$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/93A2D191271D101C8105C5AE462CDE7AD3DAC755.cer File: 93A2D191271D101C8105C5AE462CDE7AD3DAC755.cer (raw, json) Hash identifier: dfCAcsYmpp3y2lvRnq2/DqEzPagj6VTJXID5bu2t0dc= Subject key identifier: 93:A2:D1:91:27:1D:10:1C:81:05:C5:AE:46:2C:DE:7A:D3:DA:C7:55 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 2C2914D7793C740C1ADA4475F764BD810C363AF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft caRepository: rsync://rpkica.twnic.tw/rpki/PEICITY260/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:55:50 +0000 Certificate not after: Mon 10 May 2027 16:00:50 +0000 Subordinate resources: AS: 131627 IP: 103.117.224.0/22 IP: 2406:1740::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:29:14:d7:79:3c:74:0c:1a:da:44:75:f7:64:bd:81:0c:36:3a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:55:50 2026 GMT Not After : May 10 16:00:50 2027 GMT Subject: CN=93A2D191271D101C8105C5AE462CDE7AD3DAC755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:44:85:b9:51:93:51:d2:e2:9a:2b:65:fc: 35:1e:3b:65:14:ce:13:e5:e5:3e:c4:6e:97:1f:68: 37:6a:92:2f:13:da:d1:88:18:b0:9d:e4:f8:82:27: 13:c2:a5:54:53:1f:d5:52:b8:e7:4c:0d:95:3e:95: 24:a9:f4:bb:5d:48:8e:90:7b:dd:bd:a7:db:6a:c8: d0:35:28:68:18:55:57:0a:5c:2d:05:43:aa:6e:91: 1c:08:f5:78:9a:c5:ce:88:02:76:c7:3a:48:f4:ec: f6:a3:84:b3:35:e4:72:6d:54:65:3d:3d:81:10:0e: f1:72:19:4a:33:04:fd:7e:6a:13:12:9e:a8:c1:dd: c3:f1:12:04:22:19:0f:a3:21:16:9d:c0:de:b1:c7: 2e:ed:1d:f4:e0:42:49:98:05:60:6c:a3:28:c2:f5: 00:79:27:2c:69:8f:72:6f:39:90:af:45:92:b0:f2: 54:26:66:68:ff:50:47:61:90:35:f9:f9:33:5b:bc: 9e:4d:1c:b3:49:42:cd:a2:e2:c7:64:e3:86:ea:2b: 0d:2d:37:bf:19:13:5e:50:ef:5e:20:12:61:43:90: 97:9c:26:d5:e4:85:7e:42:67:74:9c:f3:e3:0a:ee: e7:97:36:4e:3b:b3:68:68:f2:17:ff:91:bb:4a:ae: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:A2:D1:91:27:1D:10:1C:81:05:C5:AE:46:2C:DE:7A:D3:DA:C7:55 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PEICITY260/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.117.224.0/22 IPv6: 2406:1740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131627 Signature Algorithm: sha256WithRSAEncryption 7e:90:a3:a5:ff:84:e3:47:e1:99:96:36:88:98:ac:05:5c:70: a8:a4:9e:9a:30:d6:85:a1:c7:10:9b:a9:4e:77:1b:13:dc:93: 20:71:ce:7d:c8:4e:6f:6f:79:4f:18:75:61:96:cc:b9:ad:2a: b2:dd:e6:1b:23:ff:de:9e:9d:69:87:a1:45:c4:c8:8a:5c:86: eb:88:c0:30:ae:59:a5:b7:85:fb:e5:68:20:72:c1:96:94:cc: 12:0d:1d:d8:bd:98:40:9c:cd:ff:ad:e4:e6:21:17:28:88:29: 67:ff:db:3f:82:78:7f:02:ba:62:47:97:2f:22:fc:28:f3:ac: 27:93:bb:8c:de:37:50:4d:86:67:14:c3:85:b2:4e:57:e1:fa: e1:de:6b:ed:c9:fa:c8:70:ee:fa:e7:19:a6:75:bf:1b:3b:be: 17:90:55:1c:0f:4c:40:5e:57:0f:5b:fb:f5:86:9e:c8:73:e1: b7:7c:01:2c:9f:81:68:7c:f8:aa:71:98:02:be:59:d9:ec:45: 74:e4:e0:e5:68:7e:69:a1:85:91:3a:e9:80:bb:0c:2d:78:87: 92:88:53:5d:40:4e:06:49:df:c2:4a:9e:a6:3c:12:8e:36:e9: bd:61:36:6d:9a:64:7e:62:a9:3e:da:ba:92:60:8c:8f:df:7e: ed:a5:05:48 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIULCkU13k8dAwa2kR192S9gQw2OvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTU1MFoX DTI3MDUxMDE2MDA1MFowMzExMC8GA1UEAxMoOTNBMkQxOTEyNzFEMTAxQzgxMDVD NUFFNDYyQ0RFN0FEM0RBQzc1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALo2RIW5UZNR0uKaK2X8NR47ZRTOE+XlPsRulx9oN2qSLxPa0YgYsJ3k+IIn E8KlVFMf1VK450wNlT6VJKn0u11IjpB73b2n22rI0DUoaBhVVwpcLQVDqm6RHAj1 eJrFzogCdsc6SPTs9qOEszXkcm1UZT09gRAO8XIZSjME/X5qExKeqMHdw/ESBCIZ D6MhFp3A3rHHLu0d9OBCSZgFYGyjKML1AHknLGmPcm85kK9FkrDyVCZmaP9QR2GQ Nfn5M1u8nk0cs0lCzaLix2TjhuorDS03vxkTXlDvXiASYUOQl5wm1eSFfkJndJzz 4wru55c2TjuzaGjyF/+Ru0quGSUCAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJOi0ZEnHRAcgQXFrkYs3nrT2sdVMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QRUlDSVRZMjYw LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BF SUNJVFkyNjAvMC85M0EyRDE5MTI3MUQxMDFDODEwNUM1QUU0NjJDREU3QUQzREFD NzU1Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3XgMA0EAgACMAcDBQAkBhdAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwICKzANBgkqhkiG9w0BAQsFAAOCAQEAfpCjpf+E 40fhmZY2iJisBVxwqKSemjDWhaHHEJupTncbE9yTIHHOfchOb295Txh1YZbMua0q st3mGyP/3p6daYehRcTIilyG64jAMK5ZpbeF++VoIHLBlpTMEg0d2L2YQJzN/63k 5iEXKIgpZ//bP4J4fwK6YkeXLyL8KPOsJ5O7jN43UE2GZxTDhbJOV+H64d5r7cn6 yHDu+ucZpnW/Gzu+F5BVHA9MQF5XD1v79YaeyHPht3wBLJ+BaHz4qnGYAr5Z2exF dOTg5Wh+aaGFkTrpgLsMLXiHkohTXUBOBknfwkqepjwSjjbpvWE2bZpkfmKpPtq6 kmCMj99+7aUFSA== -----END CERTIFICATE-----Generated at Tue May 12 22:31:58 2026 by rpki-client