$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer File: FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer (raw, json) Hash identifier: XPcVq0Fzd5gLHiM3/UBuJzDBmVjEWSI2y622hzbuSR4= Subject key identifier: FD:F1:33:A9:8D:C5:9C:CC:12:3E:02:6C:4F:29:A5:E9:01:26:7E:C2 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 44B1D00B02D177C91BA8D69394A53A2799BFC1CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft caRepository: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:07 +0000 Certificate not after: Mon 10 May 2027 15:51:07 +0000 Subordinate resources: AS: 131632 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b1:d0:0b:02:d1:77:c9:1b:a8:d6:93:94:a5:3a:27:99:bf:c1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:46:07 2026 GMT Not After : May 10 15:51:07 2027 GMT Subject: CN=FDF133A98DC59CCC123E026C4F29A5E901267EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:49:c5:4e:b9:70:84:12:dd:32:2d:91:38:bb: 91:a0:ff:82:7b:6b:c1:c1:72:ae:bb:5c:aa:3f:76: 27:d9:fb:de:89:c9:86:72:45:3e:00:9f:e2:45:07: c5:ed:8d:2e:13:fa:b9:e7:08:d6:50:31:84:ec:a4: 4a:ae:19:64:9f:82:af:7b:8a:d5:2e:86:c8:b8:e8: 43:63:14:2c:01:db:5c:72:49:67:8e:ef:ef:13:ba: e1:a0:f2:20:76:66:e8:98:b3:da:02:92:e1:e1:f6: d9:8d:29:1f:c4:14:53:cc:e8:65:f9:67:34:93:77: ff:1d:61:bb:d5:21:f0:04:95:e8:26:03:2a:db:7e: 82:2a:86:a2:13:fe:18:a1:d8:dc:4c:57:db:38:7a: 20:b1:0b:50:3a:e3:eb:1d:f0:b6:e0:25:10:43:d9: 12:b5:89:30:77:07:e4:2a:00:a9:6d:8d:c6:fa:a4: 15:57:ec:d8:7b:d4:3f:ee:a9:15:0e:f1:d8:e7:e4: 38:e0:10:5b:0f:d8:6c:0b:5f:34:8a:a1:47:53:01: d1:16:ef:75:40:7a:b5:89:f6:6c:8e:48:a9:41:49: cf:95:b2:34:28:f5:4c:13:28:34:21:ef:1a:76:78: db:c8:1f:eb:03:5b:82:f2:e7:8b:66:00:3f:69:c4: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:F1:33:A9:8D:C5:9C:CC:12:3E:02:6C:4F:29:A5:E9:01:26:7E:C2 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 131632 Signature Algorithm: sha256WithRSAEncryption 6c:6b:2f:49:d8:09:ae:b3:e3:4a:f0:1e:a7:7c:a0:c0:b3:e8: f4:be:aa:89:f7:25:68:94:c3:c5:23:25:ef:75:1c:e7:a7:38: 9f:62:d9:c0:d0:4d:ba:37:0e:b0:d4:a5:90:b2:6a:ec:3b:fc: 1b:6e:4d:1f:5f:86:ef:46:dd:eb:2a:61:91:4d:73:ee:48:b9: 1f:95:f7:30:ce:7e:ac:40:a6:b8:e6:e0:b5:8c:ba:5b:e4:75: a8:d9:ce:b1:5f:21:65:17:9e:07:5a:09:a5:db:63:99:fc:c4: 10:2d:eb:a1:1d:33:33:2c:c7:7e:36:21:53:8f:b7:b6:51:be: d3:cb:ac:7a:d5:e9:8e:95:e7:a2:81:a2:70:72:5e:01:c0:00: e0:9a:d4:da:57:aa:2f:73:c2:34:17:67:13:ac:2d:50:96:54: a2:73:c3:f0:16:2e:ba:f2:aa:13:c8:72:f6:76:36:70:46:6c: 8e:73:9d:67:4f:2d:e9:d2:5f:bc:60:f8:44:a4:77:99:b5:ad: 01:3d:f4:7e:d7:91:9f:5f:5a:58:db:45:c6:12:e9:79:cf:0f: 0d:c7:39:db:ef:4f:da:32:59:e2:20:3e:5f:97:7d:0d:fb:1c: 49:fa:64:b0:cb:4e:d1:8d:67:64:92:f5:4c:c8:c8:75:56:32: 2c:84:23:ed -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIURLHQCwLRd8kbqNaTlKU6J5m/wc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDYwN1oX DTI3MDUxMDE1NTEwN1owMzExMC8GA1UEAxMoRkRGMTMzQTk4REM1OUNDQzEyM0Uw MjZDNEYyOUE1RTkwMTI2N0VDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO9JxU65cIQS3TItkTi7kaD/gntrwcFyrrtcqj92J9n73onJhnJFPgCf4kUH xe2NLhP6uecI1lAxhOykSq4ZZJ+Cr3uK1S6GyLjoQ2MULAHbXHJJZ47v7xO64aDy IHZm6Jiz2gKS4eH22Y0pH8QUU8zoZflnNJN3/x1hu9Uh8ASV6CYDKtt+giqGohP+ GKHY3ExX2zh6ILELUDrj6x3wtuAlEEPZErWJMHcH5CoAqW2NxvqkFVfs2HvUP+6p FQ7x2OfkOOAQWw/YbAtfNIqhR1MB0RbvdUB6tYn2bI5IqUFJz5WyNCj1TBMoNCHv GnZ428gf6wNbgvLni2YAP2nEz7sCAwEAAaOCAmkwggJlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP3xM6mNxZzMEj4CbE8ppekBJn7CMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HTUlDTE9VRF9Q LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dN SUNMT1VEX1AvMC9GREYxMzNBOThEQzU5Q0NDMTIzRTAyNkM0RjI5QTVFOTAxMjY3 RUMyLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwICMDANBgkqhkiG9w0BAQsFAAOCAQEAbGsvSdgJ rrPjSvAep3ygwLPo9L6qifclaJTDxSMl73Uc56c4n2LZwNBNujcOsNSlkLJq7Dv8 G25NH1+G70bd6yphkU1z7ki5H5X3MM5+rECmuObgtYy6W+R1qNnOsV8hZReeB1oJ pdtjmfzEEC3roR0zMyzHfjYhU4+3tlG+08usetXpjpXnooGicHJeAcAA4JrU2leq L3PCNBdnE6wtUJZUonPD8BYuuvKqE8hy9nY2cEZsjnOdZ08t6dJfvGD4RKR3mbWt AT30fteRn19aWNtFxhLpec8PDcc52+9P2jJZ4iA+X5d9DfscSfpksMtO0Y1nZJL1 TMjIdVYyLIQj7Q== -----END CERTIFICATE-----Generated at Wed May 13 01:07:07 2026 by rpki-client