$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.cer File: 7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.cer (raw, json) Hash identifier: JXiZwxI13BrKEY4QINlUBakURSeGFbN8+z1OFidAdJ4= Subject key identifier: 70:94:DB:DA:EA:D8:89:7E:EC:2B:AC:1D:B4:BC:58:EA:A4:57:BC:B7 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 65AFCA921A27D51D5DFB725A567B2ABBC4C32DD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/INITRISE/0/7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.mft caRepository: rsync://rpkica.twnic.tw/rpki/INITRISE/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:04 +0000 Certificate not after: Mon 10 May 2027 15:52:04 +0000 Subordinate resources: AS: 63903 IP: 103.39.34.0/23 IP: 2400:c220::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:af:ca:92:1a:27:d5:1d:5d:fb:72:5a:56:7b:2a:bb:c4:c3:2d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:04 2026 GMT Not After : May 10 15:52:04 2027 GMT Subject: CN=7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:3b:bf:48:f9:24:33:f6:30:19:70:55:a9: 69:d2:96:51:48:47:c9:c4:d9:ea:c5:67:6a:27:e4: 38:08:6c:d5:1f:2a:b1:ce:ae:98:16:69:81:1d:1a: fe:57:18:e7:3d:d1:50:e4:be:00:17:9d:f7:fc:f7: 38:a2:b4:4d:f4:85:55:5a:af:5b:9f:34:17:cc:96: 0d:5c:7e:c8:51:cb:03:38:f0:e3:5f:62:24:51:14: 29:e4:2d:f8:ea:b1:38:05:01:cb:9f:93:ee:5e:92: ee:46:88:f4:b3:39:43:48:28:f3:39:f9:80:8f:07: 6d:50:2f:cd:c0:b3:0b:69:f9:b4:77:30:e2:fb:b5: e6:a7:a8:40:96:dc:1e:58:84:6b:9c:3b:1b:38:e0: e9:d9:4d:85:21:ab:65:0b:a1:30:f5:c1:9e:42:58: 02:01:f2:e5:ec:23:d1:f5:79:02:dd:75:c0:51:b6: a9:48:d7:05:9c:43:28:21:77:24:59:78:bb:5c:d1: 66:86:91:1e:2a:0c:d3:64:7b:87:87:94:7c:51:37: cc:81:b3:49:72:a5:b8:88:e6:c5:c2:9f:54:e9:8d: 82:2b:35:e1:4f:64:d0:b2:a8:64:33:bf:88:d4:8f: 4a:f2:d4:c2:89:f7:20:95:10:2b:8d:bf:13:40:f7: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:94:DB:DA:EA:D8:89:7E:EC:2B:AC:1D:B4:BC:58:EA:A4:57:BC:B7 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/INITRISE/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/INITRISE/0/7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.34.0/23 IPv6: 2400:c220::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63903 Signature Algorithm: sha256WithRSAEncryption a2:e2:f9:53:19:d9:4e:d1:65:03:78:1d:5f:18:70:71:de:95: f0:b2:59:f8:29:9c:7c:89:e2:ce:09:5b:1d:94:b2:d7:26:29: 2c:69:92:aa:70:aa:c2:34:15:43:c0:b0:b8:7c:3d:1e:d6:a9: 42:ae:dd:d2:22:3d:18:d4:95:00:20:87:74:d8:fa:ad:65:c2: 16:75:92:3f:7f:bd:bc:76:d1:68:12:9e:56:fa:a8:0c:5e:63: 78:ee:dd:70:7d:79:fe:fd:c9:8b:cf:34:4e:dc:e4:19:33:b5: 35:51:fe:67:b1:a4:c8:53:62:7b:5a:14:7e:3c:fb:7b:bd:af: b3:be:df:de:3b:e2:cf:a2:d4:0b:d1:54:ee:fa:f1:18:0e:bb: ea:08:bd:65:07:29:ac:ff:74:c8:53:a8:5e:28:ad:af:10:d1: 29:2c:47:03:16:32:ed:3e:4c:ae:ca:5f:15:14:53:8e:cd:26: 86:a6:23:8c:7b:af:bc:45:9c:55:c1:3f:bf:21:9f:2a:6e:c2: 81:c1:1c:9b:52:7e:14:72:bb:55:97:e9:9f:52:06:48:94:c5: df:64:2c:fa:0f:78:00:c9:a9:96:8b:43:cc:7f:89:01:2f:b7: 97:6c:db:41:89:ec:48:ef:ca:8d:7d:9b:e3:ce:26:45:07:d3: cc:f1:b4:6b -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUZa/Kkhon1R1d+3JaVnsqu8TDLdcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDcwNFoX DTI3MDUxMDE1NTIwNFowMzExMC8GA1UEAxMoNzA5NERCREFFQUQ4ODk3RUVDMkJB QzFEQjRCQzU4RUFBNDU3QkNCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALj3O79I+SQz9jAZcFWpadKWUUhHycTZ6sVnaifkOAhs1R8qsc6umBZpgR0a /lcY5z3RUOS+ABed9/z3OKK0TfSFVVqvW580F8yWDVx+yFHLAzjw419iJFEUKeQt +OqxOAUBy5+T7l6S7kaI9LM5Q0go8zn5gI8HbVAvzcCzC2n5tHcw4vu15qeoQJbc HliEa5w7Gzjg6dlNhSGrZQuhMPXBnkJYAgHy5ewj0fV5At11wFG2qUjXBZxDKCF3 JFl4u1zRZoaRHioM02R7h4eUfFE3zIGzSXKluIjmxcKfVOmNgis14U9k0LKoZDO/ iNSPSvLUwon3IJUQK42/E0D3c/kCAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHCU29rq2Il+7CusHbS8WOqkV7y3MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTklUUklTRS8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTklU UklTRS8wLzcwOTREQkRBRUFEODg5N0VFQzJCQUMxREI0QkM1OEVBQTQ1N0JDQjcu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnJyIwDQQCAAIwBwMFACQAwiAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPmfMA0GCSqGSIb3DQEBCwUAA4IBAQCi4vlTGdlO0WUD eB1fGHBx3pXwsln4KZx8ieLOCVsdlLLXJiksaZKqcKrCNBVDwLC4fD0e1qlCrt3S Ij0Y1JUAIId02PqtZcIWdZI/f728dtFoEp5W+qgMXmN47t1wfXn+/cmLzzRO3OQZ M7U1Uf5nsaTIU2J7WhR+PPt7va+zvt/eO+LPotQL0VTu+vEYDrvqCL1lByms/3TI U6heKK2vENEpLEcDFjLtPkyuyl8VFFOOzSaGpiOMe6+8RZxVwT+/IZ8qbsKBwRyb Un4UcrtVl+mfUgZIlMXfZCz6D3gAyamWi0PMf4kBL7eXbNtBiexI78qNfZvjziZF B9PM8bRr -----END CERTIFICATE-----Generated at Tue May 12 22:04:11 2026 by rpki-client