$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer File: FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer (raw, json) Hash identifier: aFtN7kPz5z5Am14AkBaiO4srPiVQXlMnqYuWZVZXALU= Subject key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 18A4DD9828D51B88EEB32C095321C92DFAC4A294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft caRepository: rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:32 +0000 Certificate not after: Mon 10 May 2027 15:53:32 +0000 Subordinate resources: IP: 103.135.20.0/22 IP: 2404:73c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a4:dd:98:28:d5:1b:88:ee:b3:2c:09:53:21:c9:2d:fa:c4:a2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:48:32 2026 GMT Not After : May 10 15:53:32 2027 GMT Subject: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:4a:71:2f:a2:6a:83:81:e9:fb:e3:5d:b8: 7f:df:8b:65:ef:5d:f1:12:37:77:d3:4c:78:60:18: de:64:0a:28:06:53:25:b2:91:de:40:b6:22:62:91: a0:85:68:47:4f:b0:3f:9f:03:fc:3e:8e:ec:b8:a9: ac:61:48:b7:db:ec:6b:5d:1a:d5:7d:9e:a0:ff:45: f0:7e:27:f8:20:18:c8:49:fd:e5:04:c2:34:e7:14: 82:d1:65:53:2e:04:4c:ca:1e:dd:e3:e8:d3:31:66: 6d:58:44:5a:7d:63:4c:53:57:45:d8:c5:14:53:34: 5c:56:35:9b:4b:86:bb:9c:e3:a9:cd:81:f3:c8:c2: 40:71:0a:91:39:ae:b3:c3:b0:f4:05:56:3e:17:f1: 2f:18:a8:eb:00:ec:e9:87:bb:bf:bb:21:7b:4e:4e: 35:d9:b7:85:0f:18:49:99:27:47:8f:83:31:4f:dd: e8:61:07:7a:6d:51:c9:85:9f:70:c8:8b:ce:cc:e1: 8e:44:72:7c:2a:b2:e9:91:01:ec:7e:02:ac:cf:ac: 18:08:95:0f:07:e4:ef:2f:54:00:1c:5a:f2:2f:0b: 07:42:2b:59:57:cf:68:ae:50:7d:34:25:32:bf:02: c6:24:0f:cc:f0:c7:94:d1:be:00:d2:b5:d5:07:de: f3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.20.0/22 IPv6: 2404:73c0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:82:a5:e0:b1:9f:54:4e:fd:0d:de:60:45:c5:0c:66:66:07: 61:2d:f1:54:1a:1f:79:56:98:b3:cb:1a:cf:f4:1f:e3:5d:94: 93:fd:7d:ef:ea:da:0d:ec:0c:9f:9b:c0:2b:1b:53:cd:6d:d3: 1a:24:73:f3:7b:5e:fe:3b:64:81:d6:a4:40:e2:06:e5:17:c5: b3:49:c5:72:70:87:0f:83:29:07:a5:b6:33:ea:3d:b1:ca:25: 35:99:16:77:d3:a7:7b:07:ab:96:4a:11:e4:4c:71:95:64:e4: e3:eb:a6:99:53:d2:df:75:87:e7:77:fb:b7:00:ce:d7:e4:08: 8c:2e:62:65:09:08:ec:d9:47:a6:97:60:03:0e:d2:fe:eb:57: f2:51:4c:80:20:70:76:0a:99:37:30:39:47:0a:31:c8:e9:ba: 05:5a:63:d2:90:8a:eb:d3:80:0e:35:b2:6f:45:b1:15:ab:ea: 20:ab:65:1f:c3:2a:be:4d:55:14:5f:89:3a:e5:e2:ea:f2:d3: 8f:fc:c0:84:29:4e:ac:29:8a:d6:f8:4a:b1:f0:86:8c:41:7f: ff:b5:e4:04:2f:fc:d0:41:be:57:26:75:21:3f:3a:3d:98:be: 31:ed:a7:ea:37:bc:69:23:a6:bc:b5:34:b4:cf:7b:f8:49:86: c9:b9:ce:ff -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUGKTdmCjVG4jusywJUyHJLfrEopQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDgzMloX DTI3MDUxMDE1NTMzMlowMzExMC8GA1UEAxMoRkQ2RTFERjYwREVGRDQzODQ3MDkz MDZERTZGNjJGOTZGRTFDNUJBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMedSnEvomqDgen74124f9+LZe9d8RI3d9NMeGAY3mQKKAZTJbKR3kC2ImKR oIVoR0+wP58D/D6O7LiprGFIt9vsa10a1X2eoP9F8H4n+CAYyEn95QTCNOcUgtFl Uy4ETMoe3ePo0zFmbVhEWn1jTFNXRdjFFFM0XFY1m0uGu5zjqc2B88jCQHEKkTmu s8Ow9AVWPhfxLxio6wDs6Ye7v7she05ONdm3hQ8YSZknR4+DMU/d6GEHem1RyYWf cMiLzszhjkRyfCqy6ZEB7H4CrM+sGAiVDwfk7y9UABxa8i8LB0IrWVfPaK5QfTQl Mr8CxiQPzPDHlNG+ANK11Qfe84MCAwEAAaOCAn0wggJ5MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP1uHfYN79Q4Rwkwbeb2L5b+HFumMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NSU5HSklOR0VO LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01J TkdKSU5HRU4vMC9GRDZFMURGNjBERUZENDM4NDcwOTMwNkRFNkY2MkY5NkZFMUM1 QkE2Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ4cUMA0EAgACMAcDBQAkBHPAMA0GCSqG SIb3DQEBCwUAA4IBAQAqgqXgsZ9UTv0N3mBFxQxmZgdhLfFUGh95VpizyxrP9B/j XZST/X3v6toN7Ayfm8ArG1PNbdMaJHPze17+O2SB1qRA4gblF8WzScVycIcPgykH pbYz6j2xyiU1mRZ306d7B6uWShHkTHGVZOTj66aZU9LfdYfnd/u3AM7X5AiMLmJl CQjs2Ueml2ADDtL+61fyUUyAIHB2Cpk3MDlHCjHI6boFWmPSkIrr04AONbJvRbEV q+ogq2Ufwyq+TVUUX4k65eLq8tOP/MCEKU6sKYrW+Eqx8IaMQX//teQEL/zQQb5X JnUhPzo9mL4x7afqN7xpI6a8tTS0z3v4SYbJuc7/ -----END CERTIFICATE-----Generated at Tue May 12 22:47:37 2026 by rpki-client