$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer File: E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer (raw, json) Hash identifier: FZ5ufxB4a8Gk9h2hHaX/ocIJJ2NiQ/7Vay8QteWjoCg= Subject key identifier: E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 296F2D3454C0496B5885A44DF85431676790F8E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft caRepository: rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:40 +0000 Certificate not after: Mon 10 May 2027 15:52:40 +0000 Subordinate resources: AS: 17502 IP: 103.136.210.0/23 IP: 2404:9cc0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6f:2d:34:54:c0:49:6b:58:85:a4:4d:f8:54:31:67:67:90:f8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:40 2026 GMT Not After : May 10 15:52:40 2027 GMT Subject: CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:b8:0d:7e:81:30:59:32:8d:cc:23:e6:44: 88:e4:3b:37:fe:90:4f:27:b6:df:1b:7e:44:ea:1a: 97:7c:21:da:87:40:93:56:21:2f:ec:ad:4e:a3:81: c7:d7:42:78:08:02:76:44:ac:6e:c8:68:d6:a2:74: 32:97:69:32:ba:f4:11:84:00:6c:71:39:03:f2:16: 38:d7:bb:c8:c4:59:3e:f4:6e:81:cd:5d:42:bf:2a: 70:d2:4e:05:65:f5:86:cd:7b:51:42:ed:da:44:6b: e0:10:97:79:3f:dc:95:88:86:be:40:6f:5f:b3:32: c5:6e:d6:96:37:3a:6c:8a:b0:28:5f:e1:9c:7c:3d: e7:b7:95:ce:56:d3:19:da:28:fa:6b:42:69:34:57: 67:6f:6d:fa:5e:ab:01:2b:56:45:4f:67:cd:50:ac: e0:13:5f:f2:55:a9:de:0c:65:00:d6:b2:ec:73:55: dc:cd:34:3b:ce:a3:6f:90:df:4d:9d:27:c6:8d:36: 9e:67:6c:ee:5c:0e:a6:fd:be:80:bc:27:0d:07:cc: 94:40:dd:81:84:5b:09:d3:45:87:d0:e2:f9:36:c1: 02:c3:be:47:4e:6d:a8:e4:9b:26:e6:2e:8e:4d:ec: 4b:dd:62:01:fa:96:99:1b:33:42:f2:75:ba:82:4d: 94:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.210.0/23 IPv6: 2404:9cc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17502 Signature Algorithm: sha256WithRSAEncryption 1d:ce:6e:c1:c7:ef:b5:c0:53:04:b8:43:23:dd:81:58:33:74: bd:d5:fa:3a:f6:4d:d1:24:34:c8:ab:dc:8d:15:36:03:9c:20: a8:c5:bd:8d:dc:15:74:07:1c:7f:d4:8e:98:1e:42:4b:c6:99: 01:27:2a:d2:a2:ed:4b:f1:32:ef:d9:22:b9:00:79:2d:eb:ee: 9f:84:91:52:59:3a:f8:46:25:53:e6:2d:04:f6:28:60:bc:6f: 1e:55:81:99:72:02:93:a0:ed:90:ae:1f:69:2c:47:05:c2:2a: 65:c5:a1:2c:44:fd:c4:e0:52:8e:86:97:0c:3c:05:0b:3e:7f: 05:f0:6c:43:0d:b1:b3:1b:f8:ec:6b:35:20:82:e0:48:ba:29: 39:89:e8:e0:d8:fb:2a:b3:a7:77:5e:4e:d4:3f:3f:d3:5a:8f: 78:80:2e:9e:51:e2:dd:13:61:e2:dd:69:15:85:74:d5:81:26: 6b:28:6e:e6:4f:17:bd:24:e2:0a:ef:3c:16:c5:ad:62:48:1a: a1:90:8f:66:d5:b8:f4:b6:bf:e0:69:b1:0c:7a:26:79:40:59: 58:3f:f1:61:f9:b6:55:c8:f1:7f:80:fb:f9:b1:d5:c0:55:3b: a9:f0:19:f5:c9:58:cb:84:23:32:ff:93:ff:a3:47:b0:22:84: fe:eb:e2:93 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgIUKW8tNFTASWtYhaRN+FQxZ2eQ+OUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDc0MFoX DTI3MDUxMDE1NTI0MFowMzExMC8GA1UEAxMoRTA2OUNCRkQyMzRGMUFCNEU1NDBG RUQ1RThFM0ExNkQwRjI5ODdBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5puA1+gTBZMo3MI+ZEiOQ7N/6QTye23xt+ROoal3wh2odAk1YhL+ytTqOB x9dCeAgCdkSsbsho1qJ0MpdpMrr0EYQAbHE5A/IWONe7yMRZPvRugc1dQr8qcNJO BWX1hs17UULt2kRr4BCXeT/clYiGvkBvX7MyxW7Wljc6bIqwKF/hnHw957eVzlbT Gdoo+mtCaTRXZ29t+l6rAStWRU9nzVCs4BNf8lWp3gxlANay7HNV3M00O86jb5Df TZ0nxo02nmds7lwOpv2+gLwnDQfMlEDdgYRbCdNFh9Di+TbBAsO+R05tqOSbJuYu jk3sS91iAfqWmRszQvJ1uoJNlOsCAwEAAaOCApYwggKSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOBpy/0jTxq05UD+1ejjoW0PKYelMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9LVUFOR1NISUgv MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1VB TkdTSElILzAvRTA2OUNCRkQyMzRGMUFCNEU1NDBGRUQ1RThFM0ExNkQwRjI5ODdB NS5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAWeI0jANBAIAAjAHAwUAJAScwDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJEXjANBgkqhkiG9w0BAQsFAAOCAQEAHc5uwcfvtcBT BLhDI92BWDN0vdX6OvZN0SQ0yKvcjRU2A5wgqMW9jdwVdAccf9SOmB5CS8aZAScq 0qLtS/Ey79kiuQB5Levun4SRUlk6+EYlU+YtBPYoYLxvHlWBmXICk6DtkK4faSxH BcIqZcWhLET9xOBSjoaXDDwFCz5/BfBsQw2xsxv47Gs1IILgSLopOYno4Nj7KrOn d15O1D8/01qPeIAunlHi3RNh4t1pFYV01YEmayhu5k8XvSTiCu88FsWtYkgaoZCP ZtW49La/4GmxDHomeUBZWD/xYfm2Vcjxf4D7+bHVwFU7qfAZ9clYy4QjMv+T/6NH sCKE/uvikw== -----END CERTIFICATE-----Generated at Tue May 12 22:50:04 2026 by rpki-client