$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer File: D0E0940739C7C8A1E39FA993A159F27901AD1227.cer (raw, json) Hash identifier: wu2ssKhvks4tfv8x0JsqXsHX/CpOeg1GdRk6pWhz8tg= Subject key identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 390DBA3717DC08EF9A00734029B6783C7735C167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft caRepository: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:56:27 +0000 Certificate not after: Mon 10 May 2027 16:01:27 +0000 Subordinate resources: AS: 131620 IP: 103.116.68.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:0d:ba:37:17:dc:08:ef:9a:00:73:40:29:b6:78:3c:77:35:c1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:56:27 2026 GMT Not After : May 10 16:01:27 2027 GMT Subject: CN=D0E0940739C7C8A1E39FA993A159F27901AD1227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:69:8e:87:42:cf:ec:77:d2:39:dd:4a:34: 05:12:9f:5d:72:2a:07:e8:dd:6d:78:2b:38:fc:5e: 2c:92:69:e3:ad:ff:a1:de:5d:9f:f7:f6:5a:ce:cb: 82:71:2d:09:f7:81:e5:ae:5b:16:72:fb:4b:54:39: 62:52:48:a9:ea:81:f9:51:78:82:f5:f6:35:2e:f6: fb:f5:a9:46:c8:57:be:93:22:a0:4f:a5:fe:d7:b4: 76:f7:4c:2f:7b:ea:39:50:7e:a0:fc:78:c3:35:35: 24:d4:a8:02:37:ee:11:e9:b7:22:83:11:fd:d0:8b: 1c:8e:9f:f3:87:2a:c8:77:5a:b0:c8:9b:7a:09:8f: 59:d1:e5:bc:f2:34:e5:f8:be:59:0b:54:ce:6b:f0: d4:5d:a2:02:68:f9:cc:71:bf:1b:d5:66:e7:a3:d4: 84:11:55:a9:fe:83:c0:e9:bf:f8:8d:0c:64:00:3d: 7e:81:4c:e1:af:05:f8:4b:46:49:c9:3f:e3:4d:64: 04:79:52:5e:ad:ce:ac:e9:ee:95:42:69:05:bf:4c: 4b:09:59:58:c3:38:ed:4b:39:4a:12:13:d0:f0:8d: cc:e3:31:da:ec:40:40:a0:98:92:2d:46:d7:bb:eb: 57:7b:00:86:17:e9:3d:78:03:6a:15:a7:62:49:c4: 64:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.68.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131620 Signature Algorithm: sha256WithRSAEncryption b7:03:46:e3:98:34:48:b5:34:a0:4c:84:2f:0e:78:2c:df:0d: 30:4f:44:d0:6e:fb:4c:52:bd:14:25:d4:34:ed:f6:fb:47:59: f8:d1:d1:db:91:ae:36:f1:5b:54:3a:71:c6:39:c8:29:33:62: bd:cf:d0:a3:c4:8f:86:01:dd:71:70:82:7b:bf:11:84:0c:4c: 94:96:ef:d1:ab:71:11:b9:39:b2:62:05:84:0a:51:55:32:9a: 75:cd:89:b4:60:85:c3:8f:a9:75:af:c8:f0:ad:d7:0f:e9:8b: 2a:31:22:11:ea:3c:90:c0:ac:d7:89:47:ad:c6:e9:d4:25:34: f4:f7:57:b7:7d:98:99:23:a2:84:69:be:78:af:3a:e9:7a:97: a6:6c:9c:82:91:6b:28:7c:1b:d9:37:63:60:3c:e6:b7:e4:b6: 3e:76:85:ba:d5:f6:66:7d:27:28:5a:38:a6:52:e6:12:d2:b4: 53:4d:a3:0a:7a:d9:ca:50:ba:fe:0e:31:49:a5:a0:cd:9f:35: 22:e4:93:d9:90:da:e5:12:31:cf:3d:46:25:87:ac:85:88:72: 1f:74:bb:8e:72:b3:95:0b:a2:78:8a:9f:6b:38:56:6b:3f:ce: b4:3a:ef:19:09:02:bc:04:23:33:03:c3:91:fa:09:a3:92:c9: e8:69:6d:4f -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIUOQ26NxfcCO+aAHNAKbZ4PHc1wWcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTYyN1oX DTI3MDUxMDE2MDEyN1owMzExMC8GA1UEAxMoRDBFMDk0MDczOUM3QzhBMUUzOUZB OTkzQTE1OUYyNzkwMUFEMTIyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmGaY6HQs/sd9I53Uo0BRKfXXIqB+jdbXgrOPxeLJJp463/od5dn/f2Ws7L gnEtCfeB5a5bFnL7S1Q5YlJIqeqB+VF4gvX2NS72+/WpRshXvpMioE+l/te0dvdM L3vqOVB+oPx4wzU1JNSoAjfuEem3IoMR/dCLHI6f84cqyHdasMibegmPWdHlvPI0 5fi+WQtUzmvw1F2iAmj5zHG/G9Vm56PUhBFVqf6DwOm/+I0MZAA9foFM4a8F+EtG Sck/401kBHlSXq3OrOnulUJpBb9MSwlZWMM47Us5ShIT0PCNzOMx2uxAQKCYki1G 17vrV3sAhhfpPXgDahWnYknEZOMCAwEAAaOCAoYwggKCMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNDglAc5x8ih45+pk6FZ8nkBrRInMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TRVJWQ09NUC8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TRVJW Q09NUC8wL0QwRTA5NDA3MzlDN0M4QTFFMzlGQTk5M0ExNTlGMjc5MDFBRDEyMjcu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJndEQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AgIkMA0GCSqGSIb3DQEBCwUAA4IBAQC3A0bjmDRItTSgTIQvDngs3w0wT0TQbvtM Ur0UJdQ07fb7R1n40dHbka428VtUOnHGOcgpM2K9z9CjxI+GAd1xcIJ7vxGEDEyU lu/Rq3ERuTmyYgWEClFVMpp1zYm0YIXDj6l1r8jwrdcP6YsqMSIR6jyQwKzXiUet xunUJTT091e3fZiZI6KEab54rzrpepembJyCkWsofBvZN2NgPOa35LY+doW61fZm fScoWjimUuYS0rRTTaMKetnKULr+DjFJpaDNnzUi5JPZkNrlEjHPPUYlh6yFiHIf dLuOcrOVC6J4ip9rOFZrP860Ou8ZCQK8BCMzA8OR+gmjksnoaW1P -----END CERTIFICATE-----Generated at Wed May 13 04:19:48 2026 by rpki-client