$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer File: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer (raw, json) Hash identifier: ygw9Cbq9/K13q3Bg4BQsy1y/wbjHHtDIbI/iHn21YyE= Subject key identifier: 36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 37579D6EC0171DCBB573735DF3CA98780F1E1DBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft caRepository: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:43:50 +0000 Certificate not after: Mon 10 May 2027 15:48:50 +0000 Subordinate resources: AS: 63895 IP: 103.185.28.0/23 IP: 2400:6960::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:57:9d:6e:c0:17:1d:cb:b5:73:73:5d:f3:ca:98:78:0f:1e:1d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:43:50 2026 GMT Not After : May 10 15:48:50 2027 GMT Subject: CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:80:6c:77:89:46:a8:dd:ec:64:de:9b:bc: 5b:7d:b4:b2:47:17:cf:c2:a9:59:7e:b5:7f:5e:fe: 39:a1:6d:ef:8e:f4:b3:53:8a:f9:18:4e:51:a9:d7: 65:a4:b5:a5:b6:62:41:5b:9e:b8:44:d1:37:8f:68: a1:72:cc:62:40:40:bc:09:ea:1b:94:7b:21:b9:dd: 96:42:c7:43:06:78:05:c6:6b:62:47:eb:c4:25:82: 85:72:af:c1:d9:2c:2b:93:f2:85:02:05:cb:fb:4a: a7:ac:fb:11:08:72:b6:e3:35:0f:f3:7c:33:62:3a: a9:e3:60:e6:ab:af:3a:48:47:2c:c0:7b:da:a7:21: 87:99:a9:9e:25:13:00:8d:76:6f:4f:b0:d2:85:28: 5b:b4:98:6a:22:b6:28:5a:eb:08:86:eb:8d:99:6f: 8c:7d:dd:5f:d3:71:f0:00:3b:17:bc:2a:dd:65:a7: c1:fd:0f:66:2f:a2:a2:4c:74:91:41:8a:c4:25:04: 72:f4:64:cb:9d:c8:a4:a8:2e:71:55:d9:f0:ad:f1: 6b:ed:d7:a9:45:94:35:f6:c3:28:05:9e:52:a8:cc: 85:48:dc:88:2d:1c:1f:d4:40:0b:d8:6d:77:cc:2b: 2f:d9:33:0c:eb:fa:66:c3:39:dc:9e:34:a1:d1:9b: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.28.0/23 IPv6: 2400:6960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63895 Signature Algorithm: sha256WithRSAEncryption 85:57:1e:99:9b:27:13:2d:6e:ec:ae:3b:c8:0d:ae:6c:bc:92: 1c:96:4a:64:ea:f7:fa:e8:81:06:9e:02:77:a9:57:94:56:a5: 98:92:3e:ed:ac:66:f9:f1:c3:d6:27:c7:df:ad:2e:60:fd:58: fd:a7:89:5f:1e:f1:c4:5b:64:cf:98:9b:ae:00:6f:11:45:8e: c1:1b:ee:06:bf:a7:bb:0c:d3:93:fb:c2:a8:e8:ec:6e:66:0a: 65:20:1d:b7:ee:13:ce:1f:27:fb:92:86:ff:2c:f5:d2:4f:23: f6:28:e2:ba:b1:64:29:51:aa:03:6f:9e:87:87:c0:17:a4:67: dc:e8:19:47:68:a0:c9:bb:15:aa:1f:5e:6a:f5:f5:04:ab:df: ba:ed:2f:2f:2b:d2:56:b8:d4:69:0f:0c:b3:c7:1c:c0:4c:b4: 11:78:56:1e:42:19:0e:b3:85:67:29:0d:55:e4:bc:58:02:81: a9:9f:da:92:18:ce:fa:53:79:a6:51:d3:4f:02:9f:88:f9:41: ce:60:78:58:17:3d:ff:6e:8b:b8:ab:93:0f:88:53:7f:7b:71: 7e:ee:47:53:a5:f9:fb:3f:33:6e:e9:0b:75:af:81:20:09:4f: c1:3e:c4:bf:de:d5:be:d8:d7:48:7e:51:59:c5:cc:17:2e:13: bd:97:b1:27 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUN1edbsAXHcu1c3Nd88qYeA8eHb8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDM1MFoX DTI3MDUxMDE1NDg1MFowMzExMC8GA1UEAxMoMzZEQTkxNDJERTFEQzgwOUVGMDA4 NkMyMzE3MURGRkFGNUFEN0REODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6ogGx3iUao3exk3pu8W320skcXz8KpWX61f17+OaFt7470s1OK+RhOUanX ZaS1pbZiQVueuETRN49ooXLMYkBAvAnqG5R7IbndlkLHQwZ4BcZrYkfrxCWChXKv wdksK5PyhQIFy/tKp6z7EQhytuM1D/N8M2I6qeNg5quvOkhHLMB72qchh5mpniUT AI12b0+w0oUoW7SYaiK2KFrrCIbrjZlvjH3dX9Nx8AA7F7wq3WWnwf0PZi+iokx0 kUGKxCUEcvRky53IpKgucVXZ8K3xa+3XqUWUNfbDKAWeUqjMhUjciC0cH9RAC9ht d8wrL9kzDOv6ZsM53J40odGbhrMCAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDbakULeHcgJ7wCGwjFx3/r1rX3YMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSEFSTVdBWS8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSEFS TVdBWS8wLzM2REE5MTQyREUxREM4MDlFRjAwODZDMjMxNzFERkZBRjVBRDdERDgu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnuRwwDQQCAAIwBwMFACQAaWAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPmXMA0GCSqGSIb3DQEBCwUAA4IBAQCFVx6ZmycTLW7s rjvIDa5svJIclkpk6vf66IEGngJ3qVeUVqWYkj7trGb58cPWJ8ffrS5g/Vj9p4lf HvHEW2TPmJuuAG8RRY7BG+4Gv6e7DNOT+8Ko6OxuZgplIB237hPOHyf7kob/LPXS TyP2KOK6sWQpUaoDb56Hh8AXpGfc6BlHaKDJuxWqH15q9fUEq9+67S8vK9JWuNRp DwyzxxzATLQReFYeQhkOs4VnKQ1V5LxYAoGpn9qSGM76U3mmUdNPAp+I+UHOYHhY Fz3/bou4q5MPiFN/e3F+7kdTpfn7PzNu6Qt1r4EgCU/BPsS/3tW+2NdIflFZxcwX LhO9l7En -----END CERTIFICATE-----Generated at Tue May 12 22:03:39 2026 by rpki-client