$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer File: 2730CF9F132716F178F88FB1F268CE51CA264C9F.cer (raw, json) Hash identifier: GRbgNFbovN8NEzsHSFJl9vV0Egj9wJMtQTNxKaYjM7c= Subject key identifier: 27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 0EB7D995153468D9C69F71C1D59A1EF8835E35DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft caRepository: rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:45 +0000 Certificate not after: Mon 10 May 2027 15:51:45 +0000 Subordinate resources: AS: 152627 IP: 103.127.216.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b7:d9:95:15:34:68:d9:c6:9f:71:c1:d5:9a:1e:f8:83:5e:35:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:46:45 2026 GMT Not After : May 10 15:51:45 2027 GMT Subject: CN=2730CF9F132716F178F88FB1F268CE51CA264C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:04:65:91:f9:7c:68:48:8f:56:28:fc:80: c2:84:46:ec:d0:57:cb:53:ae:3f:00:bb:b0:08:30: a7:0d:26:c3:07:ef:52:23:cb:1c:f8:de:cd:07:e3: 54:b3:f4:cf:4a:c0:9c:6e:e0:42:f5:ca:5d:f3:1f: 31:18:f0:3f:c5:f8:f0:c5:1b:9c:26:6d:75:2e:17: 2e:70:f3:3d:0b:a3:0a:bf:33:2d:07:2a:c8:ce:62: 2d:08:a2:4c:a8:bf:d6:83:f6:1a:35:a2:85:f3:bf: 33:b1:f6:41:96:9e:f2:f4:2f:22:64:41:92:c2:5d: c0:08:b7:a0:c2:a2:c6:a0:ba:06:b9:9b:c7:16:71: c0:68:cf:1d:b1:70:88:39:9c:3f:d4:e0:9b:ff:fb: f5:99:cd:c8:6a:13:1f:71:bb:e7:8c:ae:c3:1c:5c: c0:80:6f:cf:5e:a5:c9:59:fc:3a:6e:ec:94:6e:b5: 42:90:57:39:d5:ba:2d:c3:69:4c:be:06:fd:36:23: 22:91:6d:2d:e4:bb:97:fe:c2:f2:65:83:ad:c3:7b: d8:ce:a7:4c:59:23:c4:2d:81:c3:e0:f2:08:3e:ee: 86:b9:23:f3:22:ec:29:fe:69:66:03:d7:d2:bb:4f: 04:14:b3:dc:05:fe:7d:95:e9:87:db:56:5f:b8:de: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.216.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 152627 Signature Algorithm: sha256WithRSAEncryption 69:ff:84:87:f7:83:4b:6f:c7:2b:c2:ea:f4:54:27:58:2b:ff: 3f:01:68:94:7c:c6:54:9a:e8:4a:dc:9e:51:ae:87:f4:61:aa: bb:b4:70:5a:e3:6b:b9:6c:93:b7:ab:00:31:79:ac:17:1d:fd: 0d:50:a9:84:6d:23:47:b6:8f:e3:dd:7d:53:e4:7b:e9:f5:e8: d7:73:7d:07:e5:97:3f:2f:a7:21:d4:d2:e8:4b:81:14:58:1e: 4e:20:d7:fe:09:97:cc:54:fd:e1:1d:2d:21:39:6a:97:8b:d1: 73:23:e3:51:f1:82:e7:5e:07:41:b9:3c:12:89:48:3e:d6:cf: d5:80:e7:ed:b0:fc:09:01:d9:cd:94:11:48:cb:2e:2b:29:ed: 89:69:c7:3d:98:cf:2d:0a:12:4d:1d:79:52:7e:3e:c7:3b:8c: 2f:9c:53:ee:33:58:9d:be:64:f9:19:9e:f7:ff:a5:25:62:10: ad:08:4c:d3:03:34:c2:1a:10:df:a9:00:b9:e4:8b:a2:f8:dd: 31:a0:c2:de:d0:e9:0e:01:55:d0:37:e4:5b:87:7f:cb:9c:81: 46:0d:3c:2b:d7:55:b3:d6:73:cf:44:37:ff:8a:9f:87:ce:fe: d6:4e:59:35:e0:d2:3c:78:04:24:79:46:7d:cc:a2:89:b7:d5: 83:44:95:9c -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUDrfZlRU0aNnGn3HB1Zoe+INeNdswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDY0NVoX DTI3MDUxMDE1NTE0NVowMzExMC8GA1UEAxMoMjczMENGOUYxMzI3MTZGMTc4Rjg4 RkIxRjI2OENFNTFDQTI2NEM5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMGBGWR+XxoSI9WKPyAwoRG7NBXy1OuPwC7sAgwpw0mwwfvUiPLHPjezQfj VLP0z0rAnG7gQvXKXfMfMRjwP8X48MUbnCZtdS4XLnDzPQujCr8zLQcqyM5iLQii TKi/1oP2GjWihfO/M7H2QZae8vQvImRBksJdwAi3oMKixqC6BrmbxxZxwGjPHbFw iDmcP9Tgm//79ZnNyGoTH3G754yuwxxcwIBvz16lyVn8Om7slG61QpBXOdW6LcNp TL4G/TYjIpFtLeS7l/7C8mWDrcN72M6nTFkjxC2Bw+DyCD7uhrkj8yLsKf5pZgPX 0rtPBBSz3AX+fZXph9tWX7je4AcCAwEAAaOCAoowggKGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCcwz58TJxbxePiPsfJozlHKJkyfMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9IVVNIRU5HWElO LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hV U0hFTkdYSU4vMC8yNzMwQ0Y5RjEzMjcxNkYxNzhGODhGQjFGMjY4Q0U1MUNBMjY0 QzlGLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ3/YMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwJUMzANBgkqhkiG9w0BAQsFAAOCAQEAaf+Eh/eDS2/HK8Lq9FQnWCv/PwFo lHzGVJroStyeUa6H9GGqu7RwWuNruWyTt6sAMXmsFx39DVCphG0jR7aP4919U+R7 6fXo13N9B+WXPy+nIdTS6EuBFFgeTiDX/gmXzFT94R0tITlql4vRcyPjUfGC514H Qbk8EolIPtbP1YDn7bD8CQHZzZQRSMsuKyntiWnHPZjPLQoSTR15Un4+xzuML5xT 7jNYnb5k+Rme9/+lJWIQrQhM0wM0whoQ36kAueSLovjdMaDC3tDpDgFV0DfkW4d/ y5yBRg08K9dVs9Zzz0Q3/4qfh87+1k5ZNeDSPHgEJHlGfcyiibfVg0SVnA== -----END CERTIFICATE-----Generated at Wed May 13 19:57:22 2026 by rpki-client