$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer File: 2246FA22721287A616226553235161DB0C06A86A.cer (raw, json) Hash identifier: TkXSsJLDqqahI68qBYidNZyqGQZktaHMj7exhv3gO4Q= Subject key identifier: 22:46:FA:22:72:12:87:A6:16:22:65:53:23:51:61:DB:0C:06:A8:6A Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 4DCB1A2FE019085551BBA60E02DE341E8DAA087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.mft caRepository: rsync://rpkica.twnic.tw/rpki/INFORICH/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:59 +0000 Certificate not after: Mon 10 May 2027 15:51:59 +0000 Subordinate resources: IP: 103.152.252.0/23 IP: 2406:3a40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:cb:1a:2f:e0:19:08:55:51:bb:a6:0e:02:de:34:1e:8d:aa:08:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:46:59 2026 GMT Not After : May 10 15:51:59 2027 GMT Subject: CN=2246FA22721287A616226553235161DB0C06A86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:1e:e8:2c:b0:7c:4c:58:d0:35:24:46:ef: 8e:c1:6d:be:45:6a:26:a9:8a:c2:58:af:b8:51:54: 35:77:99:2d:e0:19:4f:4b:c6:0e:b7:1e:5c:1c:93: 10:ae:6c:60:69:88:f9:e0:39:e7:28:db:63:48:0c: 96:a8:87:4d:52:44:15:3c:0c:b0:47:d6:17:0a:64: f5:13:d7:17:48:5f:e5:dc:c8:41:b4:24:c5:9e:9c: bd:54:db:ca:54:38:33:d9:7a:18:a2:3e:d2:ca:d9: 99:5e:bf:2f:f3:7d:e0:f4:2a:19:7d:64:c3:46:83: 7d:79:65:37:23:b6:43:9b:3a:61:65:e6:ea:66:e0: c8:cb:91:2f:42:28:76:f6:dc:4d:76:3a:b2:8e:fe: 7f:09:05:a3:12:4d:43:fe:ad:d3:b1:d7:87:d5:cc: 03:70:8a:74:d9:7a:df:b4:91:22:15:ef:18:43:27: c4:f4:65:0b:c4:6a:14:c0:04:a4:4d:be:ea:51:e3: 3a:ad:7a:94:6a:dc:96:23:b0:04:5b:14:9f:03:12: 97:80:dc:f2:f7:a4:1f:45:74:0a:58:17:97:38:96: 08:f6:9a:15:5a:12:be:0c:b8:5d:9f:ad:aa:54:1e: b5:c2:5c:bf:f6:77:cb:14:9b:89:f3:87:64:09:6d: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:46:FA:22:72:12:87:A6:16:22:65:53:23:51:61:DB:0C:06:A8:6A X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/INFORICH/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.252.0/23 IPv6: 2406:3a40::/32 Signature Algorithm: sha256WithRSAEncryption 98:ed:5a:94:8b:4a:9d:2a:3c:77:ab:82:4c:19:ff:07:f5:89: fc:6b:ad:9c:21:23:35:ac:7f:4c:64:2a:1a:e1:4e:58:36:df: d4:bb:20:02:b5:90:bd:ca:dc:96:ef:64:2b:82:4a:20:ac:ef: a7:e8:f1:3e:b3:59:af:6f:8c:c2:ad:d2:f5:3a:d0:12:25:bf: 81:15:a2:8e:6c:0d:be:fa:8f:bd:79:64:f9:57:9e:88:e5:c3: 4d:7e:e8:0f:ec:c1:37:fc:09:0c:69:e6:58:0e:11:dd:7a:7f: 91:2e:05:85:91:12:c1:73:93:d8:a2:c1:80:b4:fb:1a:6a:01: d2:93:a7:ce:62:ca:0f:36:5b:cf:ec:7a:37:9d:59:54:eb:ca: c0:5e:09:e2:de:06:b1:1b:a8:65:28:5e:2d:72:55:34:e1:22: 87:61:62:27:dc:01:86:a3:f7:a6:0c:65:c6:dd:c9:48:37:ea: 25:a0:e1:9e:a0:7f:64:e8:91:b3:af:84:f2:0f:48:1e:c8:a5: 89:ed:f9:67:4f:97:e6:d9:49:b9:91:4c:7d:31:6b:7c:9a:ed: bf:3b:8e:a6:53:62:c9:fe:fc:97:9f:64:77:9e:3f:9e:6a:39: f2:c3:fc:4e:30:cf:2a:eb:fe:a1:6b:39:cc:41:3c:d3:ff:fd: 87:f2:99:36 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIUTcsaL+AZCFVRu6YOAt40Ho2qCHwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDY1OVoX DTI3MDUxMDE1NTE1OVowMzExMC8GA1UEAxMoMjI0NkZBMjI3MjEyODdBNjE2MjI2 NTUzMjM1MTYxREIwQzA2QTg2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbzHugssHxMWNA1JEbvjsFtvkVqJqmKwlivuFFUNXeZLeAZT0vGDrceXByT EK5sYGmI+eA55yjbY0gMlqiHTVJEFTwMsEfWFwpk9RPXF0hf5dzIQbQkxZ6cvVTb ylQ4M9l6GKI+0srZmV6/L/N94PQqGX1kw0aDfXllNyO2Q5s6YWXm6mbgyMuRL0Io dvbcTXY6so7+fwkFoxJNQ/6t07HXh9XMA3CKdNl637SRIhXvGEMnxPRlC8RqFMAE pE2+6lHjOq16lGrcliOwBFsUnwMSl4Dc8vekH0V0ClgXlziWCPaaFVoSvgy4XZ+t qlQetcJcv/Z3yxSbifOHZAltI90CAwEAAaOCAnkwggJ1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCJG+iJyEoemFiJlUyNRYdsMBqhqMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTkZPUklDSC8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTkZP UklDSC8wLzIyNDZGQTIyNzIxMjg3QTYxNjIyNjU1MzIzNTE2MURCMEMwNkE4NkEu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnmPwwDQQCAAIwBwMFACQGOkAwDQYJKoZIhvcN AQELBQADggEBAJjtWpSLSp0qPHergkwZ/wf1ifxrrZwhIzWsf0xkKhrhTlg239S7 IAK1kL3K3JbvZCuCSiCs76fo8T6zWa9vjMKt0vU60BIlv4EVoo5sDb76j715ZPlX nojlw01+6A/swTf8CQxp5lgOEd16f5EuBYWREsFzk9iiwYC0+xpqAdKTp85iyg82 W8/sejedWVTrysBeCeLeBrEbqGUoXi1yVTThIodhYifcAYaj96YMZcbdyUg36iWg 4Z6gf2TokbOvhPIPSB7IpYnt+WdPl+bZSbmRTH0xa3ya7b87jqZTYsn+/JefZHee P55qOfLD/E4wzyrr/qFrOcxBPNP//YfymTY= -----END CERTIFICATE-----Generated at Wed May 13 19:58:24 2026 by rpki-client