$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer File: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer (raw, json) Hash identifier: oB16ytL0DjPfEAwEYrqDrWsucxahnCCF7wQ63jSSxE4= Subject key identifier: CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 7FD8FE3E8A5358103F3D432E1BCC8BBAF3BD6BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft caRepository: rsync://rpkica.twnic.tw/rpki/EHHKY/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:45:29 +0000 Certificate not after: Mon 10 May 2027 15:50:29 +0000 Subordinate resources: IP: 103.130.84.0/22 IP: 2403:b640::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d8:fe:3e:8a:53:58:10:3f:3d:43:2e:1b:cc:8b:ba:f3:bd:6b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:45:29 2026 GMT Not After : May 10 15:50:29 2027 GMT Subject: CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:81:b2:17:95:5f:4c:f4:af:b6:95:aa:30:fe: 43:16:35:94:d4:96:dc:64:ae:74:53:b2:54:41:b4: e2:47:0c:af:a2:1d:c8:3b:0c:e2:6e:1a:64:10:85: 53:46:1d:be:16:c9:fc:b8:48:8a:c8:fd:1d:ff:a3: 24:a3:2b:29:75:73:3c:c8:19:4e:e5:c1:82:34:01: ab:69:ac:40:d4:95:48:66:b2:46:fe:65:86:40:55: 98:e2:ce:b1:74:24:0e:45:b1:08:3f:3b:f4:af:85: 9b:5b:54:27:58:1a:f8:53:70:aa:82:13:76:35:d0: ee:cc:47:7d:9d:70:82:e1:fb:5b:94:09:49:41:6b: be:61:da:43:56:e3:35:6e:e7:d7:a5:ec:a8:7a:c8: ff:85:56:fa:b6:67:a9:8a:fd:ef:2b:be:aa:14:8a: ca:89:4e:5a:8d:5b:e2:18:84:9e:4c:a0:9c:6c:0c: d5:69:17:1b:f0:01:e1:b2:3e:81:6c:fd:c4:ed:3d: ff:02:68:50:6b:cd:cb:67:4b:5c:00:09:3e:cd:26: e1:ea:22:03:71:e1:47:e1:a7:16:b9:25:1a:fa:bb: cc:f9:cd:d5:5b:7b:37:07:0b:54:f2:d9:6e:dd:08: 23:2b:df:fa:f6:48:89:08:95:d2:9c:86:c7:34:33: 0f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.84.0/22 IPv6: 2403:b640::/32 Signature Algorithm: sha256WithRSAEncryption 98:f9:69:79:26:07:58:80:c6:09:de:26:f9:23:0b:92:f3:70: d9:0a:f0:6b:d3:34:3e:68:29:a8:f9:ac:93:11:96:92:c0:7d: 62:bb:0f:57:21:fd:38:bd:37:48:d6:b5:d0:f2:49:e8:8b:cb: 15:ef:dc:47:01:b8:fe:98:82:2f:a0:8d:bb:1a:ba:b1:8c:5d: 15:a5:56:c4:bb:f3:f4:32:fb:28:35:44:2f:70:b7:5a:a4:4d: 9d:1f:bd:cc:8d:65:7c:c9:ae:7c:ab:5f:ea:aa:3c:d2:96:f3: 4f:61:fa:ae:fe:42:73:90:42:92:bf:39:e7:f5:a2:c6:9d:ec: 27:92:40:7d:ae:39:be:16:14:9c:93:5f:fc:b1:d8:ea:04:50: 99:4b:b5:c6:cf:d2:95:84:1b:92:ea:60:2a:62:fd:ab:c7:20: b9:20:ba:d9:58:73:32:c6:86:d5:84:cd:9b:86:92:93:a5:30: 79:5e:f6:5d:b9:7c:f3:3f:e6:83:c8:b7:bc:74:f6:2c:80:46: 8c:e0:75:ff:88:cd:78:c5:3d:74:97:91:08:70:4c:e8:f7:f2: 2b:55:6a:f7:f9:35:a0:fe:71:eb:0b:19:ec:82:92:7f:00:81: 47:1c:b4:16:3f:31:c2:52:18:4a:e1:eb:5a:ad:fa:ad:ee:c2: 88:c2:22:44 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIUf9j+PopTWBA/PUMuG8yLuvO9a9EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDUyOVoX DTI3MDUxMDE1NTAyOVowMzExMC8GA1UEAxMoQ0U5ODVDNzhDNkI1Nzg1MDc3MDJE RURCMUMzOTlCMkY5OUNCM0I0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJeBsheVX0z0r7aVqjD+QxY1lNSW3GSudFOyVEG04kcMr6IdyDsM4m4aZBCF U0YdvhbJ/LhIisj9Hf+jJKMrKXVzPMgZTuXBgjQBq2msQNSVSGayRv5lhkBVmOLO sXQkDkWxCD879K+Fm1tUJ1ga+FNwqoITdjXQ7sxHfZ1wguH7W5QJSUFrvmHaQ1bj NW7n16XsqHrI/4VW+rZnqYr97yu+qhSKyolOWo1b4hiEnkygnGwM1WkXG/AB4bI+ gWz9xO09/wJoUGvNy2dLXAAJPs0m4eoiA3HhR+GnFrklGvq7zPnN1Vt7NwcLVPLZ bt0IIyvf+vZIiQiV0pyGxzQzD80CAwEAAaOCAnMwggJvMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM6YXHjGtXhQdwLe2xw5my+ZyztPMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FSEhLWS8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FSEhLWS8w L0NFOTg1Qzc4QzZCNTc4NTA3NzAyREVEQjFDMzk5QjJGOTlDQjNCNEYubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnglQwDQQCAAIwBwMFACQDtkAwDQYJKoZIhvcNAQELBQAD ggEBAJj5aXkmB1iAxgneJvkjC5LzcNkK8GvTND5oKaj5rJMRlpLAfWK7D1ch/Ti9 N0jWtdDySeiLyxXv3EcBuP6Ygi+gjbsaurGMXRWlVsS78/Qy+yg1RC9wt1qkTZ0f vcyNZXzJrnyrX+qqPNKW809h+q7+QnOQQpK/Oef1osad7CeSQH2uOb4WFJyTX/yx 2OoEUJlLtcbP0pWEG5LqYCpi/avHILkgutlYczLGhtWEzZuGkpOlMHle9l25fPM/ 5oPIt7x09iyARozgdf+IzXjFPXSXkQhwTOj38itVavf5NaD+cesLGeyCkn8AgUcc tBY/McJSGErh61qt+q3uwojCIkQ= -----END CERTIFICATE-----Generated at Tue May 12 22:16:01 2026 by rpki-client