$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer File: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer (raw, json) Hash identifier: ix6SVAXsFzuMNpMf5FQBr8lTXGnYHIAOr1bjIY1sZoA= Subject key identifier: 6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 10251DBBFAA0241CC8C383D3F894B530519DB65A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft caRepository: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:43:31 +0000 Certificate not after: Mon 10 May 2027 15:48:31 +0000 Subordinate resources: AS: 9677 IP: 103.161.6.0/23 IP: 2406:f5c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:25:1d:bb:fa:a0:24:1c:c8:c3:83:d3:f8:94:b5:30:51:9d:b6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:43:31 2026 GMT Not After : May 10 15:48:31 2027 GMT Subject: CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ed:c9:bd:74:01:51:56:13:7c:82:4e:dc:08: c9:83:75:ae:2a:87:6e:28:26:c2:00:d1:79:07:4c: c3:c9:7a:4c:ef:7b:98:22:c9:a3:17:0d:39:2d:ec: 79:d8:ac:dc:b5:7d:49:03:78:57:b4:2a:73:52:f1: ef:d6:fa:e9:4e:51:10:b5:e0:5c:1c:7f:48:f3:1f: 32:b4:9b:eb:9c:6b:a6:cb:52:3c:15:39:e6:75:7d: 2b:75:06:47:d4:d5:0b:a5:8d:67:d5:7e:d8:aa:b9: 59:26:b4:0e:81:7b:a4:d5:56:a6:2f:6a:8a:9a:87: 05:ce:03:fa:fe:1d:4c:3a:3c:3e:58:73:ba:5a:c5: c8:e6:1d:d1:29:49:88:d9:ff:2d:cd:63:e7:8f:ac: ff:9c:6b:0f:70:7b:5e:ee:bd:50:0e:78:ed:64:3a: 7d:ba:47:40:f2:8f:19:2f:20:e1:7b:4d:b1:88:c9: 13:e5:2f:f1:a4:53:8c:aa:13:d6:5f:02:bc:d5:c5: a0:2b:7e:20:1b:34:d6:da:85:2b:8d:c3:8f:e8:1d: c4:c9:73:2c:89:ba:1d:7d:70:26:da:6e:2f:bf:40: b6:62:01:23:ed:db:96:4e:dd:df:68:fd:e2:67:9c: 67:4f:2d:cc:cd:a7:40:7d:ce:48:3d:c9:01:67:ee: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.6.0/23 IPv6: 2406:f5c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9677 Signature Algorithm: sha256WithRSAEncryption a1:d6:b3:ef:10:7f:0b:fd:3e:cb:32:f2:34:07:a6:2b:54:65: 49:ff:4c:d2:d8:23:d3:b7:60:c6:5c:ab:0f:22:28:42:6e:29: 35:e2:bb:5d:1d:0a:64:74:10:e9:5f:ee:27:85:9f:9a:c0:95: f8:c0:ea:74:be:4b:28:ac:27:1e:45:04:c8:1f:f7:58:9b:dc: e3:ba:18:db:06:05:0a:ec:d1:e2:c8:15:46:11:e9:53:2e:81: 05:ff:17:01:14:4a:73:83:a3:8b:45:a6:17:a7:a7:cd:18:80: 2f:6a:01:29:11:60:e9:75:8f:4b:0d:c7:5f:24:e0:e9:7d:8b: 54:68:6a:6d:de:4d:2e:2c:1b:d0:5b:ed:eb:b6:f8:b1:8b:ed: 88:af:fd:80:c9:67:f7:a5:be:9a:72:69:51:88:c9:db:23:5e: e1:b5:32:16:8f:53:91:aa:ca:c5:17:97:eb:53:1c:50:15:ac: d5:2c:52:1b:4e:5f:54:ed:99:4e:5f:f2:14:0d:e8:4b:29:1e: 0f:0d:a4:4e:ba:ca:1d:2a:7a:44:15:7d:57:2b:71:9f:6c:63: c9:c9:83:a9:ca:6b:76:cb:0f:34:92:87:41:0f:e5:2f:6c:43: 3a:7e:0b:59:b8:e1:e3:6e:79:bf:22:af:da:18:49:c0:53:75: 90:ba:0f:a0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgIUECUdu/qgJBzIw4PT+JS1MFGdtlowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDMzMVoX DTI3MDUxMDE1NDgzMVowMzExMC8GA1UEAxMoNkE4RjgxMEVCMEJGNjgzREZDQTc0 QzQwM0E3QjAzRDM3RTE2RjI2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjtyb10AVFWE3yCTtwIyYN1riqHbigmwgDReQdMw8l6TO97mCLJoxcNOS3s edis3LV9SQN4V7Qqc1Lx79b66U5RELXgXBx/SPMfMrSb65xrpstSPBU55nV9K3UG R9TVC6WNZ9V+2Kq5WSa0DoF7pNVWpi9qipqHBc4D+v4dTDo8PlhzulrFyOYd0SlJ iNn/Lc1j54+s/5xrD3B7Xu69UA547WQ6fbpHQPKPGS8g4XtNsYjJE+Uv8aRTjKoT 1l8CvNXFoCt+IBs01tqFK43Dj+gdxMlzLIm6HX1wJtpuL79AtmIBI+3blk7d32j9 4mecZ08tzM2nQH3OSD3JAWfutRMCAwEAAaOCApYwggKSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGqPgQ6wv2g9/KdMQDp7A9N+FvJoMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DQVJMV0FUQ0gv MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FS TFdBVENILzAvNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2 OC5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAWehBjANBAIAAjAHAwUAJAb1wDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIlzTANBgkqhkiG9w0BAQsFAAOCAQEAodaz7xB/C/0+ yzLyNAemK1RlSf9M0tgj07dgxlyrDyIoQm4pNeK7XR0KZHQQ6V/uJ4WfmsCV+MDq dL5LKKwnHkUEyB/3WJvc47oY2wYFCuzR4sgVRhHpUy6BBf8XARRKc4Oji0WmF6en zRiAL2oBKRFg6XWPSw3HXyTg6X2LVGhqbd5NLiwb0Fvt67b4sYvtiK/9gMln96W+ mnJpUYjJ2yNe4bUyFo9TkarKxReX61McUBWs1SxSG05fVO2ZTl/yFA3oSykeDw2k TrrKHSp6RBV9Vytxn2xjycmDqcprdssPNJKHQQ/lL2xDOn4LWbjh4255vyKv2hhJ wFN1kLoPoA== -----END CERTIFICATE-----Generated at Tue May 12 22:02:35 2026 by rpki-client