$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer File: AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer (raw, json) Hash identifier: ntQkyX2zCYrLlPb7L+bbenXJsCVGeUAKbfKaXbPT20g= Subject key identifier: AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 71C042D017DE854F3E2255194D5ED38240BF533D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft caRepository: rsync://rpkica.twnic.tw/rpki/XINAN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 16:00:58 +0000 Certificate not after: Mon 10 May 2027 16:05:58 +0000 Subordinate resources: IP: 103.64.20.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c0:42:d0:17:de:85:4f:3e:22:55:19:4d:5e:d3:82:40:bf:53:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 16:00:58 2026 GMT Not After : May 10 16:05:58 2027 GMT Subject: CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:aa:2b:55:cc:27:9e:8d:ad:48:fa:2d:3d: 18:96:36:49:f9:8e:1d:e9:16:e4:27:31:8e:f1:da: 27:97:a8:5c:9b:55:c4:f0:83:cb:17:ba:1e:ee:cc: 77:d8:ed:85:91:06:2f:ed:59:cb:d9:4f:d2:b8:ee: 86:23:4a:32:96:30:a1:cc:e5:92:7e:6d:bb:21:b9: 9b:3d:bb:19:83:72:13:4f:4c:a2:a3:99:ac:3f:d1: 6d:ff:bc:22:c1:53:3f:54:c3:9c:4d:e0:7a:b5:b6: de:72:21:2c:0c:72:73:81:12:23:7f:08:41:1c:55: 00:c0:3f:05:70:20:ba:f1:07:0a:46:23:d5:fc:c6: 8f:1f:29:6f:35:c5:4a:bb:a3:e9:42:46:ff:53:64: 3a:13:d7:9b:8f:13:df:85:f3:48:61:f4:f7:67:a3: 21:ee:a3:af:c1:b1:11:86:65:ef:87:06:96:db:15: 85:1f:46:af:66:20:16:09:93:f1:f8:51:4b:4d:f1: 4e:4d:e3:e8:9e:04:cd:0e:e5:a2:f5:84:04:f0:2d: 2c:b3:1d:77:7d:a7:2a:44:e8:32:c3:9e:78:be:b1: 27:3c:27:1e:26:53:da:71:ab:c7:c7:fd:5f:4f:87: 0e:f7:78:40:0c:64:ef:6f:c6:a3:97:fd:c7:97:5c: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.64.20.0/23 Signature Algorithm: sha256WithRSAEncryption 32:cd:64:aa:37:40:33:43:db:fa:19:e2:4e:f1:34:44:9e:64: 7c:b1:e9:c4:c5:5e:94:d6:82:c2:ff:b9:5c:7a:cf:3f:6b:a0: 5d:ec:20:3c:29:eb:92:6c:f0:3d:e4:1e:23:49:f4:f7:00:d2: 4f:55:f6:13:a5:3e:b5:13:67:34:3a:ae:22:29:a3:f1:b4:aa: 16:d4:6d:8a:63:04:2b:70:5a:0d:fc:3f:f9:0a:3e:21:e3:81: a2:db:5d:f3:cf:35:f8:f4:66:10:db:e2:7e:47:3b:7b:be:99: 0c:76:18:dd:d1:ca:f2:d3:87:2c:80:d0:17:a7:ae:be:af:cf: ef:d3:57:96:14:cc:b7:45:cf:9f:de:cd:f6:18:ea:d7:e5:6b: f9:8c:77:ba:41:83:d2:90:50:01:e9:d4:49:62:9f:4e:65:56: 4b:d7:89:9c:1d:ac:87:c2:5e:9b:db:b7:d4:c2:81:59:24:79: 9d:1c:4f:a3:57:17:93:c4:b3:f5:34:16:84:b0:10:2d:e3:c0: d7:cb:94:8f:17:73:e2:7c:86:62:b6:29:f5:07:37:18:07:b6: c9:e3:88:42:53:da:a2:c4:7d:e5:06:71:27:a0:49:d8:75:2f: ee:de:b8:f3:20:6b:19:41:f7:e4:34:05:9d:2d:10:6b:78:11: 54:87:46:f2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUccBC0BfehU8+IlUZTV7TgkC/Uz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDA1OFoX DTI3MDUxMDE2MDU1OFowMzExMC8GA1UEAxMoQUVFNjNBQThCN0ExMDkyRTE4NThD RTI4REZDN0ZCMDdFQ0QwRDAyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsmqitVzCeeja1I+i09GJY2SfmOHekW5CcxjvHaJ5eoXJtVxPCDyxe6Hu7M d9jthZEGL+1Zy9lP0rjuhiNKMpYwoczlkn5tuyG5mz27GYNyE09MoqOZrD/Rbf+8 IsFTP1TDnE3gerW23nIhLAxyc4ESI38IQRxVAMA/BXAguvEHCkYj1fzGjx8pbzXF Sruj6UJG/1NkOhPXm48T34XzSGH092ejIe6jr8GxEYZl74cGltsVhR9Gr2YgFgmT 8fhRS03xTk3j6J4EzQ7lovWEBPAtLLMdd32nKkToMsOeeL6xJzwnHiZT2nGrx8f9 X0+HDvd4QAxk72/Go5f9x5dcixsCAwEAAaOCAmQwggJgMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK7mOqi3oQkuGFjOKN/H+wfs0NAvMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9YSU5BTi8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9YSU5BTi8w L0FFRTYzQUE4QjdBMTA5MkUxODU4Q0UyOERGQzdGQjA3RUNEMEQwMkYubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnQBQwDQYJKoZIhvcNAQELBQADggEBADLNZKo3QDND2/oZ 4k7xNESeZHyx6cTFXpTWgsL/uVx6zz9roF3sIDwp65Js8D3kHiNJ9PcA0k9V9hOl PrUTZzQ6riIpo/G0qhbUbYpjBCtwWg38P/kKPiHjgaLbXfPPNfj0ZhDb4n5HO3u+ mQx2GN3RyvLThyyA0Benrr6vz+/TV5YUzLdFz5/ezfYY6tfla/mMd7pBg9KQUAHp 1Elin05lVkvXiZwdrIfCXpvbt9TCgVkkeZ0cT6NXF5PEs/U0FoSwEC3jwNfLlI8X c+J8hmK2KfUHNxgHtsnjiEJT2qLEfeUGcSegSdh1L+7euPMgaxlB9+Q0BZ0tEGt4 EVSHRvI= -----END CERTIFICATE-----Generated at Tue May 12 22:16:45 2026 by rpki-client