$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer File: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer (raw, json) Hash identifier: Vhp9ZcsF/vsq+ks3VG/JXsixLUHdPvcWSDfkfEA5tjU= Subject key identifier: CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 294253454969D8F19A98C594AA05E2290580A4D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft caRepository: rsync://rpkica.twnic.tw/rpki/ARCHE/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:42:56 +0000 Certificate not after: Mon 10 May 2027 15:47:56 +0000 Subordinate resources: IP: 2401:7a60::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:42:53:45:49:69:d8:f1:9a:98:c5:94:aa:05:e2:29:05:80:a4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:42:56 2026 GMT Not After : May 10 15:47:56 2027 GMT Subject: CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:6b:7a:46:37:5a:4d:56:46:5f:ac:6e:84: 9f:6d:be:d2:4e:b0:77:a9:12:da:06:3c:39:8d:f9: af:ed:70:f6:45:21:5d:85:b0:1e:c5:0d:58:96:2b: a2:de:d9:b1:2d:63:06:31:aa:58:4f:3a:6e:f0:28: 1f:7b:d8:69:59:f1:85:a9:67:4e:ca:e9:17:f5:d1: f4:8f:b6:1c:e7:09:98:b7:08:8c:3d:97:e2:06:fb: 90:7c:31:2f:9c:6f:ae:67:32:e1:88:03:f3:51:51: c5:08:2e:87:6a:65:df:a6:07:ae:75:f4:ea:db:8d: 35:08:c7:b5:35:a6:17:8c:26:29:77:1c:a4:67:ec: 97:2d:2d:13:60:b3:14:12:37:64:33:44:02:00:05: f5:97:99:2e:25:35:c4:43:33:63:32:e8:21:e0:23: 44:e3:37:d7:0f:3e:0c:b8:a8:01:d5:21:32:18:35: 1b:29:ee:f9:df:19:8a:c3:a7:d6:2c:22:36:02:4c: 0b:6e:0c:90:ae:e0:ba:a7:cd:95:a3:50:14:bc:68: a9:bb:a8:20:8f:4c:cc:b6:f0:2f:0e:28:53:86:aa: 31:e3:14:b9:cc:85:b2:d9:2d:10:95:7e:40:e5:b1: 38:f1:c0:7d:b5:1c:6f:26:70:29:f3:83:95:3b:e3: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:7a60::/32 Signature Algorithm: sha256WithRSAEncryption 67:63:ba:12:08:03:0f:5e:e3:9f:a8:19:90:c1:b7:03:12:a8: 8c:95:ff:d8:31:59:5d:fe:86:ed:1f:4f:c3:6d:9a:ed:6b:7d: f0:32:3d:19:22:9d:5e:0e:e4:42:4d:33:97:12:66:a4:a4:73: 18:f6:64:c6:17:c5:e8:8b:3d:f9:7d:16:f3:2b:7b:23:8b:c6: 52:0a:d2:76:c1:f3:e3:36:b2:47:12:7b:58:e5:f2:36:65:e3: a3:c7:af:2e:55:66:c5:85:c8:0a:25:d7:5d:ae:ca:1f:9e:06: 73:17:b7:d0:4c:82:d0:62:da:58:58:14:f9:53:44:dd:21:0b: fc:c9:85:0f:10:36:ba:0b:9e:ac:40:63:87:56:21:a4:ee:01: cb:07:e8:c4:36:4a:ed:82:3d:f8:43:da:d9:22:61:e4:a8:8c: 7c:84:a6:7c:1c:e6:f5:6f:7b:b2:54:3d:45:cb:56:82:37:da: 97:1f:34:b3:be:d2:07:0e:b2:88:6e:de:81:e1:30:43:a6:df: b0:56:0d:f7:b2:5e:b2:82:78:42:d1:6b:86:ff:28:dc:48:23: 9a:43:bb:bf:48:fc:83:41:4d:2f:f5:53:a9:c9:10:f2:98:43: 3b:e9:f2:74:66:b2:9f:b9:42:bb:23:c6:12:9a:75:33:5f:3e: 9e:b4:a2:eb -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUKUJTRUlp2PGamMWUqgXiKQWApNYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDI1NloX DTI3MDUxMDE1NDc1NlowMzExMC8GA1UEAxMoQ0FEMzYyRjNCRkFGRTVCOTMwNzkx N0UyM0I5M0ZFOEQwMzkzMDg1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM06a3pGN1pNVkZfrG6En22+0k6wd6kS2gY8OY35r+1w9kUhXYWwHsUNWJYr ot7ZsS1jBjGqWE86bvAoH3vYaVnxhalnTsrpF/XR9I+2HOcJmLcIjD2X4gb7kHwx L5xvrmcy4YgD81FRxQguh2pl36YHrnX06tuNNQjHtTWmF4wmKXccpGfsly0tE2Cz FBI3ZDNEAgAF9ZeZLiU1xEMzYzLoIeAjROM31w8+DLioAdUhMhg1Gynu+d8ZisOn 1iwiNgJMC24MkK7guqfNlaNQFLxoqbuoII9MzLbwLw4oU4aqMeMUucyFstktEJV+ QOWxOPHAfbUcbyZwKfODlTvjp+kCAwEAAaOCAmUwggJhMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMrTYvO/r+W5MHkX4juT/o0DkwhcMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUkNIRS8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUkNIRS8w L0NBRDM2MkYzQkZBRkU1QjkzMDc5MTdFMjNCOTNGRThEMDM5MzA4NUMubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAXpgMA0GCSqGSIb3DQEBCwUAA4IBAQBnY7oSCAMPXuOf qBmQwbcDEqiMlf/YMVld/obtH0/DbZrta33wMj0ZIp1eDuRCTTOXEmakpHMY9mTG F8Xoiz35fRbzK3sji8ZSCtJ2wfPjNrJHEntY5fI2ZeOjx68uVWbFhcgKJdddrsof ngZzF7fQTILQYtpYWBT5U0TdIQv8yYUPEDa6C56sQGOHViGk7gHLB+jENkrtgj34 Q9rZImHkqIx8hKZ8HOb1b3uyVD1Fy1aCN9qXHzSzvtIHDrKIbt6B4TBDpt+wVg33 sl6ygnhC0WuG/yjcSCOaQ7u/SPyDQU0v9VOpyRDymEM76fJ0ZrKfuUK7I8YSmnUz Xz6etKLr -----END CERTIFICATE-----Generated at Tue May 12 22:16:58 2026 by rpki-client