$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/2068A6EC9C8167CEB78C7259B1B579C3067A8180.cer File: 2068A6EC9C8167CEB78C7259B1B579C3067A8180.cer (raw, json) Hash identifier: Igybzn9PBTTBI9oaLvjwJYXymFXPTjvQDtd0TOrkyv4= Subject key identifier: 20:68:A6:EC:9C:81:67:CE:B7:8C:72:59:B1:B5:79:C3:06:7A:81:80 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 3B554C8388DD901F4D767EA886FE6FF27ACF4018 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CYBERLINK/0/2068A6EC9C8167CEB78C7259B1B579C3067A8180.mft caRepository: rsync://rpkica.twnic.tw/rpki/CYBERLINK/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:47 +0000 Certificate not after: Mon 10 May 2027 15:49:47 +0000 Subordinate resources: IP: 103.168.156.0/23 IP: 2407:92c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:55:4c:83:88:dd:90:1f:4d:76:7e:a8:86:fe:6f:f2:7a:cf:40:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:44:47 2026 GMT Not After : May 10 15:49:47 2027 GMT Subject: CN=2068A6EC9C8167CEB78C7259B1B579C3067A8180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e2:5d:af:91:08:8d:c1:b3:32:e8:18:9c:c4: 84:89:55:c7:ab:bb:5f:02:c3:f0:86:24:b1:a0:e7: 82:8c:5b:5a:49:10:18:cf:62:fa:4c:0d:53:1a:57: 6f:08:5c:10:e3:44:0d:ec:75:4e:29:5f:a4:fb:2a: 09:a3:e3:15:70:aa:35:3e:b8:dc:a9:ed:66:cf:d1: 40:4f:b1:1a:e2:4a:52:aa:12:6c:f3:ee:c5:b9:75: ab:92:16:e3:7c:07:37:f4:ad:e8:9b:6e:a1:3d:02: ce:99:87:f8:71:36:2f:9c:17:28:f1:03:70:77:9f: c8:d0:8f:68:b1:dd:66:29:6b:de:a9:0e:f5:fa:1a: 15:88:3d:df:05:dd:7e:80:fe:36:70:51:59:00:40: 7c:e2:6c:93:6f:26:6b:d2:28:81:91:f4:aa:bf:52: bf:75:e2:7f:48:db:12:d7:c7:32:9e:da:1c:97:de: 55:6d:11:ef:22:73:60:b4:c1:0f:3e:98:9f:b3:db: 9e:30:46:9f:90:b9:e0:a7:90:f8:f9:f4:0f:18:55: db:3d:53:80:af:f8:6b:15:96:18:65:09:17:4d:e3: 46:af:fe:83:76:3e:dd:c2:89:7b:c0:b1:7d:0e:ee: eb:de:5a:93:b7:8f:fe:2d:1e:90:f2:2e:92:cd:23: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:68:A6:EC:9C:81:67:CE:B7:8C:72:59:B1:B5:79:C3:06:7A:81:80 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CYBERLINK/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CYBERLINK/0/2068A6EC9C8167CEB78C7259B1B579C3067A8180.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.156.0/23 IPv6: 2407:92c0::/32 Signature Algorithm: sha256WithRSAEncryption 97:bf:40:b8:66:c3:32:f3:d3:5d:bc:cc:e5:b3:d2:d0:ad:56: 2a:5a:9a:f3:46:60:52:73:61:55:26:93:6a:80:be:49:78:41: 54:f2:8b:3b:c3:3c:9f:dd:10:1b:a9:01:a8:9a:32:cd:ad:46: 03:cb:e2:c8:81:15:57:9e:a6:c5:fd:15:be:42:41:f3:ec:62: ad:0c:c1:6a:52:76:48:25:87:a5:81:97:f9:42:ff:0d:1f:99: 71:2c:87:dc:53:85:5d:06:38:fe:bd:6d:c2:14:b6:cc:9e:76: ac:39:d3:f5:7c:6d:aa:bf:37:55:9c:73:82:13:1c:d8:40:3f: a1:e4:16:2b:0a:f5:e0:60:c7:fa:14:3e:66:3d:2a:2d:3f:4a: 49:e5:b1:cb:e8:1d:58:46:0f:8b:4a:5b:38:9b:0c:0e:8d:3c: 92:88:54:51:96:33:5e:b1:9c:99:fc:b5:68:92:40:14:10:24: 61:80:64:09:bb:04:0c:88:5e:4c:7b:ed:2e:81:1e:22:e9:70: db:10:f6:eb:02:18:ad:b2:d7:fc:d7:0c:53:a2:13:d5:fa:2c: 91:6a:c5:4e:58:02:41:db:0a:7b:ac:7c:2e:b9:9b:bc:62:d5: 95:c9:e6:c5:37:46:e3:e1:37:14:ce:4c:ed:43:62:cc:9e:3f: fa:d2:d1:10 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIUO1VMg4jdkB9Ndn6ohv5v8nrPQBgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDQ0N1oX DTI3MDUxMDE1NDk0N1owMzExMC8GA1UEAxMoMjA2OEE2RUM5QzgxNjdDRUI3OEM3 MjU5QjFCNTc5QzMwNjdBODE4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANviXa+RCI3BszLoGJzEhIlVx6u7XwLD8IYksaDngoxbWkkQGM9i+kwNUxpX bwhcEONEDex1TilfpPsqCaPjFXCqNT643KntZs/RQE+xGuJKUqoSbPPuxbl1q5IW 43wHN/St6JtuoT0CzpmH+HE2L5wXKPEDcHefyNCPaLHdZilr3qkO9foaFYg93wXd foD+NnBRWQBAfOJsk28ma9IogZH0qr9Sv3Xif0jbEtfHMp7aHJfeVW0R7yJzYLTB Dz6Yn7PbnjBGn5C54KeQ+Pn0DxhV2z1TgK/4axWWGGUJF03jRq/+g3Y+3cKJe8Cx fQ7u695ak7eP/i0ekPIuks0j/60CAwEAAaOCAnswggJ3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCBopuycgWfOt4xyWbG1ecMGeoGAMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DWUJFUkxJTksv MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1lC RVJMSU5LLzAvMjA2OEE2RUM5QzgxNjdDRUI3OEM3MjU5QjFCNTc5QzMwNjdBODE4 MC5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAWeonDANBAIAAjAHAwUAJAeSwDANBgkqhkiG 9w0BAQsFAAOCAQEAl79AuGbDMvPTXbzM5bPS0K1WKlqa80ZgUnNhVSaTaoC+SXhB VPKLO8M8n90QG6kBqJoyza1GA8viyIEVV56mxf0VvkJB8+xirQzBalJ2SCWHpYGX +UL/DR+ZcSyH3FOFXQY4/r1twhS2zJ52rDnT9Xxtqr83VZxzghMc2EA/oeQWKwr1 4GDH+hQ+Zj0qLT9KSeWxy+gdWEYPi0pbOJsMDo08kohUUZYzXrGcmfy1aJJAFBAk YYBkCbsEDIheTHvtLoEeIulw2xD26wIYrbLX/NcMU6IT1foskWrFTlgCQdsKe6x8 LrmbvGLVlcnmxTdG4+E3FM5M7UNizJ4/+tLREA== -----END CERTIFICATE-----Generated at Wed May 13 19:57:56 2026 by rpki-client