$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer File: BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer (raw, json) Hash identifier: l/mcmFgLZLk0tCtjmqn8pR15iDB1TmlC5WiVrdaqFr4= Subject key identifier: BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 7F0173FE982D8D3D2BB6EF855918B57818BD787A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft caRepository: rsync://rpkica.twnic.tw/rpki/TGM/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:57:43 +0000 Certificate not after: Mon 10 May 2027 16:02:43 +0000 Subordinate resources: AS: 63907 IP: 103.180.20.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:01:73:fe:98:2d:8d:3d:2b:b6:ef:85:59:18:b5:78:18:bd:78:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:57:43 2026 GMT Not After : May 10 16:02:43 2027 GMT Subject: CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:89:ac:a1:30:89:7b:29:fc:e3:10:47:3d: 8b:b0:f0:27:8c:ff:35:e4:83:9a:60:cb:7c:da:d0: 14:ba:2a:c8:e4:9f:ce:47:dd:41:2c:64:b0:0a:0b: 2a:96:47:be:e3:c8:a4:43:f0:d5:34:d7:f0:22:7d: 0c:db:1e:97:19:b0:f9:8a:55:c9:7c:92:89:29:42: 3f:b7:16:4b:74:38:d4:28:db:62:36:d5:09:65:f4: 8b:a1:a0:db:8f:94:10:1f:29:65:a3:df:e8:78:62: ce:45:e2:36:2b:b8:11:af:84:44:2e:43:b1:a6:e3: e1:c1:7f:27:b2:6e:a7:fb:aa:48:cf:c9:59:30:b6: 69:6c:0b:72:66:eb:b3:59:22:18:b2:49:37:bc:9f: 3e:21:5c:9a:7b:b4:90:ab:1d:88:e3:5b:c2:c1:08: a3:b6:be:8f:81:4c:ee:d7:71:c4:47:8d:a7:f6:50: 12:10:09:b0:52:5b:34:24:11:62:8e:fc:12:08:09: 35:f8:ff:e3:d7:16:b8:e4:31:ef:d3:cc:5b:40:55: 2c:46:2f:e1:ca:34:16:9c:d4:87:32:58:65:6c:7a: 30:11:3e:f7:59:ae:40:cc:22:f0:e8:7f:17:91:f8: 97:58:1b:b4:20:18:d0:2f:72:99:cb:1d:69:7e:7a: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TGM/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.20.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63907 Signature Algorithm: sha256WithRSAEncryption ac:de:52:5f:af:36:6b:8a:1f:1b:83:3e:7e:2d:31:50:3e:2d: 4a:7b:66:e8:c8:8a:24:ac:a4:a9:8c:c5:9d:d0:16:d3:11:e6: 05:f8:5d:a1:74:77:f2:71:8e:6d:11:e8:d3:40:9a:ab:d8:55: f0:d1:bf:c9:21:b2:d6:e1:d5:f2:16:3a:cb:d2:64:26:74:0c: 02:89:93:94:a3:52:ab:01:ba:f5:5d:ad:ed:aa:6b:c7:95:4c: 9f:8d:e5:5b:8d:ba:7d:cc:50:0c:6b:ed:78:c7:26:ba:a6:5e: 40:e0:ec:23:f0:f1:fe:bb:5d:cb:58:19:c3:2e:12:d0:f2:da: ea:65:4a:b9:d7:fa:e0:e7:51:04:24:17:bc:15:02:3d:48:a3: 0d:51:29:1f:f7:d6:ce:2f:e7:6c:67:77:45:4b:bd:90:6a:39: c4:57:b6:1d:b3:f3:c1:57:6f:14:8a:88:4c:56:99:c9:b9:b4: b1:dc:cc:e4:28:68:3e:ec:aa:07:97:d3:23:05:f8:b5:79:5c: a7:b0:c2:28:54:c6:27:ef:80:af:e5:49:9a:74:9d:d8:31:7a: 55:79:39:87:bd:07:26:32:40:21:35:ff:51:5b:f8:0e:52:4e: 9c:22:29:52:ba:f4:99:0f:52:61:c2:46:15:e4:87:57:3d:36: d8:a0:a6:3d -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUfwFz/pgtjT0rtu+FWRi1eBi9eHowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTc0M1oX DTI3MDUxMDE2MDI0M1owMzExMC8GA1UEAxMoQkQwMUZGRTVBRDI4Nzk5OUUzM0M0 NTg2RTkxRTYzNDJBQ0UzQzEwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4oiayhMIl7KfzjEEc9i7DwJ4z/NeSDmmDLfNrQFLoqyOSfzkfdQSxksAoL KpZHvuPIpEPw1TTX8CJ9DNselxmw+YpVyXySiSlCP7cWS3Q41CjbYjbVCWX0i6Gg 24+UEB8pZaPf6HhizkXiNiu4Ea+ERC5Dsabj4cF/J7Jup/uqSM/JWTC2aWwLcmbr s1kiGLJJN7yfPiFcmnu0kKsdiONbwsEIo7a+j4FM7tdxxEeNp/ZQEhAJsFJbNCQR Yo78EggJNfj/49cWuOQx79PMW0BVLEYv4co0FpzUhzJYZWx6MBE+91muQMwi8Oh/ F5H4l1gbtCAY0C9ymcsdaX56G58CAwEAAaOCAnwwggJ4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL0B/+WtKHmZ4zxFhukeY0Ks48ELMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHXBggrBgEFBQcBCwSByjCBxzAvBggr BgEFBQcwBYYjcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UR00vMC8wWwYI KwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEdNLzAvQkQw MUZGRTVBRDI4Nzk5OUUzM0M0NTg2RTkxRTYzNDJBQ0UzQzEwQi5tZnQwNwYIKwYB BQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNhdGlvbi54 bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe0FDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+aMwDQYJKoZI hvcNAQELBQADggEBAKzeUl+vNmuKHxuDPn4tMVA+LUp7ZujIiiSspKmMxZ3QFtMR 5gX4XaF0d/Jxjm0R6NNAmqvYVfDRv8khstbh1fIWOsvSZCZ0DAKJk5SjUqsBuvVd re2qa8eVTJ+N5VuNun3MUAxr7XjHJrqmXkDg7CPw8f67XctYGcMuEtDy2uplSrnX +uDnUQQkF7wVAj1Iow1RKR/31s4v52xnd0VLvZBqOcRXth2z88FXbxSKiExWmcm5 tLHczOQoaD7sqgeX0yMF+LV5XKewwihUxifvgK/lSZp0ndgxelV5OYe9ByYyQCE1 /1Fb+A5STpwiKVK69JkPUmHCRhXkh1c9Ntigpj0= -----END CERTIFICATE-----Generated at Wed May 13 04:20:16 2026 by rpki-client