$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer File: B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer (raw, json) Hash identifier: VjtvHHbqzEjRGd/lgOx1WwzF9TZsl565XGu1mqb4gAU= Subject key identifier: B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 3C3CCC008354F38053F59341862DB4F9114A3A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft caRepository: rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:49:24 +0000 Certificate not after: Mon 10 May 2027 15:54:24 +0000 Subordinate resources: AS: 63899 IP: 103.191.22.0/23 IP: 2400:93a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3c:cc:00:83:54:f3:80:53:f5:93:41:86:2d:b4:f9:11:4a:3a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:49:24 2026 GMT Not After : May 10 15:54:24 2027 GMT Subject: CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:a2:31:6d:cb:85:22:64:64:b7:76:fe:e2: 17:ec:54:75:08:5c:1a:e7:9e:77:a8:ef:90:aa:65: ad:3d:73:62:28:70:ec:e2:28:65:c9:71:2d:70:d5: 1d:b4:8b:16:c3:cf:54:b5:e8:b6:32:08:c9:30:cc: 51:c3:2e:26:27:0b:de:45:1f:57:1b:e6:df:8b:fd: 94:1c:da:f0:a4:4e:cd:9d:29:0c:09:d8:25:07:c0: 03:47:9c:9e:cc:6b:ce:cf:56:68:65:3f:43:7d:2d: 92:3e:da:0c:af:85:26:bf:6b:ed:48:fe:05:89:2d: e4:cb:b4:88:96:0f:9a:23:08:9e:8a:3c:fa:1c:93: 8f:fe:5f:ac:96:cf:10:32:5a:6c:04:1b:ed:ff:db: 12:b4:47:ff:a3:2b:d9:a4:f1:8e:23:1e:df:4e:99: 4d:ac:34:a9:03:5b:bf:12:53:7f:84:85:3c:3d:f2: 8c:86:f9:d8:b6:85:9c:9d:e8:95:4d:11:03:69:f0: 52:cd:57:a0:00:f6:07:c7:3d:26:3f:62:77:10:2c: e7:c2:83:76:f8:4a:4c:9d:14:f4:a2:23:6f:f6:b2: 70:9f:fd:8a:a8:8e:e8:23:ae:ad:c0:62:55:d6:43: 24:1e:38:e4:21:12:0a:0b:f2:78:38:49:c8:d9:70: ab:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.22.0/23 IPv6: 2400:93a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63899 Signature Algorithm: sha256WithRSAEncryption 79:37:76:d9:57:64:80:a9:c8:c9:47:c8:2e:f2:f6:cc:04:6e: ac:80:11:a5:a0:51:0d:8d:5b:19:76:46:2b:c6:89:fe:a1:d9: cf:4c:1c:92:8e:49:68:02:e5:4a:dd:20:a5:c2:49:97:38:af: d0:d8:61:02:f4:45:ff:d6:c5:67:c1:32:8f:ca:bd:10:29:2e: 06:49:dd:c3:12:d0:67:4c:99:30:6a:f4:61:9d:9c:07:ee:2f: 15:46:0d:a6:cd:dc:c0:b2:e4:3c:ac:59:a9:b6:dc:74:a3:84: 20:9d:10:04:1d:ab:3c:1e:94:a8:b8:e8:31:c1:ca:b5:4b:ea: 64:34:5c:59:54:74:74:e3:75:0f:45:1b:50:08:37:3e:cd:40: 6f:a2:df:9d:98:05:43:05:62:ee:c1:11:1a:49:ba:2d:51:3d: bb:d7:35:a3:ec:b5:59:9c:70:e6:a1:3a:f3:55:17:99:f1:17: 99:29:08:29:c8:d7:2f:a1:7a:9f:d2:0d:c6:28:9d:2c:87:f7: 26:a8:1f:83:c2:5c:7c:48:a5:d0:79:1c:1c:f1:4d:bc:3b:3d: c0:60:a0:f3:11:1d:02:b8:6b:fb:79:e8:95:f8:21:70:0c:e4: 41:8d:b5:e6:11:48:27:dd:4c:9a:b3:f9:e0:49:41:1f:ec:50: 31:75:33:64 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUPDzMAINU84BT9ZNBhi20+RFKOj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDkyNFoX DTI3MDUxMDE1NTQyNFowMzExMC8GA1UEAxMoQjQ2OUM4QUY4OEYxNDE3REYzRTU1 RTBCQzVFRUNBREE5MjUwRTVDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMrojFty4UiZGS3dv7iF+xUdQhcGueed6jvkKplrT1zYihw7OIoZclxLXDV HbSLFsPPVLXotjIIyTDMUcMuJicL3kUfVxvm34v9lBza8KROzZ0pDAnYJQfAA0ec nsxrzs9WaGU/Q30tkj7aDK+FJr9r7Uj+BYkt5Mu0iJYPmiMInoo8+hyTj/5frJbP EDJabAQb7f/bErRH/6Mr2aTxjiMe306ZTaw0qQNbvxJTf4SFPD3yjIb52LaFnJ3o lU0RA2nwUs1XoAD2B8c9Jj9idxAs58KDdvhKTJ0U9KIjb/aycJ/9iqiO6COurcBi VdZDJB445CESCgvyeDhJyNlwqycCAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLRpyK+I8UF98+VeC8XuytqSUOXLMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OVFVTVENDQURN LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05U VVNUQ0NBRE0vMC9CNDY5QzhBRjg4RjE0MTdERjNFNTVFMEJDNUVFQ0FEQTkyNTBF NUNCLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ78WMA0EAgACMAcDBQAkAJOgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwD5mzANBgkqhkiG9w0BAQsFAAOCAQEAeTd22Vdk gKnIyUfILvL2zARurIARpaBRDY1bGXZGK8aJ/qHZz0wcko5JaALlSt0gpcJJlziv 0NhhAvRF/9bFZ8Eyj8q9ECkuBkndwxLQZ0yZMGr0YZ2cB+4vFUYNps3cwLLkPKxZ qbbcdKOEIJ0QBB2rPB6UqLjoMcHKtUvqZDRcWVR0dON1D0UbUAg3Ps1Ab6LfnZgF QwVi7sERGkm6LVE9u9c1o+y1WZxw5qE681UXmfEXmSkIKcjXL6F6n9INxiidLIf3 Jqgfg8JcfEil0HkcHPFNvDs9wGCg8xEdArhr+3nolfghcAzkQY215hFIJ91MmrP5 4ElBH+xQMXUzZA== -----END CERTIFICATE-----Generated at Tue May 12 22:16:21 2026 by rpki-client