$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9332B6D66696FC8685523603E96826F89877F446.cer File: 9332B6D66696FC8685523603E96826F89877F446.cer (raw, json) Hash identifier: aNgEOrFceIKsUIV2CZlScqjTIWJpOSA93xXYo0Rz7u8= Subject key identifier: 93:32:B6:D6:66:96:FC:86:85:52:36:03:E9:68:26:F8:98:77:F4:46 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 5B45A29A2C20B2615F3D73359AC783D519F412C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/HAIHWA/0/9332B6D66696FC8685523603E96826F89877F446.mft caRepository: rsync://rpkica.twnic.tw/rpki/HAIHWA/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:21 +0000 Certificate not after: Mon 10 May 2027 15:51:21 +0000 Subordinate resources: IP: 103.123.124.0/22 IP: 2403:a240::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:45:a2:9a:2c:20:b2:61:5f:3d:73:35:9a:c7:83:d5:19:f4:12:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:46:21 2026 GMT Not After : May 10 15:51:21 2027 GMT Subject: CN=9332B6D66696FC8685523603E96826F89877F446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:93:49:48:04:6e:20:4e:61:68:4b:94:d7:e6: c0:32:1a:b2:d1:05:8d:08:44:70:19:70:a5:aa:15: 2b:68:a8:12:aa:38:2b:13:6e:a5:aa:87:34:73:ad: f7:d6:99:56:5f:1b:b0:05:1c:36:27:c3:a4:63:d8: 26:35:df:d0:cf:4a:c9:10:b7:3a:06:91:27:f8:f6: 16:b4:fd:5d:4c:f8:22:80:0d:e1:63:dc:90:15:27: 5e:98:5a:77:e1:c7:3c:a1:ee:d5:a1:1e:97:bb:6d: f8:cb:bc:bd:e3:a6:31:00:83:8a:72:3c:a4:65:18: d2:e5:30:bc:0a:c0:ea:db:df:34:b8:6f:f9:02:73: 4d:14:76:68:20:39:49:07:9a:41:7a:25:29:4b:c3: 51:e9:20:7e:e4:cf:4c:6e:c2:16:35:aa:a2:17:9a: 28:a6:60:11:2c:1f:eb:70:2d:9b:d1:ae:ac:ce:00: 59:2e:81:4d:2a:61:05:65:e8:8a:50:60:5e:fd:ec: c0:a3:90:e6:c9:d6:34:d9:01:d3:78:e2:f8:87:b7: 49:b0:50:42:57:b3:3c:6e:86:f9:70:a5:c7:98:03: f7:41:8c:b8:b6:fc:37:29:93:89:ab:56:ea:c8:f2: a1:62:30:09:94:cc:6a:8e:41:0a:54:68:0d:d8:3a: f4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:32:B6:D6:66:96:FC:86:85:52:36:03:E9:68:26:F8:98:77:F4:46 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HAIHWA/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HAIHWA/0/9332B6D66696FC8685523603E96826F89877F446.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.124.0/22 IPv6: 2403:a240::/32 Signature Algorithm: sha256WithRSAEncryption 7c:ac:80:0b:a4:b9:25:2f:87:0b:d1:cc:c2:1c:87:2e:10:6b: d9:20:9a:fd:4f:27:7f:24:88:9f:76:20:f4:93:e4:10:7b:da: db:c1:de:48:59:64:62:43:61:de:b7:e0:f2:21:46:df:aa:e2: d0:3f:a9:e2:82:da:48:32:22:dc:73:33:68:aa:62:b6:57:b9: 82:fa:08:ea:29:97:8b:97:70:84:d8:39:40:1a:bf:7a:a3:4f: 9a:f8:60:b5:d1:c1:74:aa:e6:28:f7:14:4b:ae:43:e6:32:40: 08:4b:44:0a:5b:72:cf:69:a3:95:ec:6f:f3:e9:a5:c5:82:59: 4a:53:80:16:84:c7:c3:99:96:55:cd:f0:d7:02:3a:ac:2e:ff: 9c:12:4c:ae:50:31:3d:2c:2d:2a:47:11:a0:04:39:24:db:3b: 20:63:96:38:68:df:d6:2e:8d:5e:5d:be:7a:fa:2c:70:86:4a: 04:21:aa:a5:19:71:6c:ce:ba:6c:73:f3:7e:b6:b2:48:34:60: 9e:81:d1:b8:57:b7:8f:38:75:fb:9b:f7:c1:83:a2:b1:8f:eb: d8:4b:e3:e2:46:35:75:ac:87:8d:f2:27:ab:2d:2e:f8:71:92: ba:90:13:cd:35:39:c1:a3:c9:ff:bf:06:59:44:4c:69:b5:19: 98:9a:45:1f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIUW0WimiwgsmFfPXM1mseD1Rn0EsQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDYyMVoX DTI3MDUxMDE1NTEyMVowMzExMC8GA1UEAxMoOTMzMkI2RDY2Njk2RkM4Njg1NTIz NjAzRTk2ODI2Rjg5ODc3RjQ0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN2TSUgEbiBOYWhLlNfmwDIastEFjQhEcBlwpaoVK2ioEqo4KxNupaqHNHOt 99aZVl8bsAUcNifDpGPYJjXf0M9KyRC3OgaRJ/j2FrT9XUz4IoAN4WPckBUnXpha d+HHPKHu1aEel7tt+Mu8veOmMQCDinI8pGUY0uUwvArA6tvfNLhv+QJzTRR2aCA5 SQeaQXolKUvDUekgfuTPTG7CFjWqoheaKKZgESwf63Atm9GurM4AWS6BTSphBWXo ilBgXv3swKOQ5snWNNkB03ji+Ie3SbBQQlezPG6G+XClx5gD90GMuLb8NymTiatW 6sjyoWIwCZTMao5BClRoDdg69IECAwEAAaOCAnUwggJxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJMyttZmlvyGhVI2A+loJviYd/RGMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9IQUlIV0EvMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEFJSFdB LzAvOTMzMkI2RDY2Njk2RkM4Njg1NTIzNjAzRTk2ODI2Rjg5ODc3RjQ0Ni5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAmd7fDANBAIAAjAHAwUAJAOiQDANBgkqhkiG9w0BAQsF AAOCAQEAfKyAC6S5JS+HC9HMwhyHLhBr2SCa/U8nfySIn3Yg9JPkEHva28HeSFlk YkNh3rfg8iFG36ri0D+p4oLaSDIi3HMzaKpitle5gvoI6imXi5dwhNg5QBq/eqNP mvhgtdHBdKrmKPcUS65D5jJACEtECltyz2mjlexv8+mlxYJZSlOAFoTHw5mWVc3w 1wI6rC7/nBJMrlAxPSwtKkcRoAQ5JNs7IGOWOGjf1i6NXl2+evoscIZKBCGqpRlx bM66bHPzfraySDRgnoHRuFe3jzh1+5v3wYOisY/r2Evj4kY1dayHjfInqy0u+HGS upATzTU5waPJ/78GWURMabUZmJpFHw== -----END CERTIFICATE-----Generated at Wed May 13 02:26:15 2026 by rpki-client