$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer File: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer (raw, json) Hash identifier: B9gfhGxnrrUoFdRUnjcj1NMXZ6/2GrtfN4F09yWnWNo= Subject key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 7C499D93404F15131EBFDB7566FA73E00A711FA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft caRepository: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:50 +0000 Certificate not after: Mon 10 May 2027 15:52:50 +0000 Subordinate resources: IP: 103.99.138.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:49:9d:93:40:4f:15:13:1e:bf:db:75:66:fa:73:e0:0a:71:1f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:50 2026 GMT Not After : May 10 15:52:50 2027 GMT Subject: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:16:e0:d0:c5:9a:55:6b:8a:9f:24:8d:c5:2e: fc:8b:f9:bc:57:1a:c1:b2:ae:19:31:a6:82:62:14: d7:4a:a4:74:ee:45:90:c2:09:2e:e9:6c:62:6d:d4: db:ce:0e:43:7a:dd:79:e4:86:87:51:4f:78:f4:09: ae:3a:2e:11:d2:05:d7:fe:11:87:4a:4a:10:ca:db: e0:97:54:36:a9:5c:d7:46:11:5d:fb:a0:9a:34:da: 88:d2:a3:d2:61:2e:2e:5c:ae:cb:57:59:25:a8:49: dc:48:79:e3:62:e6:30:cf:98:54:e9:97:f7:8b:a9: c5:1c:84:b7:38:61:e9:a7:25:f1:5b:9d:ad:8c:66: 60:14:ea:60:01:e8:05:b0:90:4b:f3:fd:bd:92:bb: 7f:c2:c3:46:73:24:5f:e6:3b:f6:ba:a3:a8:64:0f: a9:46:22:07:79:e0:37:b6:d9:7e:a7:75:26:17:63: 05:a9:bd:4d:73:af:a0:99:ff:72:a9:c5:02:ab:6b: c0:c9:00:eb:54:04:c8:c6:c9:f6:7f:39:85:0f:e5: 9f:ec:75:d9:34:7e:d6:f3:36:5b:3d:8b:be:4b:e3: 3b:57:ec:0c:0d:5a:40:61:d9:bc:1e:61:39:a2:18: 97:9d:52:05:bf:cc:36:7d:ad:d5:38:f3:c8:15:87: ec:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.99.138.0/23 Signature Algorithm: sha256WithRSAEncryption 28:f7:6c:3b:a9:6b:f7:ce:5f:ad:8d:28:3d:62:69:d4:a1:1f: 82:d5:0c:d0:68:3b:33:c5:56:85:40:d0:c4:88:d0:ec:cc:80: 37:25:80:6d:bb:63:2b:18:4e:84:4b:20:13:56:5b:04:3d:98: 38:3a:a6:65:57:ef:0f:d5:53:44:aa:0a:cd:e4:25:34:a8:22: 22:4c:ae:59:e6:9b:07:5e:88:7f:28:92:a3:04:28:13:ea:28: 4e:a5:a9:f8:ae:7a:78:df:67:d2:4f:c2:a3:ce:8d:a2:c8:c9: b8:8e:40:2f:5c:ec:fc:7d:cc:81:54:0e:78:bf:73:53:e0:fd: 66:4e:34:21:64:e0:fa:b3:6a:a7:22:64:6a:ff:59:8e:b5:46: 2a:86:a4:02:9c:d1:19:67:b5:4d:bf:e5:a3:21:a3:29:3c:78: 1c:f0:a8:51:c5:a3:2e:f6:94:f6:e3:ef:01:90:4f:52:f9:8d: 8e:26:9d:43:69:48:53:84:ec:d5:2b:17:35:fa:28:63:c0:75: 03:f5:49:28:bf:fe:95:cb:b4:9f:b8:0c:70:e3:0f:67:20:c2: 95:92:d1:8c:de:b3:fd:9d:ae:b3:22:a5:ac:e9:fa:74:4f:c9: b2:78:9b:36:48:5c:16:82:b7:f7:bc:ae:eb:ea:45:65:1f:de: 29:8d:35:ed -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUfEmdk0BPFRMev9t1Zvpz4ApxH6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDc1MFoX DTI3MDUxMDE1NTI1MFowMzExMC8GA1UEAxMoRDBCNDU4Q0UwQkU1OEUyMTc3OUQ1 QUNBMDk2Q0VGQ0VCQ0VENUQxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJUW4NDFmlVrip8kjcUu/Iv5vFcawbKuGTGmgmIU10qkdO5FkMIJLulsYm3U 284OQ3rdeeSGh1FPePQJrjouEdIF1/4Rh0pKEMrb4JdUNqlc10YRXfugmjTaiNKj 0mEuLlyuy1dZJahJ3Eh542LmMM+YVOmX94upxRyEtzhh6acl8VudrYxmYBTqYAHo BbCQS/P9vZK7f8LDRnMkX+Y79rqjqGQPqUYiB3ngN7bZfqd1JhdjBam9TXOvoJn/ cqnFAqtrwMkA61QEyMbJ9n85hQ/ln+x12TR+1vM2Wz2LvkvjO1fsDA1aQGHZvB5h OaIYl51SBb/MNn2t1TjzyBWH7KcCAwEAAaOCAmowggJmMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNC0WM4L5Y4hd51aygls78687V0SMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSUFOR0NBSS8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSUFO R0NBSS8wL0QwQjQ1OENFMEJFNThFMjE3NzlENUFDQTA5NkNFRkNFQkNFRDVEMTIu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnY4owDQYJKoZIhvcNAQELBQADggEBACj3bDup a/fOX62NKD1iadShH4LVDNBoOzPFVoVA0MSI0OzMgDclgG27YysYToRLIBNWWwQ9 mDg6pmVX7w/VU0SqCs3kJTSoIiJMrlnmmwdeiH8okqMEKBPqKE6lqfiuenjfZ9JP wqPOjaLIybiOQC9c7Px9zIFUDni/c1Pg/WZONCFk4PqzaqciZGr/WY61RiqGpAKc 0RlntU2/5aMhoyk8eBzwqFHFoy72lPbj7wGQT1L5jY4mnUNpSFOE7NUrFzX6KGPA dQP1SSi//pXLtJ+4DHDjD2cgwpWS0Yzes/2drrMipazp+nRPybJ4mzZIXBaCt/e8 ruvqRWUf3imNNe0= -----END CERTIFICATE-----Generated at Tue May 12 22:16:05 2026 by rpki-client