$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/B2582518BCAC6612C1BCB24D9EFCD0CB6F66C5CC.cer File: B2582518BCAC6612C1BCB24D9EFCD0CB6F66C5CC.cer (raw, json) Hash identifier: 1gXLlNaLK1UVHHbishbTCR9eUwdixQQqj/0gEKVO6Bk= Subject key identifier: B2:58:25:18:BC:AC:66:12:C1:BC:B2:4D:9E:FC:D0:CB:6F:66:C5:CC Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 3F4BFEB6E00536D88A7DBDF6658E0E6148D0E604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/OBANK/0/B2582518BCAC6612C1BCB24D9EFCD0CB6F66C5CC.mft caRepository: rsync://rpkica.twnic.tw/rpki/OBANK/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 18:29:57 +0000 Certificate not after: Mon 10 May 2027 18:34:57 +0000 Subordinate resources: IP: 103.125.64.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4b:fe:b6:e0:05:36:d8:8a:7d:bd:f6:65:8e:0e:61:48:d0:e6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 18:29:57 2026 GMT Not After : May 10 18:34:57 2027 GMT Subject: CN=B2582518BCAC6612C1BCB24D9EFCD0CB6F66C5CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:23:c2:7f:73:5f:cc:62:0a:9e:0c:4b:81: 90:62:64:1a:15:80:4d:0d:30:ab:8f:18:8f:2b:e9: 2c:4e:21:0a:1b:c3:96:df:36:e6:18:1f:33:01:8c: 5d:7b:f7:8b:42:81:f8:ad:e2:b9:ac:52:76:bb:47: 61:c6:5b:47:3a:12:c0:e6:f3:2a:0b:80:1a:9b:0b: a5:72:90:b0:ac:1f:77:55:d2:40:32:74:24:79:5c: 02:bd:59:7e:9a:58:48:97:69:58:43:bf:87:c4:7e: fb:36:48:7f:4a:2f:91:75:85:5a:ae:3c:43:4a:ef: 6c:cf:85:4e:2a:f5:38:d1:eb:86:45:53:97:f3:d6: 24:f6:28:70:96:78:9a:56:69:1e:fa:3c:68:a3:ce: 46:bc:14:4f:43:41:fb:b6:68:8e:f5:b6:72:9e:b0: e5:59:d4:91:e9:b8:1a:91:c2:d4:9d:98:3a:b8:d4: 66:14:3e:1e:54:af:52:52:49:ab:52:fa:3a:00:d3: f1:56:f8:ad:2f:ed:ee:5a:ea:81:67:47:e8:9e:80: a5:09:38:7e:b6:60:33:8e:e9:a9:c9:ea:4e:9c:8f: c9:b5:db:69:0d:d7:b2:bf:ce:82:5e:43:ef:cd:43: 9f:9a:05:31:73:03:a5:0b:30:e8:c6:fa:dc:bc:58: db:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:58:25:18:BC:AC:66:12:C1:BC:B2:4D:9E:FC:D0:CB:6F:66:C5:CC X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/OBANK/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/OBANK/0/B2582518BCAC6612C1BCB24D9EFCD0CB6F66C5CC.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.64.0/22 Signature Algorithm: sha256WithRSAEncryption 33:9c:2b:13:bd:98:86:a4:2f:dd:53:b0:ec:d9:a5:7d:53:0d: fd:ed:b0:e4:3a:77:d1:cd:31:d9:05:a7:1a:39:a1:bb:9a:9e: 73:93:01:0c:38:11:a8:bf:85:dc:e8:48:8a:fe:54:97:81:ed: 2d:6f:d5:a6:97:c3:2e:7b:29:72:50:27:4f:8d:68:77:67:85: 04:30:b3:53:d6:e0:d9:fd:15:39:6a:e4:e2:98:93:b7:ac:6a: 6a:73:6c:69:1d:71:c0:97:ce:5d:ac:0f:00:69:41:7e:97:14: 89:65:5d:8a:b8:68:02:6b:bf:92:19:0c:81:d3:fc:33:5b:ca: 2e:ef:19:8c:20:74:fe:ba:9c:dd:ca:df:f0:f9:32:32:76:45: 27:6a:1c:ee:03:fa:5d:bf:2f:de:88:64:9b:66:cb:1b:13:c5: 53:54:67:fb:59:3d:e1:b1:80:1e:f4:5a:26:59:89:69:7e:f1: fb:01:d2:bb:3b:96:09:07:56:d5:34:92:59:bc:73:59:5a:9f: e1:a1:3b:70:64:f9:ab:a6:2d:b1:99:ed:f5:41:fd:41:91:55: dc:a4:f3:6b:24:1e:b3:94:6b:9c:99:86:97:66:7e:f8:30:76: fa:98:90:c3:bd:0f:0d:04:e7:6c:cd:2b:98:46:3d:ba:52:15: 87:ca:19:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUP0v+tuAFNtiKfb32ZY4OYUjQ5gQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE4Mjk1N1oX DTI3MDUxMDE4MzQ1N1owMzExMC8GA1UEAxMoQjI1ODI1MThCQ0FDNjYxMkMxQkNC MjREOUVGQ0QwQ0I2RjY2QzVDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJymI8J/c1/MYgqeDEuBkGJkGhWATQ0wq48YjyvpLE4hChvDlt825hgfMwGM XXv3i0KB+K3iuaxSdrtHYcZbRzoSwObzKguAGpsLpXKQsKwfd1XSQDJ0JHlcAr1Z fppYSJdpWEO/h8R++zZIf0ovkXWFWq48Q0rvbM+FTir1ONHrhkVTl/PWJPYocJZ4 mlZpHvo8aKPORrwUT0NB+7ZojvW2cp6w5VnUkem4GpHC1J2YOrjUZhQ+HlSvUlJJ q1L6OgDT8Vb4rS/t7lrqgWdH6J6ApQk4frZgM47pqcnqTpyPybXbaQ3Xsr/Ogl5D 781Dn5oFMXMDpQsw6Mb63LxY26cCAwEAAaOCAmQwggJgMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLJYJRi8rGYSwbyyTZ780MtvZsXMMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9PQkFOSy8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9PQkFOSy8w L0IyNTgyNTE4QkNBQzY2MTJDMUJDQjI0RDlFRkNEMENCNkY2NkM1Q0MubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnfUAwDQYJKoZIhvcNAQELBQADggEBADOcKxO9mIakL91T sOzZpX1TDf3tsOQ6d9HNMdkFpxo5obuannOTAQw4Eai/hdzoSIr+VJeB7S1v1aaX wy57KXJQJ0+NaHdnhQQws1PW4Nn9FTlq5OKYk7esampzbGkdccCXzl2sDwBpQX6X FIllXYq4aAJrv5IZDIHT/DNbyi7vGYwgdP66nN3K3/D5MjJ2RSdqHO4D+l2/L96I ZJtmyxsTxVNUZ/tZPeGxgB70WiZZiWl+8fsB0rs7lgkHVtU0klm8c1lan+GhO3Bk +aumLbGZ7fVB/UGRVdyk82skHrOUa5yZhpdmfvgwdvqYkMO9Dw0E52zNK5hGPbpS FYfKGa4= -----END CERTIFICATE-----Generated at Wed May 13 00:34:02 2026 by rpki-client