$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer File: 46689F7EA6A6380B850E938D992174E5996FFA91.cer (raw, json) Hash identifier: O+gky3t69H3+tHRPSEpbS9WyzdQrWT1giGjEp12FJZQ= Subject key identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 1A01C89844301A95FCD41CA520444059CBC33692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft caRepository: rsync://rpkica.twnic.tw/rpki/TYCATV/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 16:00:14 +0000 Certificate not after: Mon 10 May 2027 16:05:14 +0000 Subordinate resources: AS: 24159 IP: 203.111.208.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:01:c8:98:44:30:1a:95:fc:d4:1c:a5:20:44:40:59:cb:c3:36:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 16:00:14 2026 GMT Not After : May 10 16:05:14 2027 GMT Subject: CN=46689F7EA6A6380B850E938D992174E5996FFA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:4a:24:ff:f7:9c:2f:11:fa:55:83:74:60: 0c:7a:2c:7d:02:6a:86:79:4d:fd:95:6d:11:c4:a0: b3:cf:3b:fa:02:36:ed:4e:ff:1f:ef:8c:a6:fa:df: b4:c8:38:b4:93:5b:56:d6:bb:7b:92:66:d7:0f:6c: 0c:96:0c:28:45:9a:ae:1e:68:e3:cd:83:9a:cc:ee: e1:d3:d0:4a:d1:9c:0b:b8:95:6a:b4:c5:ed:83:ad: f8:84:96:37:5e:5a:b8:26:2c:1d:33:db:ce:2f:43: 46:e1:e5:a5:48:8b:5b:a0:a6:01:05:0e:5a:38:4c: 96:78:1a:32:4a:27:87:89:20:2d:eb:f1:a5:22:3e: 8a:2f:56:1d:cb:f5:a6:e6:44:b2:95:7d:2e:2c:5d: 09:33:fd:50:9b:0a:d7:6d:67:f4:3b:6f:4b:31:63: 37:0d:d0:d1:cb:05:9e:9e:5e:7e:2e:18:7b:06:ac: 83:a4:49:0e:52:c5:bb:7f:9c:df:59:6d:c9:a8:37: 24:b2:05:95:da:50:df:7c:de:32:94:c7:ef:07:ee: 33:42:7a:67:27:a7:ed:10:58:ed:22:ae:90:cb:15: 77:ab:3c:91:19:d4:b7:ce:84:48:17:a9:87:e0:1c: 7d:e3:45:f5:42:e9:e8:74:b4:59:eb:8e:2b:a6:24: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.111.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24159 Signature Algorithm: sha256WithRSAEncryption a4:08:01:a7:ed:b7:47:66:25:3b:9d:68:d4:fb:99:5e:92:3b: 65:36:42:87:f2:f9:b7:e5:dd:85:c7:31:ad:c1:81:b0:18:7d: 3f:5e:87:10:54:54:c8:d4:2a:c9:d8:d5:0c:e0:78:71:60:95: 10:d2:6e:33:11:51:0c:a0:63:eb:27:91:f2:71:c4:b6:bf:84: 1b:af:ee:8e:44:2a:74:41:cd:63:15:cc:75:79:51:68:27:c1: f1:a8:12:07:01:8f:ef:9c:9c:9f:7c:bf:09:c4:5a:e7:8b:fa: d0:dd:d0:09:3e:b2:ef:b2:f3:d1:41:55:47:9e:d9:97:cc:97: a4:41:bb:73:f5:91:e1:8c:78:30:75:fe:fd:0f:71:ec:c6:36: 3b:3b:ce:ac:8c:83:10:79:1c:fe:73:e8:17:98:37:52:82:92: 35:4c:23:81:b6:ab:08:51:86:22:63:a6:51:b8:72:a0:6d:7c: f3:45:de:67:87:c6:97:2a:ea:b5:27:63:cb:1c:81:ea:f6:33: ec:db:b8:21:68:c8:08:39:bb:4e:44:7a:fb:45:38:53:62:6e: c9:03:83:22:b5:45:da:c3:2b:32:04:40:ab:a5:ac:fb:49:ca: 4b:44:1b:df:0c:bc:87:3e:36:42:48:10:5d:c2:6b:59:48:04: 58:14:35:ea -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgIUGgHImEQwGpX81BylIERAWcvDNpIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDAxNFoX DTI3MDUxMDE2MDUxNFowMzExMC8GA1UEAxMoNDY2ODlGN0VBNkE2MzgwQjg1MEU5 MzhEOTkyMTc0RTU5OTZGRkE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgaSiT/95wvEfpVg3RgDHosfQJqhnlN/ZVtEcSgs887+gI27U7/H++Mpvrf tMg4tJNbVta7e5Jm1w9sDJYMKEWarh5o482Dmszu4dPQStGcC7iVarTF7YOt+ISW N15auCYsHTPbzi9DRuHlpUiLW6CmAQUOWjhMlngaMkonh4kgLevxpSI+ii9WHcv1 puZEspV9LixdCTP9UJsK121n9DtvSzFjNw3Q0csFnp5efi4Yewasg6RJDlLFu3+c 31ltyag3JLIFldpQ33zeMpTH7wfuM0J6Zyen7RBY7SKukMsVd6s8kRnUt86ESBep h+AcfeNF9ULp6HS0WeuOK6YkubECAwEAAaOCAoEwggJ9MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEZon36mpjgLhQ6TjZkhdOWZb/qRMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UWUNBVFYvMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFlDQVRW LzAvNDY2ODlGN0VBNkE2MzgwQjg1MEU5MzhEOTkyMTc0RTU5OTZGRkE5MS5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEBMtv0DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJeXzAN BgkqhkiG9w0BAQsFAAOCAQEApAgBp+23R2YlO51o1PuZXpI7ZTZCh/L5t+Xdhccx rcGBsBh9P16HEFRUyNQqydjVDOB4cWCVENJuMxFRDKBj6yeR8nHEtr+EG6/ujkQq dEHNYxXMdXlRaCfB8agSBwGP75ycn3y/CcRa54v60N3QCT6y77Lz0UFVR57Zl8yX pEG7c/WR4Yx4MHX+/Q9x7MY2OzvOrIyDEHkc/nPoF5g3UoKSNUwjgbarCFGGImOm UbhyoG1880XeZ4fGlyrqtSdjyxyB6vYz7Nu4IWjICDm7TkR6+0U4U2JuyQODIrVF 2sMrMgRAq6Ws+0nKS0Qb3wy8hz42QkgQXcJrWUgEWBQ16g== -----END CERTIFICATE-----Generated at Wed May 13 04:16:56 2026 by rpki-client