$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer File: 30886A5C2BBD980DCAD17065B483FDADE1588115.cer (raw, json) Hash identifier: wJsy/du3iZn0lV9R9r5zbat0g1ZDZwKfjkVzAlUUmKY= Subject key identifier: 30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 02EA111520DB1F1DC826FA559000781C902E4A97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft caRepository: rsync://rpkica.twnic.tw/rpki/CCP1138470/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:43:40 +0000 Certificate not after: Mon 10 May 2027 15:48:40 +0000 Subordinate resources: IP: 103.180.14.0/23 IP: 2400:5060::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ea:11:15:20:db:1f:1d:c8:26:fa:55:90:00:78:1c:90:2e:4a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:43:40 2026 GMT Not After : May 10 15:48:40 2027 GMT Subject: CN=30886A5C2BBD980DCAD17065B483FDADE1588115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:55:98:db:6d:a6:8b:71:d8:ae:1d:a6:96: cc:1c:f7:1b:b5:93:9b:06:12:50:b8:cf:d0:26:bc: 1d:91:65:7d:55:25:f7:29:e7:69:0d:45:47:49:ee: 17:7e:f2:2a:5f:46:0d:d2:d9:38:3e:a2:d9:59:74: 45:15:ea:00:e2:f9:52:04:1b:2b:8c:86:2d:39:0a: 4e:8d:24:02:8e:54:08:75:cf:f4:e5:ec:5c:0a:8c: d4:50:b3:4b:6a:db:19:88:9f:ef:cb:b3:5a:be:8e: e2:d3:7e:55:ad:54:65:dd:a0:ab:be:e7:73:da:b7: 8d:43:dc:6e:bb:36:3e:a1:10:ad:7c:99:04:66:ed: d3:22:e3:6b:aa:a3:e9:6a:b4:df:9c:d5:23:c3:be: 88:9a:63:0f:93:ea:3b:23:41:44:72:52:21:07:ef: 38:2e:ec:09:a0:65:cd:b6:8b:76:6b:e5:2a:79:c4: 95:82:15:8f:07:f8:eb:6c:bd:29:cc:dc:6e:6b:f3: ee:cf:99:a8:5d:ba:80:c1:ec:62:de:7c:00:6c:e0: 46:29:a1:7e:cd:3d:1b:a0:21:92:3e:d9:ff:53:98: c3:78:67:3a:38:91:0c:7c:34:2b:3a:b1:a0:fb:d1: 1a:b3:bf:b4:27:89:0e:7a:f6:3c:17:39:fe:95:e0: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.14.0/23 IPv6: 2400:5060::/32 Signature Algorithm: sha256WithRSAEncryption 90:8d:66:c0:df:97:9c:c2:56:ab:82:c9:fd:7d:db:18:43:07: ba:21:2d:6c:c8:eb:76:ee:43:40:0d:8b:39:0f:ea:35:bd:23: 87:a1:5c:17:7a:e4:b6:0e:c8:a9:82:f2:e0:d1:5e:ca:46:68: 8c:9c:36:2c:f8:98:ea:16:65:99:7e:36:2a:38:c8:52:d3:ea: 53:51:32:8d:02:f4:01:4b:7b:ed:ba:65:ea:17:4d:cf:16:1e: ba:01:0f:67:77:cb:af:74:5b:7a:10:9b:29:57:13:27:60:42: d3:13:17:21:d8:0c:88:01:4d:d7:26:97:0d:f7:e1:8d:8e:0f: 24:74:d6:f1:4f:e5:ac:33:cf:c7:51:f5:00:b8:f7:f7:e3:cf: c7:49:ab:2d:35:9b:2d:e7:6f:0f:ca:c7:96:f8:ca:44:5d:b4: 98:0f:93:a4:d9:4f:bc:3f:22:4a:19:9a:d0:15:65:19:3e:8d: 14:c3:82:34:9a:95:3b:b6:6c:10:fb:fc:c3:f9:63:e3:8a:b0: 5c:79:33:f3:f2:ab:af:43:c9:c6:8b:7d:78:86:fd:ce:3d:49: 6c:f5:f7:63:35:83:bc:13:f9:06:98:9e:1e:6d:49:8c:57:16: a1:af:8f:d3:a3:26:70:2c:16:cb:52:83:f9:0e:49:81:5c:ae: 5c:8e:2e:94 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUAuoRFSDbHx3IJvpVkAB4HJAuSpcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDM0MFoX DTI3MDUxMDE1NDg0MFowMzExMC8GA1UEAxMoMzA4ODZBNUMyQkJEOTgwRENBRDE3 MDY1QjQ4M0ZEQURFMTU4ODExNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhxVZjbbaaLcdiuHaaWzBz3G7WTmwYSULjP0Ca8HZFlfVUl9ynnaQ1FR0nu F37yKl9GDdLZOD6i2Vl0RRXqAOL5UgQbK4yGLTkKTo0kAo5UCHXP9OXsXAqM1FCz S2rbGYif78uzWr6O4tN+Va1UZd2gq77nc9q3jUPcbrs2PqEQrXyZBGbt0yLja6qj 6Wq035zVI8O+iJpjD5PqOyNBRHJSIQfvOC7sCaBlzbaLdmvlKnnElYIVjwf462y9 Kczcbmvz7s+ZqF26gMHsYt58AGzgRimhfs09G6Ahkj7Z/1OYw3hnOjiRDHw0Kzqx oPvRGrO/tCeJDnr2PBc5/pXgQxkCAwEAAaOCAn0wggJ5MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDCIalwrvZgNytFwZbSD/a3hWIEVMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DQ1AxMTM4NDcw LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ND UDExMzg0NzAvMC8zMDg4NkE1QzJCQkQ5ODBEQ0FEMTcwNjVCNDgzRkRBREUxNTg4 MTE1Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ7QOMA0EAgACMAcDBQAkAFBgMA0GCSqG SIb3DQEBCwUAA4IBAQCQjWbA35ecwlargsn9fdsYQwe6IS1syOt27kNADYs5D+o1 vSOHoVwXeuS2DsipgvLg0V7KRmiMnDYs+JjqFmWZfjYqOMhS0+pTUTKNAvQBS3vt umXqF03PFh66AQ9nd8uvdFt6EJspVxMnYELTExch2AyIAU3XJpcN9+GNjg8kdNbx T+WsM8/HUfUAuPf348/HSastNZst528PyseW+MpEXbSYD5Ok2U+8PyJKGZrQFWUZ Po0Uw4I0mpU7tmwQ+/zD+WPjirBceTPz8quvQ8nGi314hv3OPUls9fdjNYO8E/kG mJ4ebUmMVxahr4/ToyZwLBbLUoP5DkmBXK5cji6U -----END CERTIFICATE-----Generated at Tue May 12 22:33:12 2026 by rpki-client