$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer File: A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer (raw, json) Hash identifier: tRmxh22DMGRSV0CiCq1QkBSOnpZA2gE8Ry2BbgTdXyw= Subject key identifier: A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 20F5540A360B1B9A0F873AED2DB8B98ECCB9F324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft caRepository: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:45:16 +0000 Certificate not after: Mon 10 May 2027 15:50:16 +0000 Subordinate resources: IP: 103.118.148.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f5:54:0a:36:0b:1b:9a:0f:87:3a:ed:2d:b8:b9:8e:cc:b9:f3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:45:16 2026 GMT Not After : May 10 15:50:16 2027 GMT Subject: CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:73:da:2e:c6:1d:cd:a6:6c:f3:d8:1a:39: 97:71:15:b2:60:13:76:b8:ec:80:1c:11:59:11:a6: af:1d:90:09:d8:c5:ba:45:59:d3:81:3e:88:30:b6: 92:f8:1b:ae:56:fb:8c:89:bb:5a:d3:81:47:74:c1: ff:60:10:c6:94:1f:06:fc:96:54:01:51:d5:87:4b: f2:06:a7:8a:5f:32:b1:57:93:0f:51:a1:29:7d:f8: 1d:c9:07:cc:eb:d1:93:97:20:45:c3:dc:36:8f:c3: 3a:a5:ae:1a:09:e3:6a:19:f1:40:f7:c2:06:ca:de: a5:10:fa:e3:2c:3b:90:29:1a:88:5c:29:2e:db:1f: 20:5b:f0:d0:7f:57:47:95:53:e4:02:d7:75:a3:1e: 2c:a3:c0:c5:a0:4a:d7:3d:60:12:7c:d4:7d:9c:76: ca:c4:e8:3c:9e:5a:cf:df:9d:d3:b5:0d:ba:e1:f4: fd:45:39:9d:c3:2f:af:eb:e2:f1:ca:4e:17:10:89: b8:dc:79:69:de:3e:56:1c:4b:a1:2a:68:99:bf:8b: 7e:0e:64:25:33:a7:b1:00:d0:c8:f6:30:a1:4c:49: 29:a5:12:a5:7c:fc:80:26:ee:36:a1:87:2f:d7:38: b0:39:d2:a5:67:ec:b3:e4:fd:e9:e1:85:5e:54:bb: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.148.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:77:ea:a5:a5:c2:56:9e:c2:c8:1b:49:c8:cb:73:0c:38:3d: 52:2a:26:8a:a7:dc:41:45:a1:a0:10:f1:78:0c:8f:2c:c8:4f: b9:0c:7a:b9:35:98:15:87:4a:06:08:01:d5:5a:2d:0e:b1:6a: f1:9f:5f:18:06:1f:9e:39:c6:7e:c4:7a:b8:32:52:ac:12:4f: bd:10:1c:80:f3:2c:16:01:8a:3f:42:77:43:11:d3:52:cb:21: 6b:be:2e:44:61:d6:7a:c1:4e:fc:2c:c4:06:60:40:c5:86:9c: 3f:60:15:98:5f:c9:4f:07:59:45:da:6b:9a:07:4c:e9:fa:62: 34:38:1a:8d:c3:12:38:3d:44:a6:be:98:55:c9:a9:22:21:fb: fb:74:31:8a:78:89:62:49:f4:16:aa:33:db:4b:26:0f:8d:09: 6a:92:15:0a:82:e6:fa:c4:0c:25:ec:46:fe:15:f7:f1:42:e5: e2:23:47:e2:a5:88:2c:a1:85:21:08:0a:30:e0:98:9c:77:05: e3:93:39:15:b1:23:c5:0f:3f:fe:67:22:e4:7b:72:06:48:48: 9e:e7:e9:2c:ae:75:a9:34:24:45:62:8c:37:da:dc:07:c1:d3: b9:99:c0:90:aa:9d:c1:7c:03:bc:a3:d8:a1:b8:7d:e6:71:87: 47:eb:eb:19 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIUIPVUCjYLG5oPhzrtLbi5jsy58yQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDUxNloX DTI3MDUxMDE1NTAxNlowMzExMC8GA1UEAxMoQTA2N0E5NUNCNzg4MjkzOEJBNUVF MEJGOUU0N0MyRTAzMEVERjZGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9fc9ouxh3Npmzz2Bo5l3EVsmATdrjsgBwRWRGmrx2QCdjFukVZ04E+iDC2 kvgbrlb7jIm7WtOBR3TB/2AQxpQfBvyWVAFR1YdL8ganil8ysVeTD1GhKX34HckH zOvRk5cgRcPcNo/DOqWuGgnjahnxQPfCBsrepRD64yw7kCkaiFwpLtsfIFvw0H9X R5VT5ALXdaMeLKPAxaBK1z1gEnzUfZx2ysToPJ5az9+d07UNuuH0/UU5ncMvr+vi 8cpOFxCJuNx5ad4+VhxLoSpomb+Lfg5kJTOnsQDQyPYwoUxJKaUSpXz8gCbuNqGH L9c4sDnSpWfss+T96eGFXlS7NMkCAwEAAaOCAmgwggJkMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKBnqVy3iCk4ul7gv55HwuAw7fb7MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET1dOV0lOLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPV05X SU4vMC9BMDY3QTk1Q0I3ODgyOTM4QkE1RUUwQkY5RTQ3QzJFMDMwRURGNkZCLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBZ3aUMA0GCSqGSIb3DQEBCwUAA4IBAQA/d+qlpcJW nsLIG0nIy3MMOD1SKiaKp9xBRaGgEPF4DI8syE+5DHq5NZgVh0oGCAHVWi0OsWrx n18YBh+eOcZ+xHq4MlKsEk+9EByA8ywWAYo/QndDEdNSyyFrvi5EYdZ6wU78LMQG YEDFhpw/YBWYX8lPB1lF2muaB0zp+mI0OBqNwxI4PUSmvphVyakiIfv7dDGKeIli SfQWqjPbSyYPjQlqkhUKgub6xAwl7Eb+FffxQuXiI0fipYgsoYUhCAow4JicdwXj kzkVsSPFDz/+ZyLke3IGSEie5+ksrnWpNCRFYow32twHwdO5mcCQqp3BfAO8o9ih uH3mcYdH6+sZ -----END CERTIFICATE-----Generated at Tue May 12 22:33:12 2026 by rpki-client