$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/F382B7314BE5F96FAB63C6934F221809499142AF.cer File: F382B7314BE5F96FAB63C6934F221809499142AF.cer (raw, json) Hash identifier: 4e/PmYbCyT1zbIhjtH9fU87LfWq3S1ACitcqRYU0tpw= Subject key identifier: F3:82:B7:31:4B:E5:F9:6F:AB:63:C6:93:4F:22:18:09:49:91:42:AF Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 5330387D52DB167C7722B965CDD7122F8CF2B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.mft caRepository: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:24 +0000 Certificate not after: Mon 10 May 2027 15:51:24 +0000 Subordinate resources: AS: 18043 IP: 2402:3ce0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:30:38:7d:52:db:16:7c:77:22:b9:65:cd:d7:12:2f:8c:f2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:46:24 2026 GMT Not After : May 10 15:51:24 2027 GMT Subject: CN=F382B7314BE5F96FAB63C6934F221809499142AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:5a:b2:16:b2:7c:b7:a5:26:95:14:0b:14: 3c:22:8e:f0:07:69:6a:7b:f7:34:25:f0:f1:ae:4b: bb:76:6a:58:db:c2:01:82:e9:d2:87:fc:25:28:b8: 59:96:84:85:6a:6e:90:ce:cc:31:6e:f5:2a:c9:9e: f6:85:50:98:6f:2c:d3:ab:f4:14:3e:79:17:60:6d: 6d:e6:24:76:f2:6a:63:57:e7:3f:36:e2:12:4d:c5: cc:1e:45:b7:23:7b:fc:0a:02:3c:9d:17:b0:84:67: 06:ba:10:f9:70:c9:70:30:e0:46:9b:a8:6d:c1:38: 94:7e:20:e5:19:c0:bd:0f:f8:ce:2c:b6:ab:51:55: ea:38:65:a4:19:e7:f0:46:6e:09:91:b0:f2:f5:e8: 5c:55:9b:40:b2:b6:5d:32:f0:6d:94:f9:02:88:a5: d6:83:52:ce:88:a9:17:4d:f3:94:a8:b9:e0:2b:0b: 97:8f:87:d3:3c:f5:15:87:ba:d8:e6:91:b1:3c:27: 8f:6e:0b:2d:e5:97:a0:85:15:0c:52:de:5c:39:85: b7:32:82:df:5a:d7:16:e4:46:5f:ae:bb:b4:b9:ee: 96:e1:a6:1d:08:54:36:d2:7e:5f:50:c8:c9:b9:b3: 0b:78:52:7a:a1:88:27:5b:47:05:84:c8:66:af:8a: e1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:82:B7:31:4B:E5:F9:6F:AB:63:C6:93:4F:22:18:09:49:91:42:AF X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:3ce0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18043 Signature Algorithm: sha256WithRSAEncryption 19:f2:36:b9:49:76:40:02:96:6b:91:5c:e6:c7:ff:3e:22:a3: ad:6d:cd:09:66:a6:d3:72:73:69:23:2f:ef:1b:58:2c:07:f2: cd:6b:c9:ad:a6:80:0a:9e:1e:5e:9a:45:da:a6:0c:4e:ce:55: 5d:30:25:b2:72:53:76:04:c1:1e:2e:cf:00:c1:58:d5:0f:a4: fa:d5:59:b9:52:57:f8:63:01:b7:28:94:92:95:fb:50:5d:23: ba:03:00:5b:d7:1d:6a:e4:e4:a4:1e:98:94:02:84:61:f0:47: 45:12:f3:f9:6c:a8:5e:0f:74:c9:8d:6b:4f:2c:e9:6b:40:46: 