$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/F8B790AC0FB2008CE4B3C6FE698B82D59EA729E1.cer File: F8B790AC0FB2008CE4B3C6FE698B82D59EA729E1.cer (raw, json) Hash identifier: 8DoXhIvxxk8mPs/EXcE6O9COeIEmT34DSyqJlXc8zs4= Subject key identifier: F8:B7:90:AC:0F:B2:00:8C:E4:B3:C6:FE:69:8B:82:D5:9E:A7:29:E1 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 3CB57CC1D1307A293A2204A2070A1BC20D65D93E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/AMATECH/0/F8B790AC0FB2008CE4B3C6FE698B82D59EA729E1.mft caRepository: rsync://rpkica.twnic.tw/rpki/AMATECH/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:42:47 +0000 Certificate not after: Mon 10 May 2027 15:47:47 +0000 Subordinate resources: AS: 131624 IP: 103.160.214.0/23 IP: 2406:f1c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b5:7c:c1:d1:30:7a:29:3a:22:04:a2:07:0a:1b:c2:0d:65:d9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:42:47 2026 GMT Not After : May 10 15:47:47 2027 GMT Subject: CN=F8B790AC0FB2008CE4B3C6FE698B82D59EA729E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:54:13:87:8b:f0:f4:f4:97:e3:db:4d:5d: 1a:8e:7b:bc:9e:39:3f:50:bf:5c:06:51:ca:b6:69: 84:ba:da:cd:50:d4:d3:a4:95:91:79:15:08:31:f1: 80:ed:22:07:20:66:68:17:fc:3c:56:33:0e:89:56: e8:bc:b8:4e:29:e9:e2:db:e3:77:51:32:0a:e7:d4: 8b:46:f3:4d:5e:79:a8:22:65:c0:16:e6:84:74:80: cb:22:55:ff:61:21:e5:19:d4:89:f0:3d:8b:8a:43: d1:ab:c1:b5:5b:0a:83:e0:87:99:5b:77:46:fd:c0: 98:f4:f4:24:49:73:14:8b:38:f9:04:59:56:08:4e: 03:a0:ce:43:03:8b:c1:9b:65:5e:37:91:06:46:70: 91:ec:03:5c:ac:ba:c6:e2:db:28:76:1c:32:a4:3f: 26:68:1a:b8:19:b6:bc:66:4d:be:40:51:b2:fb:3c: dc:96:1a:b1:d4:49:54:5f:66:7f:6d:b5:5e:fc:f2: 8b:b6:b2:50:88:88:9f:5f:ce:19:22:93:a0:80:eb: 71:c3:3c:d7:3d:3a:40:a3:01:d3:35:47:6d:ce:54: 6d:e5:33:89:ee:b2:2f:74:5c:eb:0f:97:fc:c3:91: 9e:35:95:5d:ee:40:4e:62:c8:5e:51:9f:cd:80:a7: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:B7:90:AC:0F:B2:00:8C:E4:B3:C6:FE:69:8B:82:D5:9E:A7:29:E1 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/AMATECH/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/AMATECH/0/F8B790AC0FB2008CE4B3C6FE698B82D59EA729E1.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.214.0/23 IPv6: 2406:f1c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131624 Signature Algorithm: sha256WithRSAEncryption 72:91:b6:e2:95:db:73:14:e5:0d:13:a2:2f:0d:e3:8f:c0:2f: 28:79:c7:59:1f:d6:2c:02:a2:ad:d6:5b:05:ef:ed:b3:ad:b4: b1:19:45:16:40:74:19:a6:cf:5d:39:9b:09:ab:e7:3d:2d:97: 70:75:f2:44:a5:74:61:09:cc:fb:26:b4:3b:41:4a:70:14:04: 52:34:f8:e8:e4:7f:e9:b2:df:f4:23:33:0c:68:be:81:79:78: 56:c0:5d:cd:9e:9c:26:cb:5d:b2:64:93:a6:2a:14:a2:3f:b7: 3e:c1:95:43:87:97:4c:31:7e:ce:4e:66:a0:5a:cc:1b:02:d2: 77:11:77:23:95:ff:4d:8e:f9:8a:5b:45:b8:fc:37:de:8e:bd: f5:8e:6d:da:13:ba:e9:f3:da:d4:d0:76:0e:fd:28:4c:ef:c8: 29:8f:ae:7d:fb:c7:9a:45:bc:a3:7d:5b:14:d6:b4:49:cd:d9: e9:56:0c:51:b3:64:9a:c4:1a:1a:8e:68:32:0a:27:0e:c7:fb: e6:d7:71:0d:c5:ff:47:0d:24:c8:cf:83:14:d7:6e:c3:b6:c8: 49:5a:0a:21:97:a2:e4:f2:fc:93:d7:43:40:29:d8:f7:9c:6b: 6a:59:6b:07:2d:e7:b4:d5:b0:75:2e:12:bf:da:37:3f:bf:f8: 97:64:e7:01 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIUPLV8wdEweik6IgSiBwobwg1l2T4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDI0N1oX DTI3MDUxMDE1NDc0N1owMzExMC8GA1UEAxMoRjhCNzkwQUMwRkIyMDA4Q0U0QjND NkZFNjk4QjgyRDU5RUE3MjlFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHSVBOHi/D09Jfj201dGo57vJ45P1C/XAZRyrZphLrazVDU06SVkXkVCDHx gO0iByBmaBf8PFYzDolW6Ly4Tinp4tvjd1EyCufUi0bzTV55qCJlwBbmhHSAyyJV /2Eh5RnUifA9i4pD0avBtVsKg+CHmVt3Rv3AmPT0JElzFIs4+QRZVghOA6DOQwOL wZtlXjeRBkZwkewDXKy6xuLbKHYcMqQ/JmgauBm2vGZNvkBRsvs83JYasdRJVF9m f221Xvzyi7ayUIiIn1/OGSKToIDrccM81z06QKMB0zVHbc5UbeUzie6yL3Rc6w+X /MORnjWVXe5ATmLIXlGfzYCnJcECAwEAAaOCApMwggKPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPi3kKwPsgCM5LPG/mmLgtWepynhMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BTUFURUNILzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0FNQVRF Q0gvMC9GOEI3OTBBQzBGQjIwMDhDRTRCM0M2RkU2OThCODJENTlFQTcyOUUxLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ6DWMA0EAgACMAcDBQAkBvHAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwICKDANBgkqhkiG9w0BAQsFAAOCAQEAcpG24pXbcxTlDROi Lw3jj8AvKHnHWR/WLAKirdZbBe/ts620sRlFFkB0GabPXTmbCavnPS2XcHXyRKV0 YQnM+ya0O0FKcBQEUjT46OR/6bLf9CMzDGi+gXl4VsBdzZ6cJstdsmSTpioUoj+3 PsGVQ4eXTDF+zk5moFrMGwLSdxF3I5X/TY75iltFuPw33o699Y5t2hO66fPa1NB2 Dv0oTO/IKY+uffvHmkW8o31bFNa0Sc3Z6VYMUbNkmsQaGo5oMgonDsf75tdxDcX/ Rw0kyM+DFNduw7bISVoKIZei5PL8k9dDQCnY95xrallrBy3ntNWwdS4Sv9o3P7/4 l2TnAQ== -----END CERTIFICATE-----Generated at Tue May 12 22:32:11 2026 by rpki-client