$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer File: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer (raw, json) Hash identifier: TjACbzxkBT7VL7klZ0azH8c+eKo44/Q10jvYB0WPrr8= Subject key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 127FEF4505E97941B126ADD3C85172869B1B5738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft caRepository: rsync://rpkica.twnic.tw/rpki/DAFU/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:52 +0000 Certificate not after: Mon 10 May 2027 15:49:52 +0000 Subordinate resources: IP: 210.1.234.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7f:ef:45:05:e9:79:41:b1:26:ad:d3:c8:51:72:86:9b:1b:57:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:44:52 2026 GMT Not After : May 10 15:49:52 2027 GMT Subject: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:5f:2f:85:03:c2:33:a0:72:e6:c3:37:6d: e3:a1:ac:a4:0b:09:d5:bd:55:60:8c:66:7c:42:30: b2:eb:97:5d:30:fe:2e:8d:c2:2f:e0:ac:fb:09:f9: 17:aa:ae:42:b8:65:91:ae:42:1b:76:51:dd:82:e5: ca:f9:fe:78:2d:51:a7:03:5e:77:01:0e:2f:4b:89: af:a7:bf:b7:59:a9:e7:50:c0:d8:70:3b:45:8a:9b: ad:7a:93:83:1e:18:ee:23:46:6f:39:2a:ad:07:b0: 88:e4:3c:cb:4e:ee:d7:f0:ef:bf:5b:58:8a:5b:a1: f1:34:f2:2f:5e:71:24:0f:e0:ee:12:7b:25:a1:a7: 1f:ed:01:07:18:bc:78:b7:86:9d:5e:d5:2a:bd:fa: 43:e3:2a:f2:dd:26:89:61:ca:ba:65:01:c5:d0:5e: 22:9a:2b:6b:ea:20:8a:ca:6f:f5:d1:68:9d:01:0c: be:d6:9e:1e:b2:f3:7d:fb:ef:11:a2:af:a4:87:ee: a1:bf:20:5c:61:d8:ee:b3:89:43:4f:e3:21:41:b2: 04:ef:2b:c1:13:1d:9d:45:99:75:26:a2:11:5d:40: 25:01:a2:11:0d:3c:84:3d:c6:b9:8c:97:0d:16:9b: 7f:a9:ee:61:33:e2:19:72:57:7b:17:47:81:43:7d: 22:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.1.234.0/23 Signature Algorithm: sha256WithRSAEncryption 64:a9:2c:28:18:1b:aa:80:c1:11:46:11:01:16:9c:ee:5e:0e: 68:38:a6:2d:49:a2:c3:e0:9b:e7:ef:3c:6b:3d:df:39:09:ff: 13:79:df:8a:2a:1c:fd:86:37:64:42:14:d4:88:76:a8:5e:aa: 91:2c:5c:7e:81:fa:e6:8b:68:d5:9d:8a:a9:c0:67:30:63:59: 41:7f:e3:20:8c:cc:be:8c:57:9c:45:b7:8f:21:b3:23:1a:03: 32:96:a2:67:71:c9:89:b2:b1:81:17:e0:10:1e:7a:93:a0:11: 43:53:fc:b9:8b:71:1b:3b:2c:ca:44:75:14:04:b2:c2:18:c6: b9:e6:a7:eb:e9:15:98:1f:40:4f:f0:37:60:0d:d8:7c:34:b8: 98:f5:fd:9f:14:58:de:5f:1f:83:c3:54:12:37:d4:ee:51:4f: 48:40:9e:a8:13:de:53:ac:54:03:31:ce:0a:ed:ef:82:8a:65: 02:35:55:95:05:aa:64:b6:a6:37:7a:0e:26:8e:33:16:8c:2c: d2:37:db:55:78:f6:cd:fe:81:a0:01:5d:eb:b8:cd:1c:80:d2: 16:3f:fe:06:b7:27:ae:f7:62:c8:0e:70:ce:29:f9:67:84:98: 73:24:92:69:17:d7:2d:60:b6:c6:b0:4b:8f:ad:62:3f:00:f1: 84:0c:7e:9e -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUEn/vRQXpeUGxJq3TyFFyhpsbVzgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDQ1MloX DTI3MDUxMDE1NDk1MlowMzExMC8GA1UEAxMoOUQwRjZENTM2RjA1M0MzQkI1MjMz RTY4RTA2MzZGOEE2RkFEQTQ2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHPXy+FA8IzoHLmwzdt46GspAsJ1b1VYIxmfEIwsuuXXTD+Lo3CL+Cs+wn5 F6quQrhlka5CG3ZR3YLlyvn+eC1RpwNedwEOL0uJr6e/t1mp51DA2HA7RYqbrXqT gx4Y7iNGbzkqrQewiOQ8y07u1/Dvv1tYiluh8TTyL15xJA/g7hJ7JaGnH+0BBxi8 eLeGnV7VKr36Q+Mq8t0miWHKumUBxdBeIpora+ogispv9dFonQEMvtaeHrLzffvv EaKvpIfuob8gXGHY7rOJQ0/jIUGyBO8rwRMdnUWZdSaiEV1AJQGiEQ08hD3GuYyX DRabf6nuYTPiGXJXexdHgUN9IgkCAwEAAaOCAmIwggJeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ0PbVNvBTw7tSM+aOBjb4pvraRgMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9EQUZVLzAvMFwG CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RBRlUvMC85 RDBGNkQ1MzZGMDUzQzNCQjUyMzNFNjhFMDYzNkY4QTZGQURBNDYwLm1mdDA3Bggr BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQB0gHqMA0GCSqGSIb3DQEBCwUAA4IBAQBkqSwoGBuqgMERRhEB FpzuXg5oOKYtSaLD4Jvn7zxrPd85Cf8Ted+KKhz9hjdkQhTUiHaoXqqRLFx+gfrm i2jVnYqpwGcwY1lBf+MgjMy+jFecRbePIbMjGgMylqJnccmJsrGBF+AQHnqToBFD U/y5i3EbOyzKRHUUBLLCGMa55qfr6RWYH0BP8DdgDdh8NLiY9f2fFFjeXx+Dw1QS N9TuUU9IQJ6oE95TrFQDMc4K7e+CimUCNVWVBapktqY3eg4mjjMWjCzSN9tVePbN /oGgAV3ruM0cgNIWP/4Gtyeu92LIDnDOKflnhJhzJJJpF9ctYLbGsEuPrWI/APGE DH6e -----END CERTIFICATE-----Generated at Tue May 12 22:16:10 2026 by rpki-client