$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer File: 90CC65194573D100A9A5ECAD83FF235C91E49F84.cer (raw, json) Hash identifier: /jEXNGhWT8oFACM9dugFZ5QvwmOr1d4spzknNWFqsMw= Subject key identifier: 90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 5D1B40C390D09B882CCC0CF508C6C76998076FC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft caRepository: rsync://rpkica.twnic.tw/rpki/NUNLINE/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:49:25 +0000 Certificate not after: Mon 10 May 2027 15:54:25 +0000 Subordinate resources: AS: 150755 IP: 203.175.104.0/23 IP: 2401:4e60::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1b:40:c3:90:d0:9b:88:2c:cc:0c:f5:08:c6:c7:69:98:07:6f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:49:25 2026 GMT Not After : May 10 15:54:25 2027 GMT Subject: CN=90CC65194573D100A9A5ECAD83FF235C91E49F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e5:5a:e7:bf:9c:9e:d6:18:62:83:73:09:d5: ff:4e:c9:70:61:9f:22:54:ff:45:a0:e3:ba:4e:d9: 87:bf:33:99:f2:fc:51:d3:81:4f:4d:57:99:df:ab: 11:ed:a9:bf:85:fd:46:c3:d3:f0:df:1d:ad:79:ca: 95:14:be:41:74:61:5f:c6:15:f5:62:a4:14:9d:b5: a1:69:36:5f:5e:d3:4d:28:0c:a3:01:ae:56:c4:90: 42:82:c2:83:00:f5:a2:bf:2c:91:9b:4a:22:5c:eb: 2f:4f:8d:0f:60:bd:cd:27:47:9d:e9:3b:04:b7:ad: 01:5a:b6:80:65:a8:00:e8:db:a5:23:22:84:b8:e6: bd:5e:49:4d:a7:37:34:8d:96:9d:21:ca:f8:88:63: b2:80:1d:e4:ab:29:c7:79:43:4e:0a:99:38:f0:0e: 14:9f:31:08:d0:3f:d0:2c:84:60:9a:59:48:a2:02: 35:73:97:2e:2e:89:a0:5e:d3:92:83:c5:aa:4a:96: bb:7f:8a:a8:87:3e:47:0b:2b:a1:ab:3d:dd:51:1e: 84:a2:46:0c:c8:30:cf:17:03:60:a9:a3:d4:42:18: 9a:1c:1f:02:e3:6a:0f:27:65:48:3e:93:21:05:cc: c0:32:64:b2:5f:71:39:c1:c3:9e:df:3f:4d:c8:02: e1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.104.0/23 IPv6: 2401:4e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 150755 Signature Algorithm: sha256WithRSAEncryption 84:c5:22:53:25:cd:26:23:b4:29:14:5e:4e:e1:68:6d:9f:a2: fe:8a:94:e9:7d:62:80:38:d6:ef:f6:f0:a6:23:35:2f:eb:2e: 69:35:9a:4c:9d:6e:43:88:a1:72:85:fd:41:c5:0b:ff:d4:7f: 1d:64:3d:92:f9:cc:ef:70:76:47:4f:19:17:08:d0:4b:3a:eb: c5:13:0b:31:c9:6a:83:fa:0f:ee:20:00:a7:3b:9a:45:96:32: 59:d3:41:95:d5:a2:3a:ad:b4:15:83:f9:cb:3e:c4:18:cd:39: dd:f2:6a:8a:a6:dc:82:5a:4e:36:a9:d8:c4:79:2d:6a:dd:6b: 3e:46:7b:35:5b:4c:1b:47:db:89:45:08:c4:62:05:75:6f:4a: 9d:d5:5f:5f:b1:a6:6b:7f:8c:de:9e:ba:a1:85:2d:2f:72:ef: 1b:36:be:5a:50:6b:53:18:4e:f0:4d:2a:95:87:44:31:c7:de: fd:e1:40:45:5c:82:35:c8:8d:4e:b4:4f:fa:11:aa:ac:c4:ed: 78:28:11:8f:cd:a5:0d:d5:24:7c:20:c6:a5:99:6f:bf:f6:56: 96:5a:12:50:10:fc:69:e7:64:f5:38:36:76:61:3d:a2:4d:58: 5e:08:1c:14:f5:94:c1:7d:5c:7c:0e:64:2d:40:d3:66:30:31: d8:6b:2c:f9 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIUXRtAw5DQm4gszAz1CMbHaZgHb8QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDkyNVoX DTI3MDUxMDE1NTQyNVowMzExMC8GA1UEAxMoOTBDQzY1MTk0NTczRDEwMEE5QTVF Q0FEODNGRjIzNUM5MUU0OUY4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANblWue/nJ7WGGKDcwnV/07JcGGfIlT/RaDjuk7Zh78zmfL8UdOBT01Xmd+r Ee2pv4X9RsPT8N8drXnKlRS+QXRhX8YV9WKkFJ21oWk2X17TTSgMowGuVsSQQoLC gwD1or8skZtKIlzrL0+ND2C9zSdHnek7BLetAVq2gGWoAOjbpSMihLjmvV5JTac3 NI2WnSHK+IhjsoAd5Kspx3lDTgqZOPAOFJ8xCNA/0CyEYJpZSKICNXOXLi6JoF7T koPFqkqWu3+KqIc+Rwsroas93VEehKJGDMgwzxcDYKmj1EIYmhwfAuNqDydlSD6T IQXMwDJksl9xOcHDnt8/TcgC4SMCAwEAAaOCApMwggKPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJDMZRlFc9EAqaXsrYP/I1yR5J+EMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OVU5MSU5FLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05VTkxJ TkUvMC85MENDNjUxOTQ1NzNEMTAwQTlBNUVDQUQ4M0ZGMjM1QzkxRTQ5Rjg0Lm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBy69oMA0EAgACMAcDBQAkAU5gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwJM4zANBgkqhkiG9w0BAQsFAAOCAQEAhMUiUyXNJiO0KRRe TuFobZ+i/oqU6X1igDjW7/bwpiM1L+suaTWaTJ1uQ4ihcoX9QcUL/9R/HWQ9kvnM 73B2R08ZFwjQSzrrxRMLMclqg/oP7iAApzuaRZYyWdNBldWiOq20FYP5yz7EGM05 3fJqiqbcglpONqnYxHktat1rPkZ7NVtMG0fbiUUIxGIFdW9KndVfX7Gma3+M3p66 oYUtL3LvGza+WlBrUxhO8E0qlYdEMcfe/eFARVyCNciNTrRP+hGqrMTteCgRj82l DdUkfCDGpZlvv/ZWlloSUBD8aedk9Tg2dmE9ok1YXggcFPWUwX1cfA5kLUDTZjAx 2Gss+Q== -----END CERTIFICATE-----Generated at Tue May 12 22:03:04 2026 by rpki-client