$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer File: D1EE894ECDA357FF3B846E2660D95F0535127E79.cer (raw, json) Hash identifier: AhQm3VTWa/NsnrOYI49AyD1dq/N4ph66uK7aDIUdr8k= Subject key identifier: D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 5DE87437C141E808ADFD8BA6D849B79E6F448983 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft caRepository: rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:56:07 +0000 Certificate not after: Mon 10 May 2027 16:01:07 +0000 Subordinate resources: IP: 103.172.128.0/23 IP: 2407:d2c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e8:74:37:c1:41:e8:08:ad:fd:8b:a6:d8:49:b7:9e:6f:44:89:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:56:07 2026 GMT Not After : May 10 16:01:07 2027 GMT Subject: CN=D1EE894ECDA357FF3B846E2660D95F0535127E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:30:f9:80:f8:9f:8a:e0:33:36:67:6e:60: 8d:f4:70:c1:f0:56:4c:9d:12:7e:e1:d6:84:84:a1: 7b:8a:52:5a:c9:8c:18:67:6f:03:9d:6a:ea:25:74: 38:99:1d:3a:b7:3b:2a:9a:df:de:d9:8a:15:a3:fc: 68:cb:b3:0e:68:d5:d2:5e:01:07:7c:8d:34:56:f9: a9:38:65:0a:2f:b1:6d:2b:16:45:90:c8:70:34:9f: 27:1e:43:3a:ae:65:35:a4:30:f0:28:0f:05:70:46: 0a:f4:63:a5:72:df:7e:c3:13:7a:20:7a:2f:ae:97: 27:9a:90:63:1b:f1:f2:93:8c:8e:24:3d:4f:8c:24: 6a:1b:0f:5f:0c:4d:87:2a:8d:13:d9:42:f4:c6:5d: 01:10:b8:dc:d9:fc:9b:75:c6:20:1b:94:69:ff:4c: bd:d2:1e:e8:1f:c4:a5:d9:cc:de:18:50:57:6f:66: 06:4e:22:d9:c9:66:5d:11:6d:8c:6d:17:67:ca:54: b3:04:e0:17:b3:84:b0:91:1f:ec:67:3d:51:0a:55: 56:aa:f8:20:15:76:27:ef:cd:9e:c2:bc:90:1b:46: 5f:7f:dd:5c:28:24:fd:36:0e:33:66:9a:e1:7b:9c: d4:b2:46:06:40:e0:9f:b1:30:57:41:56:ba:fe:01: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.128.0/23 IPv6: 2407:d2c0::/32 Signature Algorithm: sha256WithRSAEncryption 30:4e:63:95:e6:42:5d:29:aa:2e:90:1e:bf:3e:9f:76:ef:de: 9e:bb:25:8c:4e:c6:f6:5c:14:c6:d5:db:da:73:9a:3c:6d:83: 09:db:64:aa:e8:da:86:87:5f:15:80:61:39:a8:7e:77:c4:d0: 28:4c:d9:91:fa:62:b2:53:d7:b6:80:d1:0d:9b:70:24:cc:3e: 31:b1:df:02:09:22:73:b6:4c:e9:b7:12:d0:96:3b:9c:fc:6d: 87:ff:3c:7c:a3:00:55:9b:67:25:a7:f5:4f:d4:ca:ea:91:1c: f3:a8:82:b8:f9:c0:4b:ef:a6:ca:e4:ef:98:ea:10:d9:9c:ac: cc:d7:29:f1:80:6f:78:28:99:6f:0c:d6:ed:f6:90:b9:a2:81: 05:58:8c:17:a3:53:e3:26:29:10:63:59:af:59:4b:57:c0:3d: d8:bc:b0:b0:c6:ee:82:61:45:4b:bf:a0:38:41:86:4e:5a:5b: 44:3c:8b:8b:ae:26:9a:65:b8:f4:35:32:76:c7:1c:df:33:4d: f7:05:e5:46:c6:a9:50:c9:a9:d2:06:74:fb:fa:e8:5e:19:97: 37:b7:c7:1f:22:34:e8:24:c7:7b:60:bd:c0:77:e1:f8:f6:ba: a0:b6:93:c6:7f:1f:be:9e:ba:fb:74:4c:58:ee:ce:51:75:44: 20:d7:f3:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUXeh0N8FB6Ait/Yum2Em3nm9EiYMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTYwN1oX DTI3MDUxMDE2MDEwN1owMzExMC8GA1UEAxMoRDFFRTg5NEVDREEzNTdGRjNCODQ2 RTI2NjBEOTVGMDUzNTEyN0U3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJVAMPmA+J+K4DM2Z25gjfRwwfBWTJ0SfuHWhIShe4pSWsmMGGdvA51q6iV0 OJkdOrc7Kprf3tmKFaP8aMuzDmjV0l4BB3yNNFb5qThlCi+xbSsWRZDIcDSfJx5D Oq5lNaQw8CgPBXBGCvRjpXLffsMTeiB6L66XJ5qQYxvx8pOMjiQ9T4wkahsPXwxN hyqNE9lC9MZdARC43Nn8m3XGIBuUaf9MvdIe6B/EpdnM3hhQV29mBk4i2clmXRFt jG0XZ8pUswTgF7OEsJEf7Gc9UQpVVqr4IBV2J+/NnsK8kBtGX3/dXCgk/TYOM2aa 4Xuc1LJGBkDgn7EwV0FWuv4B2lcCAwEAAaOCAncwggJzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNHuiU7No1f/O4RuJmDZXwU1En55MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9RWUNMT1VELzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1FZQ0xP VUQvMC9EMUVFODk0RUNEQTM1N0ZGM0I4NDZFMjY2MEQ5NUYwNTM1MTI3RTc5Lm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ6yAMA0EAgACMAcDBQAkB9LAMA0GCSqGSIb3DQEB CwUAA4IBAQAwTmOV5kJdKaoukB6/Pp92796euyWMTsb2XBTG1dvac5o8bYMJ22Sq 6NqGh18VgGE5qH53xNAoTNmR+mKyU9e2gNENm3AkzD4xsd8CCSJztkzptxLQljuc /G2H/zx8owBVm2clp/VP1MrqkRzzqIK4+cBL76bK5O+Y6hDZnKzM1ynxgG94KJlv DNbt9pC5ooEFWIwXo1PjJikQY1mvWUtXwD3YvLCwxu6CYUVLv6A4QYZOWltEPIuL riaaZbj0NTJ2xxzfM033BeVGxqlQyanSBnT7+uheGZc3t8cfIjToJMd7YL3Ad+H4 9rqgtpPGfx++nrr7dExY7s5RdUQg1/Oo -----END CERTIFICATE-----Generated at Tue May 12 22:32:37 2026 by rpki-client