$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer File: D82B42B328967B86227F939C5515F94575F4B06F.cer (raw, json) Hash identifier: yfJ1lbhWArfFbyFi7VupeULI815YYNRa15isrYcumIA= Subject key identifier: D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: F4004805562F3FB2EE9F7E437C4610FF72A185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.mft caRepository: rsync://rpkica.twnic.tw/rpki/ISHISH/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:08 +0000 Certificate not after: Mon 10 May 2027 15:52:08 +0000 Subordinate resources: IP: 103.182.226.0/23 IP: 2400:5ea0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f4:00:48:05:56:2f:3f:b2:ee:9f:7e:43:7c:46:10:ff:72:a1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:08 2026 GMT Not After : May 10 15:52:08 2027 GMT Subject: CN=D82B42B328967B86227F939C5515F94575F4B06F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:5f:f3:46:84:d0:aa:66:cb:70:93:62:1f: 15:cc:ab:46:4a:3a:e9:3e:08:c5:f1:d3:c2:d4:ea: e0:56:dc:f0:47:82:11:ab:bc:4d:11:9d:85:c3:ac: a5:ca:32:eb:05:1f:fa:19:2d:d5:e7:2f:e1:bb:ce: 72:5c:4d:cd:68:7d:14:0c:e6:12:39:88:5b:08:a5: 4e:7c:1c:aa:97:00:01:08:32:3b:c5:cc:8e:63:10: bc:50:32:d2:75:18:fa:36:6b:4a:80:41:d8:0a:35: a2:02:fb:86:da:30:0a:e6:75:75:04:53:9c:5a:e7: 33:09:c3:25:32:88:7a:7a:5c:70:4b:94:3a:49:7d: 75:ea:4e:28:10:ab:8f:00:10:d2:a1:1f:a5:d2:3e: f5:21:9d:0e:2f:40:06:d5:40:07:5f:ca:ee:29:ff: b7:86:0e:e3:c9:e6:32:93:d8:6b:da:a7:6f:f8:5c: 79:e1:71:5f:c6:69:14:e6:85:ca:6e:92:6f:f4:07: 9b:e0:0c:e2:ad:58:47:61:5e:94:49:40:9b:0a:f4: 18:b3:27:e1:04:bf:63:2f:ba:a7:68:5b:c7:67:b5: 93:c7:cc:ac:51:e6:e5:3c:f1:5e:35:72:2a:29:f9: 97:4a:36:06:2c:01:83:e1:23:2b:93:18:3f:1f:f0: 6b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.226.0/23 IPv6: 2400:5ea0::/32 Signature Algorithm: sha256WithRSAEncryption 98:ba:53:c1:61:ba:16:3f:32:b1:b1:2a:e5:34:42:c5:ed:09: 3c:9a:81:1a:34:3f:77:88:59:e8:e7:64:4a:b0:99:b1:b9:88: 9b:3e:4a:21:03:95:39:08:24:62:10:59:8f:ff:ca:cb:b8:1c: ca:9c:94:08:32:93:fe:c1:58:0d:c7:57:f9:8d:2f:bf:99:f4: 36:c0:cc:a8:6a:35:36:08:7c:08:37:fb:4b:40:92:d9:3d:26: 08:f2:57:31:4f:88:68:9d:bf:b3:06:34:9a:12:af:e4:77:4e: 09:0f:a8:ec:83:c8:09:ad:12:df:88:c7:db:16:f9:e4:e9:50: d5:a3:d4:63:08:69:1e:ab:89:27:55:8c:70:52:f8:51:3d:30: 06:ee:5e:2e:5b:3c:6c:25:8a:dd:44:09:d4:d1:ba:bc:ef:0b: fa:be:7d:75:31:73:05:5d:20:73:4d:43:e2:e9:49:29:78:07: 4b:d4:66:b9:fb:4f:14:d2:08:a3:84:4e:bc:03:a4:95:a6:15: f2:0e:95:91:9b:74:c6:44:23:f7:fc:a3:d6:c5:9a:7e:e8:f3: 7b:4b:f7:a4:15:af:15:02:e1:fd:b2:c5:67:25:55:0c:09:d4: c3:c8:54:1e:4c:dc:71:7e:3d:0b:31:b6:66:20:a8:c8:e5:eb: 5b:e6:85:e5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIUAPQASAVWLz+y7p9+Q3xGEP9yoYUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDcwOFoX DTI3MDUxMDE1NTIwOFowMzExMC8GA1UEAxMoRDgyQjQyQjMyODk2N0I4NjIyN0Y5 MzlDNTUxNUY5NDU3NUY0QjA2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3oX/NGhNCqZstwk2IfFcyrRko66T4IxfHTwtTq4Fbc8EeCEau8TRGdhcOs pcoy6wUf+hkt1ecv4bvOclxNzWh9FAzmEjmIWwilTnwcqpcAAQgyO8XMjmMQvFAy 0nUY+jZrSoBB2Ao1ogL7htowCuZ1dQRTnFrnMwnDJTKIenpccEuUOkl9depOKBCr jwAQ0qEfpdI+9SGdDi9ABtVAB1/K7in/t4YO48nmMpPYa9qnb/hceeFxX8ZpFOaF ym6Sb/QHm+AM4q1YR2FelElAmwr0GLMn4QS/Yy+6p2hbx2e1k8fMrFHm5TzxXjVy Kin5l0o2BiwBg+EjK5MYPx/wa6ECAwEAAaOCAnUwggJxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNgrQrMolnuGIn+TnFUV+UV19LBvMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JU0hJU0gvMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVNISVNI LzAvRDgyQjQyQjMyODk2N0I4NjIyN0Y5MzlDNTUxNUY5NDU3NUY0QjA2Ri5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAWe24jANBAIAAjAHAwUAJABeoDANBgkqhkiG9w0BAQsF AAOCAQEAmLpTwWG6Fj8ysbEq5TRCxe0JPJqBGjQ/d4hZ6OdkSrCZsbmImz5KIQOV OQgkYhBZj//Ky7gcypyUCDKT/sFYDcdX+Y0vv5n0NsDMqGo1Ngh8CDf7S0CS2T0m CPJXMU+IaJ2/swY0mhKv5HdOCQ+o7IPICa0S34jH2xb55OlQ1aPUYwhpHquJJ1WM cFL4UT0wBu5eLls8bCWK3UQJ1NG6vO8L+r59dTFzBV0gc01D4ulJKXgHS9RmuftP FNIIo4ROvAOklaYV8g6VkZt0xkQj9/yj1sWafujze0v3pBWvFQLh/bLFZyVVDAnU w8hUHkzccX49CzG2ZiCoyOXrW+aF5Q== -----END CERTIFICATE-----Generated at Wed May 13 02:11:32 2026 by rpki-client