$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer File: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer (raw, json) Hash identifier: itS3M+Yh9BSPIZio+L8Z+Wc1KHI4+tHm0RTAN3TSGfs= Subject key identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 25C262FBC16C5D9AF47C474D5BFFA087F986B985 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft caRepository: rsync://rpkica.twnic.tw/rpki/RENREN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:56:11 +0000 Certificate not after: Mon 10 May 2027 16:01:11 +0000 Subordinate resources: IP: 103.69.48.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c2:62:fb:c1:6c:5d:9a:f4:7c:47:4d:5b:ff:a0:87:f9:86:b9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:56:11 2026 GMT Not After : May 10 16:01:11 2027 GMT Subject: CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:ed:d0:d4:47:5c:b2:93:a3:97:32:13:46: dd:70:80:e3:c8:eb:47:f2:98:b7:f0:63:83:e0:d0: de:97:3f:fe:e6:ee:c9:df:eb:3a:19:e6:c1:25:39: b4:23:fd:fe:81:65:2e:16:c3:dc:aa:dd:7f:ca:ce: 31:79:4e:ef:29:08:54:d6:f8:46:9e:f1:2c:c5:09: c6:42:d4:d4:b7:ff:bd:35:28:bd:01:a5:53:53:20: 2f:27:c8:b4:2d:55:46:6a:e1:f0:c0:d1:e9:7c:55: 15:ca:df:6e:98:a4:ac:4d:52:79:59:93:01:b1:86: b2:0b:c1:d9:84:43:8d:28:38:77:82:24:8e:fb:eb: 78:d2:19:58:dd:71:d7:b5:99:d9:88:cc:b3:01:17: 1f:e4:b0:6d:23:62:06:de:f4:0f:1b:07:70:d4:2a: b3:36:d8:ac:8d:ae:f7:5c:f1:8a:3e:9c:d9:d6:e2: 6b:a7:51:52:57:b3:79:b8:c4:fb:15:67:83:63:ff: 4f:88:d6:7c:43:ec:13:76:30:d3:28:9f:c8:3c:c2: d7:74:18:15:8b:e6:70:df:6a:7a:c6:be:2f:a1:22: e4:d7:06:c6:3d:f0:66:69:ab:7d:0a:6c:70:9f:1e: b4:f3:c3:4b:5d:6f:b7:35:30:ee:72:6f:cf:41:76: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.48.0/23 Signature Algorithm: sha256WithRSAEncryption 31:28:09:ec:98:c1:76:e8:de:4d:97:e0:b5:91:02:34:77:41: 5b:1d:4b:4d:61:5f:08:64:90:08:7a:01:89:91:0a:e7:03:5e: d5:be:7d:02:24:18:41:69:db:b6:c5:ec:39:af:70:af:35:1a: 0f:3b:e7:5c:6c:68:00:73:16:43:ce:ad:d2:22:51:bc:4a:49: 75:26:0c:a2:be:15:a9:3a:66:52:ec:59:21:95:00:69:98:d0: bd:5a:44:30:5b:21:0a:21:1c:f9:d5:4d:18:19:ea:90:7c:91: 5a:9d:f9:a6:7f:5a:4e:dc:74:46:08:33:18:b3:e4:50:33:12: 99:d4:51:aa:9f:f0:64:71:a9:60:52:13:e2:93:70:f8:c4:3d: 51:8c:23:4f:bc:0b:01:78:8b:cf:d7:4e:67:e6:f5:da:83:00: 0c:c5:b3:5a:15:99:4e:42:4f:7d:a4:51:b7:57:b9:b1:e0:c8: 2c:94:7d:ed:ae:80:68:5d:4f:a6:72:4b:c8:01:cb:54:49:dd: b6:da:07:b0:21:70:35:35:04:28:93:2d:77:cf:33:91:fa:a7: 7a:12:ea:9b:b5:72:e3:c2:1a:62:86:01:61:b4:38:e2:06:c6: fc:b4:fe:15:d7:b2:3d:df:b0:ed:d1:50:29:83:2e:cd:3b:c7: 7d:ca:21:b8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIUJcJi+8FsXZr0fEdNW/+gh/mGuYUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTYxMVoX DTI3MDUxMDE2MDExMVowMzExMC8GA1UEAxMoN0NEODVEMEREQTc1RjQ5MkQ5NTQ0 MDJCRkVBODE5RUQ2MUZENUI3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8r7dDUR1yyk6OXMhNG3XCA48jrR/KYt/Bjg+DQ3pc//ubuyd/rOhnmwSU5 tCP9/oFlLhbD3Krdf8rOMXlO7ykIVNb4Rp7xLMUJxkLU1Lf/vTUovQGlU1MgLyfI tC1VRmrh8MDR6XxVFcrfbpikrE1SeVmTAbGGsgvB2YRDjSg4d4IkjvvreNIZWN1x 17WZ2YjMswEXH+SwbSNiBt70DxsHcNQqszbYrI2u91zxij6c2dbia6dRUlezebjE +xVng2P/T4jWfEPsE3Yw0yifyDzC13QYFYvmcN9qesa+L6Ei5NcGxj3wZmmrfQps cJ8etPPDS11vtzUw7nJvz0F2WpUCAwEAAaOCAmYwggJiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHzYXQ3adfSS2VRAK/6oGe1h/Vt2MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9SRU5SRU4vMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUkVOUkVO LzAvN0NEODVEMEREQTc1RjQ5MkQ5NTQ0MDJCRkVBODE5RUQ2MUZENUI3Ni5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAWdFMDANBgkqhkiG9w0BAQsFAAOCAQEAMSgJ7JjBduje TZfgtZECNHdBWx1LTWFfCGSQCHoBiZEK5wNe1b59AiQYQWnbtsXsOa9wrzUaDzvn XGxoAHMWQ86t0iJRvEpJdSYMor4VqTpmUuxZIZUAaZjQvVpEMFshCiEc+dVNGBnq kHyRWp35pn9aTtx0RggzGLPkUDMSmdRRqp/wZHGpYFIT4pNw+MQ9UYwjT7wLAXiL z9dOZ+b12oMADMWzWhWZTkJPfaRRt1e5seDILJR97a6AaF1PpnJLyAHLVEndttoH sCFwNTUEKJMtd88zkfqnehLqm7Vy48IaYoYBYbQ44gbG/LT+FdeyPd+w7dFQKYMu zTvHfcohuA== -----END CERTIFICATE-----Generated at Tue May 12 22:52:39 2026 by rpki-client