$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/AE6BAF44145B748B247B352467ADFF5B9D076559.cer File: AE6BAF44145B748B247B352467ADFF5B9D076559.cer (raw, json) Hash identifier: 7NTAWvM1Q4SOZxqzfl4uD4IPtc1uWsGDb9yldCBbZnA= Subject key identifier: AE:6B:AF:44:14:5B:74:8B:24:7B:35:24:67:AD:FF:5B:9D:07:65:59 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 1ADA245821E0FF28A8A61EA10D3CC396B74DF6C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/PARAMITA/0/AE6BAF44145B748B247B352467ADFF5B9D076559.mft caRepository: rsync://rpkica.twnic.tw/rpki/PARAMITA/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:55:45 +0000 Certificate not after: Mon 10 May 2027 16:00:45 +0000 Subordinate resources: AS: 38853 IP: 103.169.46.0/23 IP: 2407:9a40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:da:24:58:21:e0:ff:28:a8:a6:1e:a1:0d:3c:c3:96:b7:4d:f6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:55:45 2026 GMT Not After : May 10 16:00:45 2027 GMT Subject: CN=AE6BAF44145B748B247B352467ADFF5B9D076559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:44:2d:b9:86:89:92:09:0b:be:b2:ae:53:62: 8d:cf:f9:0d:7f:cd:ff:53:1a:07:17:63:e8:af:cb: 02:6f:87:56:9f:fe:94:84:46:f4:3c:20:0a:f1:ec: 29:a9:44:28:57:e3:ed:f0:54:de:d4:d4:55:4d:cd: 06:1a:3a:25:db:4c:a7:e7:cd:f4:7c:36:d2:f5:51: 56:d3:52:2b:48:9a:ae:c5:d8:77:d8:17:4d:73:da: eb:86:f2:77:d4:c2:3e:b7:28:03:f7:49:fe:5f:e9: 54:08:46:eb:b8:8a:29:b4:75:3a:a5:c9:95:96:a7: 4d:ee:a7:e4:95:5c:a3:56:53:e8:de:50:3b:bf:b4: 64:9c:a3:a9:7b:83:41:84:b3:e1:68:8e:7d:ec:f1: 99:de:c5:7a:7d:2a:2c:ac:5f:b3:21:d1:a2:06:1f: 0b:d4:47:d8:91:b7:df:2e:f4:87:92:82:72:4e:2a: 88:91:97:f8:58:9a:f5:99:b1:76:5e:d8:a7:25:87: ca:1d:03:43:9d:75:ec:3e:b3:ee:1a:80:6d:34:f2: ae:33:00:a0:3d:9d:15:84:e1:0b:28:e1:1f:a5:93: ff:ec:52:d1:e5:a1:35:1c:2a:c2:ba:7d:2d:78:ee: 43:90:bc:7b:ea:7c:59:38:7b:23:83:c1:b2:db:4d: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:6B:AF:44:14:5B:74:8B:24:7B:35:24:67:AD:FF:5B:9D:07:65:59 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PARAMITA/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PARAMITA/0/AE6BAF44145B748B247B352467ADFF5B9D076559.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.46.0/23 IPv6: 2407:9a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38853 Signature Algorithm: sha256WithRSAEncryption 80:a5:16:8d:c5:35:d7:cd:74:cb:97:05:4c:c9:98:3a:1d:48: 7c:22:88:88:18:34:cc:7f:a7:21:e6:7a:5f:d6:17:5d:4a:de: 38:53:05:9f:c3:e1:09:b0:a9:10:87:a3:b6:bf:73:de:0e:12: ab:63:20:6d:6d:50:3b:fa:b7:ac:73:93:19:31:77:1c:c9:4f: 62:fe:a6:7a:9a:3b:a4:06:90:f9:b5:f5:dc:92:9c:42:b0:e2: 8d:67:ae:cf:10:53:91:6d:f8:c3:b2:f9:a6:5f:4f:34:2a:89: 6b:25:ef:7e:4e:ce:79:17:a3:c7:fe:3d:13:06:de:78:3b:82: b9:ca:0e:aa:2a:66:fd:5e:77:b6:71:c8:46:d4:8f:de:d4:95: 9e:45:ab:aa:f5:c4:13:e2:34:3b:cf:8e:4f:b5:b0:3c:26:40: 2b:c6:f4:42:f4:d6:66:23:27:85:3d:48:ab:9f:1e:4a:e2:06: a3:82:ea:d5:87:34:53:21:92:4c:c9:1b:54:16:9b:55:e5:5f: c7:13:fc:50:5b:e6:72:bf:18:25:a8:8a:73:47:39:ca:c3:7a: fc:2f:16:22:ab:9a:bd:08:e6:c1:6e:aa:a1:f4:dc:94:13:aa: 1a:db:18:04:ed:04:41:ea:8b:47:b5:6d:52:26:e7:56:9d:d3: 30:83:ec:21 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUGtokWCHg/yioph6hDTzDlrdN9sgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTU0NVoX DTI3MDUxMDE2MDA0NVowMzExMC8GA1UEAxMoQUU2QkFGNDQxNDVCNzQ4QjI0N0Iz NTI0NjdBREZGNUI5RDA3NjU1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIlELbmGiZIJC76yrlNijc/5DX/N/1MaBxdj6K/LAm+HVp/+lIRG9DwgCvHs KalEKFfj7fBU3tTUVU3NBho6JdtMp+fN9Hw20vVRVtNSK0iarsXYd9gXTXPa64by d9TCPrcoA/dJ/l/pVAhG67iKKbR1OqXJlZanTe6n5JVco1ZT6N5QO7+0ZJyjqXuD QYSz4WiOfezxmd7Fen0qLKxfsyHRogYfC9RH2JG33y70h5KCck4qiJGX+Fia9Zmx dl7YpyWHyh0DQ5117D6z7hqAbTTyrjMAoD2dFYThCyjhH6WT/+xS0eWhNRwqwrp9 LXjuQ5C8e+p8WTh7I4PBsttNvmsCAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK5rr0QUW3SLJHs1JGet/1udB2VZMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QQVJBTUlUQS8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QQVJB TUlUQS8wL0FFNkJBRjQ0MTQ1Qjc0OEIyNDdCMzUyNDY3QURGRjVCOUQwNzY1NTku bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnqS4wDQQCAAIwBwMFACQHmkAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJfFMA0GCSqGSIb3DQEBCwUAA4IBAQCApRaNxTXXzXTL lwVMyZg6HUh8IoiIGDTMf6ch5npf1hddSt44UwWfw+EJsKkQh6O2v3PeDhKrYyBt bVA7+resc5MZMXccyU9i/qZ6mjukBpD5tfXckpxCsOKNZ67PEFORbfjDsvmmX080 KolrJe9+Ts55F6PH/j0TBt54O4K5yg6qKmb9Xne2cchG1I/e1JWeRauq9cQT4jQ7 z45PtbA8JkArxvRC9NZmIyeFPUirnx5K4gajgurVhzRTIZJMyRtUFptV5V/HE/xQ W+ZyvxglqIpzRznKw3r8LxYiq5q9CObBbqqh9NyUE6oa2xgE7QRB6otHtW1SJudW ndMwg+wh -----END CERTIFICATE-----Generated at Tue May 12 22:02:44 2026 by rpki-client