$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer File: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer (raw, json) Hash identifier: lrn6/CZkVzDjoioxwR1EJPrLEfQMRHYiHl3/tQA0wMs= Subject key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 5323DC23A4EB6C80CDE9CD98927EC3E9382A85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft caRepository: rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Fri 14 Aug 2026 06:57:08 +0000 Certificate not after: Fri 13 Aug 2027 07:02:08 +0000 Subordinate resources: IP: 103.37.4.0/23 IP: 103.125.64.0/23 IP: 2400:bfa0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 03:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:23:dc:23:a4:eb:6c:80:cd:e9:cd:98:92:7e:c3:e9:38:2a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Aug 14 06:57:08 2026 GMT Not After : Aug 13 07:02:08 2027 GMT Subject: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6a:03:78:83:24:de:68:e4:af:de:00:af:29: b2:ce:a8:21:ca:14:fa:a5:73:2a:d4:dc:71:a4:65: ef:9f:61:28:92:e2:15:3b:2e:ed:d3:43:08:77:3e: 77:24:94:60:26:df:e1:8a:55:08:4c:66:61:75:da: 7b:f5:b3:6c:c7:68:14:7a:f7:74:62:d8:30:ad:9b: bc:7a:22:1c:c1:61:8a:ce:f2:57:74:26:c9:c1:d1: 73:78:a3:f9:2f:4b:86:f6:c6:07:52:4a:bd:cc:18: a8:b7:83:9f:fc:5e:ac:ab:94:07:89:ec:41:01:74: a6:05:bd:fc:0e:88:4b:bc:99:fc:73:90:d6:ca:d0: c2:cd:d7:d4:76:b1:c4:f7:54:36:56:95:bc:f8:e0: 9b:e8:7d:cf:c9:81:de:d4:b7:36:bd:ef:61:49:b7: 14:b6:25:72:0f:84:89:9a:da:f8:56:74:32:18:ef: 97:b2:29:b3:76:a3:9f:27:4d:6e:15:fa:2d:a1:76: f6:9f:6e:a4:5a:30:4c:0b:7f:52:09:15:81:ca:d8: e4:44:ce:01:16:44:04:c2:1f:26:f3:00:93:1b:0d: f7:fe:c9:09:76:f6:b6:84:5a:d0:68:79:28:31:66: 5c:51:d9:8f:06:4c:16:44:66:c6:e2:19:02:02:12: 2e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.4.0/23 103.125.64.0/23 IPv6: 2400:bfa0::/32 Signature Algorithm: sha256WithRSAEncryption 45:ea:46:81:44:b8:3f:8e:2a:4b:4e:9a:7a:da:a7:7f:c7:a5: 9a:ee:61:73:b8:51:74:90:65:a6:dd:9d:07:22:99:bd:59:4a: 61:5a:64:72:05:cd:02:32:53:8f:3c:f8:7a:5f:ca:bf:47:29: 2d:dc:1a:ec:f6:58:03:f5:8b:84:cd:0c:eb:3c:d6:3a:50:17: 62:cf:ca:ea:e2:98:f3:f2:9f:d2:bc:c9:58:4a:14:0b:4d:e0: e4:3f:7a:9f:0f:2e:4e:7f:f4:5a:80:c2:e4:4d:29:13:08:a2: 93:c9:81:d4:b7:7a:d4:69:c4:15:2c:8b:78:c7:e1:44:80:70: 2f:c0:ba:3e:62:d6:21:26:c1:dd:39:9a:bb:c6:8e:c2:c8:50: de:ac:9b:e6:7e:85:d2:c1:dd:82:aa:5b:eb:28:dc:f4:87:c6: a4:8a:72:61:7e:57:6d:66:8f:e5:9e:a5:71:93:ff:42:86:8c: 7d:50:be:aa:1d:4c:06:f6:25:cf:b5:75:e3:b9:c7:9f:f6:e6: 8c:1e:55:03:8e:cb:65:03:6e:02:ed:90:48:66:22:4e:81:a5: bc:08:2a:71:2d:e2:c6:e4:85:4d:dc:f1:4c:58:9a:fd:cf:23: da:1b:43:a2:ae:cf:9c:ae:c8:fd:bf:56:b6:80:14:bb:c3:19: 52:36:0a:f8 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgITUyPcI6TrbIDN6c2Ykn7D6TgqhTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFCREIyOTAwMDAxMTAvBgNVBAUTKERBNjMyNTA1NzY3 NDEzQTE0MDlBM0UzM0I5OUQyNTZDREZCMTkwMUQwHhcNMjYwODE0MDY1NzA4WhcN MjcwODEzMDcwMjA4WjAzMTEwLwYDVQQDEygwOEEwM0NGOUMxRDNBRjkzQ0ZEQjBB MkMxRDg3OERBNjAyNzVENEZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjWoDeIMk3mjkr94ArymyzqghyhT6pXMq1NxxpGXvn2EokuIVOy7t00MIdz53 JJRgJt/hilUITGZhddp79bNsx2gUevd0YtgwrZu8eiIcwWGKzvJXdCbJwdFzeKP5 L0uG9sYHUkq9zBiot4Of/F6sq5QHiexBAXSmBb38DohLvJn8c5DWytDCzdfUdrHE 91Q2VpW8+OCb6H3PyYHe1Lc2ve9hSbcUtiVyD4SJmtr4VnQyGO+XsimzdqOfJ01u FfotoXb2n26kWjBMC39SCRWBytjkRM4BFkQEwh8m8wCTGw33/skJdva2hFrQaHko MWZcUdmPBkwWRGbG4hkCAhIuAQIDAQABo4ICfTCCAnkwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUCKA8+cHTr5PP2wosHYeNpgJ11P4wHwYDVR0jBBgwFoAU2mMl BXZ0E6FAmj4zuZ0lbN+xkB0wDgYDVR0PAQH/BAQDAgEGMGQGA1UdHwRdMFswWaBX oFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0RBNjMy NTA1NzY3NDEzQTE0MDlBM0UzM0I5OUQyNTZDREZCMTkwMUQuY3JsMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyLzJtTWxCWFow RTZGQW1qNHp1WjBsYk4teGtCMC5jZXIwgd8GCCsGAQUFBwELBIHSMIHPMDMGCCsG AQUFBzAFhidyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NNVFJUQ0gvMC8w XwYIKwYBBQUHMAqGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU01UUlRD SC8wLzA4QTAzQ0Y5QzFEM0FGOTNDRkRCMEEyQzFEODc4REE2MDI3NUQ0RkUubWZ0 MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAFnJQQDBAFnfUAwDQQCAAIwBwMFACQAv6AwDQYJKoZI hvcNAQELBQADggEBAEXqRoFEuD+OKktOmnrap3/HpZruYXO4UXSQZabdnQcimb1Z SmFaZHIFzQIyU488+Hpfyr9HKS3cGuz2WAP1i4TNDOs81jpQF2LPyurimPPyn9K8 yVhKFAtN4OQ/ep8PLk5/9FqAwuRNKRMIopPJgdS3etRpxBUsi3jH4USAcC/Auj5i 1iEmwd05mrvGjsLIUN6sm+Z+hdLB3YKqW+so3PSHxqSKcmF+V21mj+WepXGT/0KG jH1QvqodTAb2Jc+1deO5x5/25oweVQOOy2UDbgLtkEhmIk6BpbwIKnEt4sbkhU3c 8UxYmv3PI9obQ6Kuz5yuyP2/VraAFLvDGVI2Cvg= -----END CERTIFICATE-----Generated at Sat Aug 15 04:36:33 2026 by rpki-client