$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer File: EC1DB3CB7CE6162748BA2956BC1706446561D664.cer (raw, json) Hash identifier: HaaTRYL2QvdSP4IdjmwOWlik1O+fj41Gz0BVKMxsiXw= Subject key identifier: EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 06B8A8AC5186B1879DD872765F74D1A799BE54D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft caRepository: rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:57:56 +0000 Certificate not after: Mon 10 May 2027 16:02:56 +0000 Subordinate resources: AS: 150773 IP: 103.124.252.0/22 IP: 2403:e940::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b8:a8:ac:51:86:b1:87:9d:d8:72:76:5f:74:d1:a7:99:be:54:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:57:56 2026 GMT Not After : May 10 16:02:56 2027 GMT Subject: CN=EC1DB3CB7CE6162748BA2956BC1706446561D664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:15:5f:04:60:72:b4:22:8f:19:cd:18:84: 6d:7f:6a:b4:60:03:7b:35:60:a1:6b:fb:28:2c:94: 54:c1:83:16:13:8c:c3:04:b7:70:71:56:01:fc:01: c9:ea:2b:e6:74:c7:1f:a5:4d:d5:43:9a:79:3b:9f: 84:9e:88:42:5b:10:c6:f2:18:04:ad:2e:15:d7:e1: f0:d0:b5:e8:aa:36:8c:f9:c5:22:86:0b:39:6a:00: 49:eb:b4:b1:a4:06:67:02:1f:00:5a:3f:cb:3e:30: 33:b6:ee:da:16:5e:3e:ec:de:7d:52:b4:43:3b:43: 63:e1:4f:0a:55:f2:08:ff:c3:f5:b1:fb:47:dd:f9: ca:80:e3:1c:42:dd:ff:1f:87:99:e5:73:9d:0f:78: fa:fb:f4:52:33:57:af:1d:40:b7:51:25:72:8e:a0: 10:b5:6c:14:46:b6:9c:af:f3:b9:a0:c1:85:d3:ea: ae:18:d6:16:fd:14:e5:1d:62:c7:31:9f:5b:bb:3f: 53:57:75:25:ca:c3:c6:f8:74:cf:a0:55:3a:64:6d: 24:60:01:9f:4f:bb:75:6d:29:ce:b7:7c:75:a1:9c: 7a:dc:35:b7:96:2f:41:3d:85:af:47:f3:fa:29:e9: 18:dc:fa:71:aa:3f:20:4b:62:84:c4:39:89:6a:49: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.252.0/22 IPv6: 2403:e940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 150773 Signature Algorithm: sha256WithRSAEncryption 49:98:d4:74:8a:4f:7e:99:52:ac:be:67:1e:1e:e5:e3:6f:d5: 53:bf:cb:59:b8:28:e0:7a:49:21:18:13:f5:ac:fd:c3:f7:e6: e5:23:95:de:8b:a6:83:d7:c5:48:e5:56:81:d8:b4:de:44:79: 98:e7:07:27:67:ab:cc:5f:36:e6:aa:5d:92:54:03:de:71:91: de:34:cd:cf:16:f5:74:05:fa:1d:37:57:0f:b1:ef:f3:e0:98: 99:70:06:1b:c9:0a:5a:6d:77:f9:2f:b3:73:ad:37:35:a4:b4: 44:b4:c2:4a:ea:23:92:13:f5:0c:7d:38:fe:31:04:f4:76:55: 52:f3:23:00:20:6a:5c:4f:88:11:4b:be:24:0f:bb:89:8b:95: 9b:8c:98:1f:d4:78:a3:a6:86:11:e3:87:8e:7f:99:88:2d:d3: 0c:5c:bc:f3:79:4f:fe:d8:fd:77:4d:27:ba:51:d6:92:eb:68: ae:2d:be:c6:6e:bf:00:d0:dd:85:b3:60:26:4a:bc:bb:13:d1: f4:4e:28:de:37:f9:3e:dd:c5:57:2a:11:e6:79:18:be:a0:fa: 9e:2e:d9:3c:0c:c6:c4:6d:6e:7d:fe:d6:db:d1:cb:58:43:c0: 9d:df:cd:30:aa:00:a2:e3:2e:d2:e3:9f:2c:45:7a:44:47:78: 4b:6a:8d:08 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUBriorFGGsYed2HJ2X3TRp5m+VNgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTc1NloX DTI3MDUxMDE2MDI1NlowMzExMC8GA1UEAxMoRUMxREIzQ0I3Q0U2MTYyNzQ4QkEy OTU2QkMxNzA2NDQ2NTYxRDY2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdPFV8EYHK0Io8ZzRiEbX9qtGADezVgoWv7KCyUVMGDFhOMwwS3cHFWAfwB yeor5nTHH6VN1UOaeTufhJ6IQlsQxvIYBK0uFdfh8NC16Ko2jPnFIoYLOWoASeu0 saQGZwIfAFo/yz4wM7bu2hZePuzefVK0QztDY+FPClXyCP/D9bH7R935yoDjHELd /x+HmeVznQ94+vv0UjNXrx1At1Elco6gELVsFEa2nK/zuaDBhdPqrhjWFv0U5R1i xzGfW7s/U1d1JcrDxvh0z6BVOmRtJGABn0+7dW0pzrd8daGcetw1t5YvQT2Fr0fz +inpGNz6cao/IEtihMQ5iWpJJs0CAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOwds8t85hYnSLopVrwXBkRlYdZkMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UT1BDSElOQS8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UT1BD SElOQS8wL0VDMURCM0NCN0NFNjE2Mjc0OEJBMjk1NkJDMTcwNjQ0NjU2MUQ2NjQu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnfPwwDQQCAAIwBwMFACQD6UAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAkz1MA0GCSqGSIb3DQEBCwUAA4IBAQBJmNR0ik9+mVKs vmceHuXjb9VTv8tZuCjgekkhGBP1rP3D9+blI5Xei6aD18VI5VaB2LTeRHmY5wcn Z6vMXzbmql2SVAPecZHeNM3PFvV0BfodN1cPse/z4JiZcAYbyQpabXf5L7NzrTc1 pLREtMJK6iOSE/UMfTj+MQT0dlVS8yMAIGpcT4gRS74kD7uJi5WbjJgf1HijpoYR 44eOf5mILdMMXLzzeU/+2P13TSe6UdaS62iuLb7Gbr8A0N2Fs2AmSry7E9H0Tije N/k+3cVXKhHmeRi+oPqeLtk8DMbEbW59/tbb0ctYQ8Cd380wqgCi4y7S458sRXpE R3hLao0I -----END CERTIFICATE-----Generated at Tue May 12 22:03:24 2026 by rpki-client