$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer File: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer (raw, json) Hash identifier: 3bOzZkdsdf5mTu9h/l+S1arikLhkKIBKdSTd9ctDhm8= Subject key identifier: DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 19D2BD48FFA23F826DB0DE2082F1E5D0D47D5420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNDC/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:58:13 +0000 Certificate not after: Mon 10 May 2027 16:03:13 +0000 Subordinate resources: IP: 103.146.164.0/23 IP: 2405:9b40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d2:bd:48:ff:a2:3f:82:6d:b0:de:20:82:f1:e5:d0:d4:7d:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:58:13 2026 GMT Not After : May 10 16:03:13 2027 GMT Subject: CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:1b:92:4c:fa:32:30:a1:21:4f:04:0f:32: ee:7e:57:1a:1f:3e:39:af:b2:28:83:99:c1:38:e2: d9:57:77:aa:94:62:eb:f0:b5:bc:c5:ed:c8:8e:09: 95:c5:bb:bf:e3:de:e6:63:f7:1b:65:85:71:78:9a: 51:b2:30:d0:ea:b6:49:fe:33:38:ba:40:4d:c1:3c: cc:6b:84:9f:1d:f5:87:0e:bc:c0:36:2a:f2:fe:fa: 08:ab:27:65:3a:e5:e8:2f:82:0c:76:3d:e4:50:71: dd:c9:fa:3b:18:65:7f:ca:72:33:c0:62:a8:4c:43: 4a:0d:5f:8e:d2:49:5d:1f:78:4d:35:19:bd:e8:4c: 62:1f:b7:af:19:47:68:5c:73:a9:85:aa:92:cf:c3: 6d:4e:3d:87:3a:7b:ad:78:56:e7:3c:81:20:21:54: f5:02:0e:72:0b:54:48:77:b5:a3:10:c2:ce:fb:48: 05:76:4e:f1:f0:92:dc:ee:5f:71:3a:f9:d1:7a:c8: a1:b3:31:a5:b3:41:e4:95:0e:61:70:cd:25:7f:1a: 09:67:df:3e:8b:ca:2a:b7:80:47:50:3d:1a:fe:d9: ec:ef:8a:73:c5:03:3f:09:72:07:25:b9:9b:b6:6f: 29:a8:25:4a:e0:f0:ae:6c:f3:01:54:82:cf:8f:22: d1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.164.0/23 IPv6: 2405:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 42:4e:2d:49:f1:ae:68:cd:00:a7:7f:c7:21:fd:a1:c2:34:a7: f8:53:60:3d:c3:1d:0c:8f:3c:b1:6c:6d:c5:c5:dc:c0:c5:8c: ec:35:c7:ac:b3:1b:a4:a7:02:ab:c9:51:84:5f:54:a8:f4:0b: 77:b6:c4:27:0e:43:b9:75:d3:8e:ff:ed:cd:b6:8a:09:a5:d1: 4b:57:bf:be:0f:30:dd:ef:30:63:b7:17:3d:50:71:05:4b:46: 63:bb:ef:d2:46:00:24:5b:ee:2b:d3:26:f3:23:a5:b6:80:05: 29:fb:ad:4f:48:04:9d:68:ae:e3:c6:70:f7:ac:f8:ff:36:83: f9:80:8c:bc:d2:1d:c1:b3:17:1e:31:4e:b5:d6:e8:51:5c:3e: 20:15:40:d2:ba:a2:97:1c:cd:b3:05:c0:ca:b4:21:cf:31:d6: de:f4:1c:69:68:41:4f:e0:9d:31:ef:09:1e:93:e9:8b:f8:5a: 10:55:74:c6:0c:8f:ba:42:52:e7:73:af:7f:71:f3:b7:4f:da: a3:6c:cb:69:2a:ad:03:06:8b:7e:3f:f1:df:08:a0:1b:cc:8f: d8:78:a7:68:9d:6c:d8:9d:25:75:4d:c2:23:bc:a2:cc:f5:fd: 69:1f:58:40:f7:22:a0:24:f1:6b:5e:1b:d0:e9:94:ca:79:9e: ef:8c:04:39 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIUGdK9SP+iP4JtsN4ggvHl0NR9VCAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTgxM1oX DTI3MDUxMDE2MDMxM1owMzExMC8GA1UEAxMoREIzMENFOUI3Rjg1NzNCRkE4Qzgx MUI4OEJDOTc5QzlCNTM3ODMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPmG5JM+jIwoSFPBA8y7n5XGh8+Oa+yKIOZwTji2Vd3qpRi6/C1vMXtyI4J lcW7v+Pe5mP3G2WFcXiaUbIw0Oq2Sf4zOLpATcE8zGuEnx31hw68wDYq8v76CKsn ZTrl6C+CDHY95FBx3cn6Oxhlf8pyM8BiqExDSg1fjtJJXR94TTUZvehMYh+3rxlH aFxzqYWqks/DbU49hzp7rXhW5zyBICFU9QIOcgtUSHe1oxDCzvtIBXZO8fCS3O5f cTr50XrIobMxpbNB5JUOYXDNJX8aCWffPovKKreAR1A9Gv7Z7O+Kc8UDPwlyByW5 m7ZvKaglSuDwrmzzAVSCz48i0UcCAwEAAaOCAnMwggJvMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNswzpt/hXO/qMgRuIvJecm1N4MaMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05EQy8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05EQy8w L0RCMzBDRTlCN0Y4NTczQkZBOEM4MTFCODhCQzk3OUM5QjUzNzgzMUEubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnkqQwDQQCAAIwBwMFACQFm0AwDQYJKoZIhvcNAQELBQAD ggEBAEJOLUnxrmjNAKd/xyH9ocI0p/hTYD3DHQyPPLFsbcXF3MDFjOw1x6yzG6Sn AqvJUYRfVKj0C3e2xCcOQ7l1047/7c22igml0UtXv74PMN3vMGO3Fz1QcQVLRmO7 79JGACRb7ivTJvMjpbaABSn7rU9IBJ1oruPGcPes+P82g/mAjLzSHcGzFx4xTrXW 6FFcPiAVQNK6opcczbMFwMq0Ic8x1t70HGloQU/gnTHvCR6T6Yv4WhBVdMYMj7pC Uudzr39x87dP2qNsy2kqrQMGi34/8d8IoBvMj9h4p2idbNidJXVNwiO8osz1/Wkf WED3IqAk8WteG9DplMp5nu+MBDk= -----END CERTIFICATE-----Generated at Tue May 12 22:47:34 2026 by rpki-client