$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer File: F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer (raw, json) Hash identifier: GbT1YV7SOwiWmsMVXx/0GHbXIpfgNdG1bhz5j3qIFeg= Subject key identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 5830EEF8CBDF9EFA8A176E61FB177C5CBE80B2D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft caRepository: rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:29 +0000 Certificate not after: Mon 10 May 2027 15:49:29 +0000 Subordinate resources: AS: 150766 IP: 36.50.228.0/23 IP: 2401:5da0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:30:ee:f8:cb:df:9e:fa:8a:17:6e:61:fb:17:7c:5c:be:80:b2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:44:29 2026 GMT Not After : May 10 15:49:29 2027 GMT Subject: CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:73:d8:4d:17:6d:b0:b5:6a:58:23:91:d7:d9: f2:98:ac:4e:de:09:04:5a:bf:53:9b:38:32:86:6b: 8b:86:a5:98:c1:68:83:50:9f:09:6c:b2:b8:1e:80: 8f:e9:21:c2:4b:2f:b4:09:e3:62:50:4a:4f:3a:9d: 7b:e2:27:fb:d6:55:c4:50:36:f0:a5:e5:a5:60:0d: 3b:e2:f7:3b:53:54:45:63:65:0d:7a:9a:2f:39:75: 01:1f:0d:23:ce:97:e6:b1:7e:1c:62:0d:dd:f7:16: 30:41:c5:72:15:95:31:e9:d2:f7:36:f8:1c:9d:13: ef:df:c9:e8:5e:3e:b9:2b:89:9d:83:ad:4b:11:10: 65:4b:4d:db:c8:fb:94:8b:11:d7:81:9c:7e:15:76: 61:1b:1f:84:a0:bf:39:a0:f7:33:d9:92:37:d8:c7: 89:d4:28:0f:09:57:29:a9:39:50:a5:c1:b3:4a:d7: be:15:f9:db:bf:e7:0a:b9:73:5f:48:d4:dd:a4:0d: 74:be:9a:40:de:f7:1d:97:1a:56:4f:a0:f6:84:0e: a4:a3:4c:f3:23:8f:fc:e2:f2:62:09:d9:7c:3b:41: 93:8e:d8:17:f3:9e:97:ea:a5:40:93:cc:bc:cc:ba: 6d:8e:4a:3b:c9:b6:ec:49:77:09:5f:58:ea:76:36: c6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.228.0/23 IPv6: 2401:5da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 150766 Signature Algorithm: sha256WithRSAEncryption 8a:c1:0a:d5:18:ca:fe:cd:15:12:d5:33:c3:f2:3c:29:c1:64: ad:61:88:2b:80:fc:b6:bf:b6:05:d8:6b:be:2a:e4:7c:ca:8a: 92:f5:d4:2a:25:20:97:8c:6a:55:4e:f6:fc:47:42:c5:40:96: 85:44:7b:44:ea:62:6a:4b:8b:59:8b:e9:08:ae:6f:aa:dd:e3: 40:02:be:f3:21:2f:82:b6:d4:24:32:7d:29:20:7a:3c:99:9a: 99:82:08:b4:7b:5f:5e:72:cf:ca:a7:8d:d8:15:33:af:f4:6a: f9:c0:55:af:d6:dc:5a:79:e6:03:58:c1:bf:8c:89:c9:e4:a0: cf:40:5c:4a:30:bf:4c:2b:0b:d2:06:35:25:89:ce:c1:11:9d: a2:46:6e:df:45:5e:fc:ca:88:4c:b8:5c:6d:bf:b5:71:27:f2: 16:f6:e6:92:e0:c7:e4:47:45:3f:e7:46:a6:f4:fb:c7:e5:d3: c0:df:f8:d9:15:65:68:ed:39:22:1c:c8:1b:c6:2d:98:50:8a: e0:36:fa:bd:de:aa:23:64:c5:f9:b3:87:4d:62:26:11:fc:15: b0:af:9e:89:42:ad:12:3e:eb:7f:36:e7:45:5c:39:49:a9:02: ae:f8:66:04:8c:9d:2b:ab:00:98:2b:91:33:b5:64:e9:91:df: d6:0e:2e:c8 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgIUWDDu+MvfnvqKF25h+xd8XL6AstgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDQyOVoX DTI3MDUxMDE1NDkyOVowMzExMC8GA1UEAxMoRjgyNUQ4NTI3NDM0Q0FGMEZDRjlG NjU0NDZENkVCMDZDQTg5OTNGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtz2E0XbbC1algjkdfZ8pisTt4JBFq/U5s4MoZri4almMFog1CfCWyyuB6A j+khwksvtAnjYlBKTzqde+In+9ZVxFA28KXlpWANO+L3O1NURWNlDXqaLzl1AR8N I86X5rF+HGIN3fcWMEHFchWVMenS9zb4HJ0T79/J6F4+uSuJnYOtSxEQZUtN28j7 lIsR14GcfhV2YRsfhKC/OaD3M9mSN9jHidQoDwlXKak5UKXBs0rXvhX527/nCrlz X0jU3aQNdL6aQN73HZcaVk+g9oQOpKNM8yOP/OLyYgnZfDtBk47YF/Oel+qlQJPM vMy6bY5KO8m27El3CV9Y6nY2xsUCAwEAAaOCApcwggKTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPgl2FJ0NMrw/Pn2VEbW6wbKiZP0MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DT0NPRElHSVQv MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09D T0RJR0lULzAvRjgyNUQ4NTI3NDM0Q0FGMEZDRjlGNjU0NDZENkVCMDZDQTg5OTNG NC5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEASQy5DANBAIAAjAHAwUAJAFdoDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMCTO4wDQYJKoZIhvcNAQELBQADggEBAIrBCtUYyv7N FRLVM8PyPCnBZK1hiCuA/La/tgXYa74q5HzKipL11ColIJeMalVO9vxHQsVAloVE e0TqYmpLi1mL6Qiub6rd40ACvvMhL4K21CQyfSkgejyZmpmCCLR7X15yz8qnjdgV M6/0avnAVa/W3Fp55gNYwb+MicnkoM9AXEowv0wrC9IGNSWJzsERnaJGbt9FXvzK iEy4XG2/tXEn8hb25pLgx+RHRT/nRqb0+8fl08Df+NkVZWjtOSIcyBvGLZhQiuA2 +r3eqiNkxfmzh01iJhH8FbCvnolCrRI+638250VcOUmpAq74ZgSMnSurAJgrkTO1 ZOmR39YOLsg= -----END CERTIFICATE-----Generated at Tue May 12 22:03:42 2026 by rpki-client