$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/30E4756C3689C858A7C34D135FCAFB2BED1133D1.cer File: 30E4756C3689C858A7C34D135FCAFB2BED1133D1.cer (raw, json) Hash identifier: k2Mx8cNqhCvywCjJz2qAvXE2fB6nnZi1ry88vrMm26Y= Subject key identifier: 30:E4:75:6C:36:89:C8:58:A7:C3:4D:13:5F:CA:FB:2B:ED:11:33:D1 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 1373708B452535A42C0C5ED9D12D80498F91A206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/MYSENSE/0/30E4756C3689C858A7C34D135FCAFB2BED1133D1.mft caRepository: rsync://rpkica.twnic.tw/rpki/MYSENSE/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:51 +0000 Certificate not after: Mon 10 May 2027 15:53:51 +0000 Subordinate resources: IP: 103.159.120.0/23 IP: 2406:d0c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:73:70:8b:45:25:35:a4:2c:0c:5e:d9:d1:2d:80:49:8f:91:a2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:48:51 2026 GMT Not After : May 10 15:53:51 2027 GMT Subject: CN=30E4756C3689C858A7C34D135FCAFB2BED1133D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:16:73:02:1e:d9:f3:02:3f:d8:86:49:6c: 20:ce:1b:db:74:5e:26:6e:49:17:3b:1a:1a:63:f6: 2f:87:4f:24:df:6b:a5:5a:03:08:0c:dd:01:96:14: 8a:a5:1d:44:39:eb:05:a0:d4:8e:b9:ca:d2:39:08: 3d:fe:db:d4:df:6b:48:a0:15:19:64:0b:a4:53:21: 1a:f3:ce:cf:0e:75:80:ca:62:c5:97:df:8d:0c:46: c4:79:b2:26:58:3f:5d:93:9e:15:fc:14:93:61:a3: 22:3e:1f:66:a3:3c:5d:5b:83:b4:05:93:11:44:b2: 57:6d:14:3a:86:a6:c6:72:df:e1:2a:fd:8a:b9:14: 7f:af:ba:99:c1:45:79:7c:8c:30:fe:57:79:f7:d8: 5f:08:54:6a:30:93:0f:80:c5:d3:08:e2:91:08:7a: 1b:42:8e:a8:c0:b4:34:be:d5:25:31:82:c3:56:40: 54:f3:4a:cf:35:6b:5d:b2:47:10:d4:be:8c:39:70: 91:69:1a:41:4c:91:35:7e:90:8f:6f:1d:35:cd:83: 4c:3d:ea:f1:ca:cd:36:bd:55:7e:de:f5:20:50:ce: d7:0d:8b:ee:ce:34:b0:8c:dd:28:fe:9f:d2:e1:60: 59:56:06:60:1f:bd:41:02:7e:73:29:4e:39:fa:3d: 4a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:E4:75:6C:36:89:C8:58:A7:C3:4D:13:5F:CA:FB:2B:ED:11:33:D1 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MYSENSE/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MYSENSE/0/30E4756C3689C858A7C34D135FCAFB2BED1133D1.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.120.0/23 IPv6: 2406:d0c0::/32 Signature Algorithm: sha256WithRSAEncryption 29:bc:f0:7c:31:3c:3e:93:7f:99:e0:23:7e:c5:31:31:c8:b6: 71:a3:c2:52:4e:5f:1b:48:48:43:c6:c1:5b:71:1c:fb:22:29: 78:87:65:e0:ca:4e:b4:d8:e9:a6:94:8b:2e:33:3c:2d:45:37: bd:b6:b1:e1:a5:19:03:10:6f:b1:ab:45:8d:78:25:df:ad:f1: 90:91:df:ec:16:41:82:96:38:da:e7:13:55:d2:98:18:01:c4: 9c:d3:70:9d:a0:74:8e:a5:ea:27:e5:b1:d1:9e:ca:dd:35:cc: b7:6b:99:f3:92:fd:99:8a:be:c7:e5:f8:ed:88:b5:ad:90:fc: 3d:a8:c8:03:49:50:d8:0c:00:f4:59:da:3d:5b:6c:17:5c:2e: 73:b9:13:75:4c:56:1c:e9:49:4d:c2:3f:79:ee:fe:50:30:7b: 06:24:44:fd:30:05:77:b4:1b:4e:0c:d3:1c:1b:24:d0:b0:1d: c0:20:57:73:30:8a:33:d6:ca:78:ea:bc:fe:70:99:d7:2b:17: 38:40:a1:6e:14:ae:e2:56:de:ac:69:49:de:c7:23:b7:55:4f: d3:f6:d9:31:25:c3:fd:d5:37:e3:46:fd:e9:cd:56:2e:00:af: 89:c6:be:57:78:48:61:1e:8a:fa:33:a8:ca:d2:de:0c:1e:09: 9d:87:b1:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUE3Nwi0UlNaQsDF7Z0S2ASY+RogYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDg1MVoX DTI3MDUxMDE1NTM1MVowMzExMC8GA1UEAxMoMzBFNDc1NkMzNjg5Qzg1OEE3QzM0 RDEzNUZDQUZCMkJFRDExMzNEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKeaFnMCHtnzAj/YhklsIM4b23ReJm5JFzsaGmP2L4dPJN9rpVoDCAzdAZYU iqUdRDnrBaDUjrnK0jkIPf7b1N9rSKAVGWQLpFMhGvPOzw51gMpixZffjQxGxHmy Jlg/XZOeFfwUk2GjIj4fZqM8XVuDtAWTEUSyV20UOoamxnLf4Sr9irkUf6+6mcFF eXyMMP5XeffYXwhUajCTD4DF0wjikQh6G0KOqMC0NL7VJTGCw1ZAVPNKzzVrXbJH ENS+jDlwkWkaQUyRNX6Qj28dNc2DTD3q8crNNr1Vft71IFDO1w2L7s40sIzdKP6f 0uFgWVYGYB+9QQJ+cylOOfo9Su8CAwEAAaOCAncwggJzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDDkdWw2ichYp8NNE1/K+yvtETPRMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NWVNFTlNFLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01ZU0VO U0UvMC8zMEU0NzU2QzM2ODlDODU4QTdDMzREMTM1RkNBRkIyQkVEMTEzM0QxLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ594MA0EAgACMAcDBQAkBtDAMA0GCSqGSIb3DQEB CwUAA4IBAQApvPB8MTw+k3+Z4CN+xTExyLZxo8JSTl8bSEhDxsFbcRz7Iil4h2Xg yk602OmmlIsuMzwtRTe9trHhpRkDEG+xq0WNeCXfrfGQkd/sFkGCljja5xNV0pgY AcSc03CdoHSOpeon5bHRnsrdNcy3a5nzkv2Zir7H5fjtiLWtkPw9qMgDSVDYDAD0 Wdo9W2wXXC5zuRN1TFYc6UlNwj957v5QMHsGJET9MAV3tBtODNMcGyTQsB3AIFdz MIoz1sp46rz+cJnXKxc4QKFuFK7iVt6saUnexyO3VU/T9tkxJcP91TfjRv3pzVYu AK+Jxr5XeEhhHor6M6jK0t4MHgmdh7Gk -----END CERTIFICATE-----Generated at Tue May 12 22:33:15 2026 by rpki-client