$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer File: BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer (raw, json) Hash identifier: EIjBc34t5pxQehUZ4mtxb2JPVFcM256Klii87F8p4Cw= Subject key identifier: BC:EA:07:93:00:86:A1:3D:C5:25:04:5B:C7:E4:A9:80:2E:9D:12:E1 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 6488C4872AA487F59D7A07E7BA6EEAC625B3F82A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft caRepository: rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:02 +0000 Certificate not after: Mon 10 May 2027 15:51:02 +0000 Subordinate resources: IP: 103.155.202.0/23 IP: 2406:77c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:88:c4:87:2a:a4:87:f5:9d:7a:07:e7:ba:6e:ea:c6:25:b3:f8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:46:02 2026 GMT Not After : May 10 15:51:02 2027 GMT Subject: CN=BCEA07930086A13DC525045BC7E4A9802E9D12E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:2a:0c:9b:7a:60:d2:e6:cf:b6:b0:b3:57: cd:52:ae:50:0e:df:c1:11:02:24:ab:c8:d5:ff:21: 36:d4:4b:06:c1:34:53:a3:7f:c2:a7:aa:95:45:89: 98:be:a2:97:cd:7d:76:1a:77:ac:04:51:a4:dc:9d: fb:82:b8:af:23:d8:5a:43:9f:c7:8b:72:4e:76:75: 4d:a1:07:96:26:41:77:ec:e4:94:96:60:a6:f0:c8: db:d3:84:c8:af:14:79:b0:40:23:90:84:d5:47:5d: b2:e5:5f:90:5e:55:34:3a:31:fb:18:c5:c8:60:55: 7b:d4:77:2c:58:bb:b8:b2:9f:31:42:d7:44:a6:31: e7:7a:59:b2:64:33:ba:91:7f:14:fd:29:fb:b5:fe: f4:eb:c3:96:e2:35:a5:87:1d:e9:1c:f3:78:e7:20: e7:af:1f:1e:7f:bf:54:b6:63:1a:2f:01:9a:30:1e: 8c:92:c1:af:f1:e4:d2:c4:b1:dc:08:0b:1c:c8:6e: 5b:25:d0:f9:60:10:79:8a:9e:19:aa:d0:c5:1c:97: be:d7:e7:36:ed:23:2d:fb:81:db:4b:a5:56:04:b2: 58:89:76:b1:6e:83:b5:a8:ef:1b:68:4f:fb:1d:4b: 85:22:d6:05:57:1b:8c:c1:f5:7b:08:66:d2:50:7d: 96:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:EA:07:93:00:86:A1:3D:C5:25:04:5B:C7:E4:A9:80:2E:9D:12:E1 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.202.0/23 IPv6: 2406:77c0::/32 Signature Algorithm: sha256WithRSAEncryption 78:79:9d:31:9b:37:32:6c:d5:bb:1a:63:ad:f5:58:c1:b6:38: c8:b9:6c:a6:6f:07:e8:01:9b:44:18:be:18:1d:fe:28:2f:06: e3:01:41:c3:cd:9e:80:c7:6f:9d:bb:ca:74:89:04:f0:2a:04: 10:d1:90:e9:18:e9:eb:0a:25:aa:34:62:45:7d:ba:9f:00:23: 2b:ba:5f:40:40:b9:43:33:49:0d:68:a7:a8:8e:62:e7:ce:a5: 9a:2f:b3:d0:de:f5:fc:26:0f:e3:75:f1:01:ac:94:c6:82:e6: 2c:12:b9:cd:96:e0:68:0f:76:31:a3:c4:2c:a8:a5:a9:27:00: 7a:23:db:11:e6:67:6a:0f:f5:23:06:02:33:b1:fc:ff:ac:b0: 30:e8:1f:4e:ad:c4:8d:08:0b:96:cf:6a:f7:c0:57:fc:7d:9b: 52:fb:b9:60:17:1a:59:68:57:71:07:72:46:9b:de:95:86:d5: 9b:1c:b6:02:0f:bb:52:7b:f7:f6:62:cc:a3:17:93:2e:36:a2: 72:2a:bf:7b:29:e4:9c:1f:04:e0:62:76:82:06:3b:2a:e5:3d: e4:67:d4:45:e7:51:a4:35:41:18:7d:3c:02:f6:79:4f:c9:81: e2:b1:b4:05:52:3f:9b:3f:c5:cd:bf:73:14:06:57:12:5e:88: 31:fb:9d:e3 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUZIjEhyqkh/Wdegfnum7qxiWz+CowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDYwMloX DTI3MDUxMDE1NTEwMlowMzExMC8GA1UEAxMoQkNFQTA3OTMwMDg2QTEzREM1MjUw NDVCQzdFNEE5ODAyRTlEMTJFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCqKgybemDS5s+2sLNXzVKuUA7fwRECJKvI1f8hNtRLBsE0U6N/wqeqlUWJ mL6il819dhp3rARRpNyd+4K4ryPYWkOfx4tyTnZ1TaEHliZBd+zklJZgpvDI29OE yK8UebBAI5CE1UddsuVfkF5VNDox+xjFyGBVe9R3LFi7uLKfMULXRKYx53pZsmQz upF/FP0p+7X+9OvDluI1pYcd6RzzeOcg568fHn+/VLZjGi8BmjAejJLBr/Hk0sSx 3AgLHMhuWyXQ+WAQeYqeGarQxRyXvtfnNu0jLfuB20ulVgSyWIl2sW6DtajvG2hP +x1LhSLWBVcbjMH1ewhm0lB9ltMCAwEAAaOCAn0wggJ5MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLzqB5MAhqE9xSUEW8fkqYAunRLhMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HTE9CQUxQTFVT LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dM T0JBTFBMVVMvMC9CQ0VBMDc5MzAwODZBMTNEQzUyNTA0NUJDN0U0QTk4MDJFOUQx MkUxLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5vKMA0EAgACMAcDBQAkBnfAMA0GCSqG SIb3DQEBCwUAA4IBAQB4eZ0xmzcybNW7GmOt9VjBtjjIuWymbwfoAZtEGL4YHf4o LwbjAUHDzZ6Ax2+du8p0iQTwKgQQ0ZDpGOnrCiWqNGJFfbqfACMrul9AQLlDM0kN aKeojmLnzqWaL7PQ3vX8Jg/jdfEBrJTGguYsErnNluBoD3Yxo8QsqKWpJwB6I9sR 5mdqD/UjBgIzsfz/rLAw6B9OrcSNCAuWz2r3wFf8fZtS+7lgFxpZaFdxB3JGm96V htWbHLYCD7tSe/f2YsyjF5MuNqJyKr97KeScHwTgYnaCBjsq5T3kZ9RF51GkNUEY fTwC9nlPyYHisbQFUj+bP8XNv3MUBlcSXogx+53j -----END CERTIFICATE-----Generated at Wed May 13 04:20:08 2026 by rpki-client