$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.cer File: ACF64AAE08A591A2FF9B687E110069B7FA25F54F.cer (raw, json) Hash identifier: NoxkJaxAI0SnqgspUocBD3ZzZ7dBwJnfDBhKWLzM2N4= Subject key identifier: AC:F6:4A:AE:08:A5:91:A2:FF:9B:68:7E:11:00:69:B7:FA:25:F5:4F Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 08539A4034D9041E5365DE1872B3D3BDCC5C9FA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft caRepository: rsync://rpkica.twnic.tw/rpki/TCC/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:57:37 +0000 Certificate not after: Mon 10 May 2027 16:02:37 +0000 Subordinate resources: IP: 103.123.184.0/22 IP: 2403:a740::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:53:9a:40:34:d9:04:1e:53:65:de:18:72:b3:d3:bd:cc:5c:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:57:37 2026 GMT Not After : May 10 16:02:37 2027 GMT Subject: CN=ACF64AAE08A591A2FF9B687E110069B7FA25F54F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:f6:fb:2f:01:8b:ec:6d:79:72:f9:2e:22: 90:f2:b6:c9:f4:1a:72:bc:f0:52:3a:eb:39:a4:a7: f8:78:57:b9:26:32:65:16:48:27:73:90:ad:28:1d: 25:00:d9:7b:b4:2d:96:41:f3:10:9c:5e:2f:e6:e6: 86:a8:95:47:8a:c0:a3:f0:d1:57:7f:3f:fa:3b:15: 71:89:a2:f4:2c:1b:57:49:d6:f4:5b:f0:37:69:a4: c3:c0:33:0e:83:81:83:a1:f2:32:6e:93:47:11:ba: 3c:ad:cf:8a:fc:10:40:b8:30:ac:21:15:ac:b0:b5: c8:3a:22:87:70:71:86:4e:b4:c7:5e:3a:6e:f9:2a: 47:fe:f2:4e:a6:4f:3e:e5:24:3a:2f:f6:e1:eb:a4: 51:a7:24:c3:d8:fb:3a:99:30:af:23:ef:98:f2:ec: 33:a3:a8:9f:03:57:d6:7f:98:3d:17:53:b5:2a:de: f3:34:74:a8:3f:47:7d:3d:2d:f6:a6:c6:33:44:34: f1:83:0f:83:45:1c:b5:04:3e:37:cf:0d:bf:94:be: 5f:32:7f:bb:26:15:79:6e:ec:2b:16:e0:74:b5:77: a6:5a:46:f3:54:cd:d5:a6:43:c7:22:a0:66:fc:dd: 6e:e0:4d:0f:0c:6e:25:cd:e0:65:70:af:04:6b:0a: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:F6:4A:AE:08:A5:91:A2:FF:9B:68:7E:11:00:69:B7:FA:25:F5:4F X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TCC/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TCC/0/ACF64AAE08A591A2FF9B687E110069B7FA25F54F.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.184.0/22 IPv6: 2403:a740::/32 Signature Algorithm: sha256WithRSAEncryption 02:32:be:c5:0e:39:f4:b2:c9:49:16:2e:4e:67:b1:28:cd:75: 8e:74:c0:6c:1f:7f:48:05:e0:64:02:c4:83:a6:5c:05:61:6b: 22:63:5b:84:0b:c5:c4:9d:b8:bf:18:dd:e9:b3:19:f7:9c:58: e7:1e:95:6d:0c:de:d5:bc:fc:f8:17:10:ae:31:64:63:3f:c0: b7:af:e1:99:44:0a:fc:ee:a2:6c:72:89:f5:64:28:5b:85:b0: a3:df:ad:d7:9e:0f:f6:c1:e5:63:80:b5:9f:06:01:1e:20:5c: 84:2a:89:7c:02:49:7e:56:a1:91:bc:9e:4e:38:3b:5a:69:30: 4a:d8:b0:ef:26:2e:17:c7:1d:6a:9d:22:06:97:20:48:f9:b3: 7c:8a:37:45:c6:05:38:86:77:89:00:d5:2e:ca:b0:ac:a4:83: 92:3a:99:96:5b:c4:d1:5e:0e:80:a3:5f:fd:f0:0c:1e:60:77: ff:f7:23:7c:0b:37:5c:a9:1e:82:74:85:1d:66:d1:92:2d:ca: e4:47:4e:fb:c7:29:b4:19:7d:8a:2e:a1:ac:a0:dc:c7:ef:42: 90:f2:74:fc:b8:46:84:2e:58:5e:95:f1:1c:47:98:c8:df:97: 28:09:da:e5:69:73:a3:0d:79:4b:9b:0b:27:0c:49:e0:6c:cd: 98:3c:2e:6f -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUCFOaQDTZBB5TZd4YcrPTvcxcn6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTczN1oX DTI3MDUxMDE2MDIzN1owMzExMC8GA1UEAxMoQUNGNjRBQUUwOEE1OTFBMkZGOUI2 ODdFMTEwMDY5QjdGQTI1RjU0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWn9vsvAYvsbXly+S4ikPK2yfQacrzwUjrrOaSn+HhXuSYyZRZIJ3OQrSgd JQDZe7QtlkHzEJxeL+bmhqiVR4rAo/DRV38/+jsVcYmi9CwbV0nW9FvwN2mkw8Az DoOBg6HyMm6TRxG6PK3PivwQQLgwrCEVrLC1yDoih3Bxhk60x146bvkqR/7yTqZP PuUkOi/24eukUackw9j7OpkwryPvmPLsM6OonwNX1n+YPRdTtSre8zR0qD9HfT0t 9qbGM0Q08YMPg0UctQQ+N88Nv5S+XzJ/uyYVeW7sKxbgdLV3plpG81TN1aZDxyKg ZvzdbuBNDwxuJc3gZXCvBGsKX70CAwEAAaOCAm8wggJrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKz2Sq4IpZGi/5tofhEAabf6JfVPMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHXBggrBgEFBQcBCwSByjCBxzAvBggr BgEFBQcwBYYjcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ0MvMC8wWwYI KwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVENDLzAvQUNG NjRBQUUwOEE1OTFBMkZGOUI2ODdFMTEwMDY5QjdGQTI1RjU0Ri5tZnQwNwYIKwYB BQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNhdGlvbi54 bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmd7uDANBAIAAjAHAwUAJAOnQDANBgkqhkiG9w0BAQsFAAOCAQEA AjK+xQ459LLJSRYuTmexKM11jnTAbB9/SAXgZALEg6ZcBWFrImNbhAvFxJ24vxjd 6bMZ95xY5x6VbQze1bz8+BcQrjFkYz/At6/hmUQK/O6ibHKJ9WQoW4Wwo9+t154P 9sHlY4C1nwYBHiBchCqJfAJJflahkbyeTjg7WmkwStiw7yYuF8cdap0iBpcgSPmz fIo3RcYFOIZ3iQDVLsqwrKSDkjqZllvE0V4OgKNf/fAMHmB3//cjfAs3XKkegnSF HWbRki3K5EdO+8cptBl9ii6hrKDcx+9CkPJ0/LhGhC5YXpXxHEeYyN+XKAna5Wlz ow15S5sLJwxJ4GzNmDwubw== -----END CERTIFICATE-----Generated at Wed May 13 00:43:29 2026 by rpki-client