$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer File: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer (raw, json) Hash identifier: GQVwLEC6JD16yUnPPRXSJroRRxqDXJG4dBPhqBlxm9E= Subject key identifier: E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 07410AA7E6CBF0BF188677DC36FC63C72ACB09CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft caRepository: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Fri 17 Jul 2026 03:58:50 +0000 Certificate not after: Fri 16 Jul 2027 04:03:50 +0000 Subordinate resources: AS: 131624 IP: 2402:6420::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:41:0a:a7:e6:cb:f0:bf:18:86:77:dc:36:fc:63:c7:2a:cb:09:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Jul 17 03:58:50 2026 GMT Not After : Jul 16 04:03:50 2027 GMT Subject: CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:76:5b:b6:d7:f9:9f:69:b7:15:ce:1c:c4: f6:71:24:a5:59:ee:1f:ba:bc:35:1c:45:66:46:06: 40:34:c7:30:d3:5e:a0:1e:b3:ce:5f:3e:17:b8:10: a3:5f:27:f6:6b:86:7a:b1:1a:52:b1:bd:cf:b1:10: e7:3d:f9:6b:21:7d:9c:05:7d:49:25:4b:f1:89:69: c1:22:9e:a9:69:3d:12:78:dc:29:3b:8b:09:46:9f: fa:e4:57:21:77:1d:b2:08:a4:5a:18:67:b4:33:ce: 33:7f:6e:b2:a9:69:d9:8c:72:b7:85:aa:9a:22:26: 03:ff:59:30:e2:a6:71:58:4d:17:21:a6:d7:96:94: 74:85:2f:f5:23:59:c5:12:d5:2b:33:6f:e2:61:fb: d7:0a:90:49:8d:85:a4:3d:ef:ae:c9:d1:48:1d:85: e3:91:ff:54:07:80:40:86:6c:52:a6:82:e7:3d:a4: 95:ac:55:10:5f:c1:c5:0f:34:c6:d8:d6:21:b5:50: bc:cc:6a:bd:cc:dd:41:a6:04:5c:64:a4:6d:04:65: 4b:54:27:ea:3f:c8:67:f1:34:e5:53:12:4c:27:db: 86:b8:03:36:d1:6e:70:b6:15:3c:02:43:2c:45:46: 48:70:00:5a:be:ab:90:0d:8a:3f:83:d1:70:ab:ca: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:6420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131624 Signature Algorithm: sha256WithRSAEncryption 21:c3:a3:2a:02:23:58:69:03:b6:d8:21:f6:4c:38:9d:0d:bc: 8a:6e:cf:aa:1a:eb:6d:5a:ba:dc:87:b5:ff:49:8d:47:75:44: 47:46:ef:14:cc:39:22:cb:5e:54:e2:e5:bd:11:ea:a4:a7:ee: bf:51:27:8b:d9:61:2b:1b:69:be:59:1a:7d:b9:db:64:ce:4a: d8:84:9c:91:78:26:08:6f:58:d9:d0:01:d8:0f:50:b1:4a:cc: 8f:54:c7:05:4c:22:b7:96:29:8c:fa:5c:0d:a7:1e:aa:25:5f: 73:f6:e1:f0:78:10:85:17:a4:db:e9:97:fe:06:0d:f8:4f:6a: 90:af:28:36:32:b8:a0:f2:f2:36:33:21:cd:58:e6:31:94:d9: 39:a2:de:d8:45:04:5d:20:dc:a2:0b:bc:c0:43:04:03:08:f3: bc:98:b1:d8:7d:d1:14:96:98:71:3c:f9:7f:e3:03:1e:7c:f1: dc:97:86:d0:6d:ae:30:63:7e:01:37:20:c6:db:65:4b:27:b8: 22:e7:55:b4:ca:29:67:33:5a:6b:83:ae:fd:49:ee:6f:5c:ec: 4b:ec:61:03:06:f3:9f:06:db:bc:bf:50:38:20:ba:ca:81:bb: 8f:8e:67:97:3a:1a:7b:44:60:b7:15:e3:d0:47:a5:7a:3b:a6: e0:88:f0:0b -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUB0EKp+bL8L8YhnfcNvxjxyrLCc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDcxNzAzNTg1MFoX DTI3MDcxNjA0MDM1MFowMzExMC8GA1UEAxMoRTY4QzRDMTAzMDI5Qjg0MTQyQTVD QUIzRUZCODUyRkRDMUEzOUJCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQTdlu21/mfabcVzhzE9nEkpVnuH7q8NRxFZkYGQDTHMNNeoB6zzl8+F7gQ o18n9muGerEaUrG9z7EQ5z35ayF9nAV9SSVL8YlpwSKeqWk9EnjcKTuLCUaf+uRX IXcdsgikWhhntDPOM39usqlp2Yxyt4WqmiImA/9ZMOKmcVhNFyGm15aUdIUv9SNZ xRLVKzNv4mH71wqQSY2FpD3vrsnRSB2F45H/VAeAQIZsUqaC5z2klaxVEF/BxQ80 xtjWIbVQvMxqvczdQaYEXGSkbQRlS1Qn6j/IZ/E05VMSTCfbhrgDNtFucLYVPAJD LEVGSHAAWr6rkA2KP4PRcKvKecsCAwEAAaOCAoMwggJ/MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOaMTBAwKbhBQqXKs++4Uv3Bo5uwMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET1dURUsvMS8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzEvRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACQCZCAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAgIo MA0GCSqGSIb3DQEBCwUAA4IBAQAhw6MqAiNYaQO22CH2TDidDbyKbs+qGuttWrrc h7X/SY1HdURHRu8UzDkiy15U4uW9Eeqkp+6/USeL2WErG2m+WRp9udtkzkrYhJyR eCYIb1jZ0AHYD1CxSsyPVMcFTCK3limM+lwNpx6qJV9z9uHweBCFF6Tb6Zf+Bg34 T2qQryg2Mrig8vI2MyHNWOYxlNk5ot7YRQRdINyiC7zAQwQDCPO8mLHYfdEUlphx PPl/4wMefPHcl4bQba4wY34BNyDG22VLJ7gi51W0yilnM1prg679Se5vXOxL7GED BvOfBtu8v1A4ILrKgbuPjmeXOhp7RGC3FePQR6V6O6bgiPAL -----END CERTIFICATE-----Generated at Thu Jul 23 23:58:07 2026 by rpki-client