$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/300F45147A453EAC44093ADD500AE22112A608EF.cer File: 300F45147A453EAC44093ADD500AE22112A608EF.cer (raw, json) Hash identifier: QY7dmxiumcQnP+fte3ZSNZPxaLNyaFGQSJ7lEyUBk78= Subject key identifier: 30:0F:45:14:7A:45:3E:AC:44:09:3A:DD:50:0A:E2:21:12:A6:08:EF Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 294F92EA8E7C4E9515F8D5E52F6440D4A455D784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.mft caRepository: rsync://rpkica.twnic.tw/rpki/CCETECH/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:43:38 +0000 Certificate not after: Mon 10 May 2027 15:48:38 +0000 Subordinate resources: IP: 2401:af20::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4f:92:ea:8e:7c:4e:95:15:f8:d5:e5:2f:64:40:d4:a4:55:d7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:43:38 2026 GMT Not After : May 10 15:48:38 2027 GMT Subject: CN=300F45147A453EAC44093ADD500AE22112A608EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:68:d1:27:79:6d:c0:28:de:6b:05:c2:7a:e7: aa:53:7a:61:e0:d6:60:a2:5d:d1:4e:2b:0b:02:80: 98:17:8f:61:c2:b3:58:39:a8:91:03:e0:12:8e:dd: 46:a0:66:7d:1f:9c:24:a6:ba:94:ec:69:f1:48:ef: c5:24:b6:a6:74:c0:65:77:38:27:79:61:b8:a9:c4: ef:a4:df:a9:89:25:7e:59:3c:19:86:94:2d:76:14: ab:d8:4e:80:89:a4:98:a1:a6:dd:29:66:7b:05:1a: 70:2f:ca:37:56:38:76:ab:26:54:e1:2b:eb:f1:1f: 1e:27:cc:78:51:f7:e7:3b:61:1b:83:b8:2c:aa:4c: b7:fe:14:dc:bb:6a:15:94:c3:ec:36:a6:71:79:1f: 9d:03:c9:bd:38:18:5b:fa:a1:00:11:0b:16:65:dd: 09:06:15:01:e3:6a:c6:63:62:b1:91:66:36:29:5c: aa:27:f1:16:8b:f8:17:c0:0f:42:38:71:9d:7c:77: 50:f7:f1:c4:04:38:ba:80:d2:a9:82:3a:b9:02:6b: 61:0a:c9:9a:2a:37:54:40:e4:cf:99:12:e2:f3:55: 95:75:cc:f3:99:18:e3:63:19:1f:2d:80:5d:f1:6f: 3e:6a:f5:09:9f:55:cb:67:1f:c3:7d:1f:4c:2b:9e: 13:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:0F:45:14:7A:45:3E:AC:44:09:3A:DD:50:0A:E2:21:12:A6:08:EF X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:af20::/32 Signature Algorithm: sha256WithRSAEncryption a2:e9:06:79:b6:08:68:40:0a:32:1c:c7:5a:04:fa:fc:43:3e: a3:f1:01:52:7c:8b:bd:49:a8:cf:40:a0:ba:b0:a7:93:f8:d8: 26:b8:d3:9d:bd:d9:e3:b9:7a:bf:88:bb:e7:24:78:03:59:b1: 21:c7:d7:d5:3c:1f:70:f6:a5:b1:f2:28:9c:c5:57:5c:29:71: 9a:ae:1f:c6:e3:76:d9:15:c1:71:66:e7:84:ea:d5:fc:d9:27: 1e:1c:27:86:97:6d:fa:be:d3:a8:6b:e7:8e:80:b1:6c:d2:07: f1:56:1b:f5:2a:67:42:ac:71:33:af:01:16:68:a4:cb:c7:ef: 33:9e:41:9c:0a:15:41:e3:24:5a:d0:40:e7:a8:53:86:87:1f: 8c:24:86:f2:42:aa:52:4b:7a:ae:74:4d:90:e4:7c:ea:7a:0f: 08:c5:35:d0:ba:1f:ab:ad:d6:80:7f:bb:98:77:b4:30:f6:bf: 68:67:d9:e8:49:d2:3f:64:cd:c7:ec:1c:f1:84:1e:cb:da:ca: 13:10:1a:b4:a0:d5:70:95:e3:75:81:9d:36:b9:aa:c8:24:99: 54:90:75:64:7c:c5:ec:bb:2f:85:25:68:de:7b:04:88:d5:26: 67:1a:bd:99:14:a2:40:25:13:24:b0:17:16:85:bc:7d:a4:aa: 1d:e3:7f:d4 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIUKU+S6o58TpUV+NXlL2RA1KRV14QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDMzOFoX DTI3MDUxMDE1NDgzOFowMzExMC8GA1UEAxMoMzAwRjQ1MTQ3QTQ1M0VBQzQ0MDkz QURENTAwQUUyMjExMkE2MDhFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPZo0Sd5bcAo3msFwnrnqlN6YeDWYKJd0U4rCwKAmBePYcKzWDmokQPgEo7d RqBmfR+cJKa6lOxp8UjvxSS2pnTAZXc4J3lhuKnE76TfqYklflk8GYaULXYUq9hO gImkmKGm3SlmewUacC/KN1Y4dqsmVOEr6/EfHifMeFH35zthG4O4LKpMt/4U3Ltq FZTD7DamcXkfnQPJvTgYW/qhABELFmXdCQYVAeNqxmNisZFmNilcqifxFov4F8AP QjhxnXx3UPfxxAQ4uoDSqYI6uQJrYQrJmio3VEDkz5kS4vNVlXXM85kY42MZHy2A XfFvPmr1CZ9Vy2cfw30fTCueE50CAwEAAaOCAmkwggJlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDAPRRR6RT6sRAk63VAK4iESpgjvMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DQ0VURUNILzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDRVRF Q0gvMC8zMDBGNDUxNDdBNDUzRUFDNDQwOTNBREQ1MDBBRTIyMTEyQTYwOEVGLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAJAGvIDANBgkqhkiG9w0BAQsFAAOCAQEAoukGebYI aEAKMhzHWgT6/EM+o/EBUnyLvUmoz0CgurCnk/jYJrjTnb3Z47l6v4i75yR4A1mx IcfX1TwfcPalsfIonMVXXClxmq4fxuN22RXBcWbnhOrV/NknHhwnhpdt+r7TqGvn joCxbNIH8VYb9SpnQqxxM68BFmiky8fvM55BnAoVQeMkWtBA56hThocfjCSG8kKq Ukt6rnRNkOR86noPCMU10Lofq63WgH+7mHe0MPa/aGfZ6EnSP2TNx+wc8YQey9rK ExAatKDVcJXjdYGdNrmqyCSZVJB1ZHzF7LsvhSVo3nsEiNUmZxq9mRSiQCUTJLAX FoW8faSqHeN/1A== -----END CERTIFICATE-----Generated at Wed May 13 19:58:08 2026 by rpki-client