2e:6a:e5:e9: c8:ac:69:2c:47:bf:fb:be:d2:33:9e:e6:ac:39:dd: 4f:23:fa:41:71:63:ae:ac:91:9c:d8:de:24:64:d2: bf:72:c1:18:92:7a:90:2f:0a:cc:48:03:c4:ec:fb: ef:74:3c:b4:18:75:7c:c9:61:54:c9:ed:5c:b7:56: 5c:50:24:48:a1:fd:a9:b7:69:ab:72:86:e6:1a:5f: 01:ce:c7:6d:70:a1:f0:e4:04:7b:d4:e1:cd:81:d6: db:bc:2b:ce:ca:01:e8:18:6a:2a:a1:51:c4:8f:96: 60:50:8a:78:6e:49:de:d8:96:28:aa:e2:b6:18:f7: 85:ef:63:c5:be:63:32:be:3c:89:b3:02:f5:38:e1: ea:ca:f4:49:82:f5:7f:55:13:62:a8:95:f9:90:89: 82:de:55:dc:0c:d4:d0:eb:68:c1:3f:2b:09:c6:a5: 6a:be:8d:25:0e:38:48:76:f7:34:aa:1e:ad:57:32: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:CE:8E:BB:5D:80:26:19:25:5E:98:9E:55:D5:35:E4:E0:7C:90:CB X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/KKGAME/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:30a0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:50:d7:5e:4e:35:07:fb:58:3f:a2:f0:17:9e:77:e8:5b:c7: 36:76:74:52:ed:10:f5:4f:66:e2:02:fc:e3:1c:5b:37:98:ce: 2c:4f:3a:25:c0:da:40:90:20:80:d5:04:d7:c4:5a:04:7b:4f: c4:72:b9:8a:1b:5e:06:a5:00:17:b6:b6:3f:94:b8:80:49:ad: 25:1b:07:69:06:8a:9a:8e:42:23:99:22:cc:c4:bc:5f:5e:dd: 0f:29:25:25:0c:54:45:eb:e8:ab:23:4e:16:93:7b:9b:2e:9e: 2f:1c:e7:5f:ac:9f:ca:13:8f:1f:f5:7d:9d:c4:94:2d:22:ef: f3:a7:59:80:79:63:24:46:d4:15:39:df:ba:22:f3:53:11:19: 5c:1e:df:3e:36:47:c1:f7:9c:ad:5b:56:b1:ba:30:2c:35:cd: f5:62:44:2f:39:fb:ed:a8:7b:6b:2e:ab:00:2b:b6:58:46:0d: 01:58:2e:06:19:f1:72:3b:1e:d2:70:d4:32:2b:39:98:cb:43: b9:51:b1:e7:41:62:3c:d5:cc:01:5a:e5:34:31:10:46:66:d4: 84:09:9c:42:41:a9:28:ed:86:94:d0:0d:c0:1b:31:7b:2c:5d: 92:51:7f:f7:fc:f2:c1:fc:6c:fc:93:d1:5b:57:a7:3b:f7:ba: 16:c6:97:87 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgIUee6NjttExfhhgLmDNm49poFHeOYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDczMFoX DTI3MDUxMDE1NTIzMFowMzExMC8GA1UEAxMoMkFDRThFQkI1RDgwMjYxOTI1NUU5 ODlFNTVENTM1RTRFMDdDOTBDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUY3j4loKHmM3H+3iHB2KkzA4RCcAnw+5n205KA3695dheeS8hf2Q5FSnir y6KM8VCCPZiliMJvqAEpxVUIZathnYXFX/QuauXpyKxpLEe/+77SM57mrDndTyP6 QXFjrqyRnNjeJGTSv3LBGJJ6kC8KzEgDxOz773Q8tBh1fMlhVMntXLdWXFAkSKH9 qbdpq3KG5hpfAc7HbXCh8OQEe9ThzYHW27wrzsoB6BhqKqFRxI+WYFCKeG5J3tiW KKrithj3he9jxb5jMr48ibMC9Tjh6sr0SYL1f1UTYqiV+ZCJgt5V3AzU0OtowT8r Ccalar6NJQ44SHb3NKoerVcytT8CAwEAAaOCAmcwggJjMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCrOjrtdgCYZJV6YnlXVNeTgfJDLMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9LS0dBTUUvMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tHQU1F LzAvMkFDRThFQkI1RDgwMjYxOTI1NUU5ODlFNTVENTM1RTRFMDdDOTBDQi5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACQCMKAwDQYJKoZIhvcNAQELBQADggEBAA5Q115ONQf7 WD+i8Beed+hbxzZ2dFLtEPVPZuIC/OMcWzeYzixPOiXA2kCQIIDVBNfEWgR7T8Ry uYobXgalABe2tj+UuIBJrSUbB2kGipqOQiOZIszEvF9e3Q8pJSUMVEXr6KsjThaT e5suni8c51+sn8oTjx/1fZ3ElC0i7/OnWYB5YyRG1BU537oi81MRGVwe3z42R8H3 nK1bVrG6MCw1zfViRC85++2oe2suqwArtlhGDQFYLgYZ8XI7HtJw1DIrOZjLQ7lR sedBYjzVzAFa5TQxEEZm1IQJnEJBqSjthpTQDcAbMXssXZJRf/f88sH8bPyT0VtX pzv3uhbGl4c= -----END CERTIFICATE-----Generated at Wed May 13 02:13:34 2026 by rpki-client