18:de:38:e6:46:e1:01:ff:c0:37:fd:ea:f5:d5:b3:50:f9:73: 6d:f9:88:e1:42:f7:9e:ff:72:0d:cc:18:24:4b:fa:fd:ca:c7: 60:73:1a:b9:be:a2:38:4c:32:fe:9d:5f:f4:c3:b4:88:9b:1e: ad:99:fa:33:cc:67:6a:70:69:9e:e6:80:1e:13:0e:34:51:6a: 36:42:16:49:21:f2:ca:ff:0d:5c:b2:8b:ed:4a:58:7c:71:61: ac:99:0e:55:76:7c:66:51:81:d2:01:60:a8:42:f6:c0:a0:bd: 8e:db:aa:7b:68:4e:a2:08:ae:87:7b:9e:8d:81:8c:48:e5:d2: cd:26:4c:a1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgITUzA4fVLbFnx3IrllzdcSL4zyuDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFCREIyOTAwMDAxMTAvBgNVBAUTKERBNjMyNTA1NzY3 NDEzQTE0MDlBM0UzM0I5OUQyNTZDREZCMTkwMUQwHhcNMjYwNTExMTU0NjI0WhcN MjcwNTEwMTU1MTI0WjAzMTEwLwYDVQQDEyhGMzgyQjczMTRCRTVGOTZGQUI2M0M2 OTM0RjIyMTgwOTQ5OTE0MkFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbVashayfLelJpUUCxQ8Io7wB2lqe/c0JfDxrku7dmpY28IBgunSh/wlKLhZ loSFam6QzswxbvUqyZ72hVCYbyzTq/QUPnkXYG1t5iR28mpjV+c/NuISTcXMHkW3 I3v8CgI8nRewhGcGuhD5cMlwMOBGm6htwTiUfiDlGcC9D/jOLLarUVXqOGWkGefw Rm4JkbDy9ehcVZtAsrZdMvBtlPkCiKXWg1LOiKkXTfOUqLngKwuXj4fTPPUVh7rY 5pGxPCePbgst5ZeghRUMUt5cOYW3MoLfWtcW5EZfrru0ue6W4aYdCFQ20n5fUMjJ ubMLeFJ6oYgnW0cFhMhmr4rhWwIDAQABo4ICiDCCAoQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQU84K3MUvl+W+rY8aTTyIYCUmRQq8wHwYDVR0jBBgwFoAU2mMl BXZ0E6FAmj4zuZ0lbN+xkB0wDgYDVR0PAQH/BAQDAgEGMGQGA1UdHwRdMFswWaBX oFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0RBNjMy NTA1NzY3NDEzQTE0MDlBM0UzM0I5OUQyNTZDREZCMTkwMUQuY3JsMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyLzJtTWxCWFow RTZGQW1qNHp1WjBsYk4teGtCMC5jZXIwgeMGCCsGAQUFBwELBIHWMIHTMDUGCCsG AQUFBzAFhilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hDQ0dfSENFQi8w LzBhBggrBgEFBQcwCoZVcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9IQ0NH X0hDRUIvMC9GMzgyQjczMTRCRTVGOTZGQUI2M0M2OTM0RjIyMTgwOTQ5OTE0MkFG Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90 aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAJAI84DAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJGezANBgkqhkiG9w0BAQsFAAOCAQEAGfI2uUl2QAKWa5Fc5sf/PiKjrW3NCWam 03JzaSMv7xtYLAfyzWvJraaACp4eXppF2qYMTs5VXTAlsnJTdgTBHi7PAMFY1Q+k +tVZuVJX+GMBtyiUkpX7UF0jugMAW9cdauTkpB6YlAKEYfBHRRLz+WyoXg90yY1r Tyzpa0BGGN445kbhAf/AN/3q9dWzUPlzbfmI4UL3nv9yDcwYJEv6/crHYHMaub6i OEwy/p1f9MO0iJserZn6M8xnanBpnuaAHhMONFFqNkIWSSHyyv8NXLKL7UpYfHFh rJkOVXZ8ZlGB0gFgqEL2wKC9jtuqe2hOogiuh3uejYGMSOXSzSZMoQ== -----END CERTIFICATE-----Generated at Tue May 12 22:16:41 2026 by rpki-client