$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer File: D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer (raw, json) Hash identifier: 2QrsIoQlODvOpN5U3PKo2gYhXVlZCHlY8gakHUKTTto= Subject key identifier: D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 5B4DEF77B3ACBFB799E8BE834CAFD195A3684513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft caRepository: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:55 +0000 Certificate not after: Mon 10 May 2027 15:49:55 +0000 Subordinate resources: AS: 152628 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4d:ef:77:b3:ac:bf:b7:99:e8:be:83:4c:af:d1:95:a3:68:45:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:44:55 2026 GMT Not After : May 10 15:49:55 2027 GMT Subject: CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:92:81:e4:8c:8a:e4:3d:47:bb:d0:f7:fa: d2:7e:e1:2f:6f:08:11:e3:ee:d1:7b:13:21:18:de: 3e:f1:cf:ae:df:e1:c8:c0:fe:a8:c0:8b:de:9f:d5: c3:fd:15:da:4a:aa:c9:79:e4:d6:21:21:cc:ed:ca: a1:38:24:5f:ef:82:dd:89:48:4b:3b:d3:ca:31:30: 35:b1:51:8f:29:4a:6f:0d:f5:cb:72:8b:f0:ff:5d: e7:88:4a:66:8c:13:d3:c6:73:d4:6b:18:2a:d0:d7: 02:53:7e:a5:31:9b:e3:4d:f1:10:c6:4f:68:95:67: 1b:aa:44:13:88:67:93:c3:5e:f4:be:a7:2c:77:2e: 21:40:19:91:2b:6d:5a:72:84:ae:2d:7f:16:ce:82: 04:e2:05:65:e4:fb:eb:e3:2d:d2:2a:fe:c1:55:0a: 18:c6:5c:99:11:10:ad:7d:1e:6b:6f:88:a7:87:52: 7d:a8:26:d3:af:31:6c:6c:70:d5:d9:40:ae:e0:fa: 5e:3c:4d:d4:b0:16:1b:03:b4:20:11:cb:27:62:51: 82:73:28:55:78:08:80:5a:6a:49:95:b2:3a:23:34: 62:da:b2:23:bd:96:96:a0:ab:ac:ce:66:83:82:cf: c2:cb:d8:56:c7:3a:dc:af:d6:1c:ad:3b:3e:04:dd: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 152628 Signature Algorithm: sha256WithRSAEncryption 85:46:b4:bc:f3:61:17:cd:22:46:99:ce:53:b8:2f:88:64:75: 16:5a:e8:54:d1:3c:31:e2:be:76:57:09:d7:5f:cf:dd:a8:f8: 22:39:bd:e5:c6:1f:89:4a:d3:55:37:98:f1:56:5c:26:99:8b: 55:4c:c6:56:dd:5d:8f:d0:ff:62:70:9a:7a:f5:6c:b1:bf:5b: 72:4d:b3:c6:9a:63:06:29:15:b7:dd:99:df:19:c6:14:08:6a: 49:d1:42:e0:c6:66:40:9f:22:37:bd:89:7c:86:9e:db:7c:91: 32:f3:4a:06:1b:54:06:54:9b:42:ec:7d:17:10:44:0a:c8:39: 5a:c3:73:12:0a:d3:8c:12:2e:21:be:bf:b8:f2:b0:a5:83:88: ee:3c:4a:b6:40:9b:56:11:1f:e7:41:b6:0b:1a:8b:52:84:e9: 86:02:45:34:06:3f:ac:0f:56:0e:0f:c9:2d:98:9f:34:46:e9: 62:f0:cf:89:cf:20:d2:92:15:5b:f5:1a:bb:bc:df:7a:ea:05: be:9c:ee:8e:4f:5a:48:16:a1:da:53:71:17:5f:b6:57:54:ce: 1f:58:c9:6c:1e:f9:1f:72:1d:91:24:ca:62:31:be:5d:e9:66: af:04:07:af:28:18:d8:66:60:c9:8c:d4:48:2a:9d:ef:fe:e4: 4d:35:dc:25 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgIUW03vd7Osv7eZ6L6DTK/RlaNoRRMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDQ1NVoX DTI3MDUxMDE1NDk1NVowMzExMC8GA1UEAxMoRDc0RTVFQzVFNjIyNUI5OTlEOTIz QkQzNDQ5N0EzMDYwRURBMEIzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALG+koHkjIrkPUe70Pf60n7hL28IEePu0XsTIRjePvHPrt/hyMD+qMCL3p/V w/0V2kqqyXnk1iEhzO3KoTgkX++C3YlISzvTyjEwNbFRjylKbw31y3KL8P9d54hK ZowT08Zz1GsYKtDXAlN+pTGb403xEMZPaJVnG6pEE4hnk8Ne9L6nLHcuIUAZkStt WnKEri1/Fs6CBOIFZeT76+Mt0ir+wVUKGMZcmREQrX0ea2+Ip4dSfagm068xbGxw 1dlAruD6XjxN1LAWGwO0IBHLJ2JRgnMoVXgIgFpqSZWyOiM0YtqyI72WlqCrrM5m g4LPwsvYVsc63K/WHK07PgTd/a8CAwEAAaOCAmcwggJjMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNdOXsXmIluZnZI700SXowYO2gs7MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9EQlNCQU5LVFcv MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJT QkFOS1RXLzAvRDc0RTVFQzVFNjIyNUI5OTlEOTIzQkQzNDQ5N0EzMDYwRURBMEIz Qi5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMCVDQwDQYJKoZIhvcNAQELBQADggEBAIVGtLzzYRfN IkaZzlO4L4hkdRZa6FTRPDHivnZXCddfz92o+CI5veXGH4lK01U3mPFWXCaZi1VM xlbdXY/Q/2Jwmnr1bLG/W3JNs8aaYwYpFbfdmd8ZxhQIaknRQuDGZkCfIje9iXyG ntt8kTLzSgYbVAZUm0LsfRcQRArIOVrDcxIK04wSLiG+v7jysKWDiO48SrZAm1YR H+dBtgsai1KE6YYCRTQGP6wPVg4PyS2YnzRG6WLwz4nPINKSFVv1Gru833rqBb6c 7o5PWkgWodpTcRdftldUzh9YyWwe+R9yHZEkymIxvl3pZq8EB68oGNhmYMmM1Egq ne/+5E013CU= -----END CERTIFICATE-----Generated at Wed May 13 04:47:03 2026 by rpki-client