$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/46A39033600C06F3DE67312DA7FF15D05D5552A2.cer File: 46A39033600C06F3DE67312DA7FF15D05D5552A2.cer (raw, json) Hash identifier: d7D6ogkY2AdaskJxok8OAue+chQ6cWq/astCfZ30Y2g= Subject key identifier: 46:A3:90:33:60:0C:06:F3:DE:67:31:2D:A7:FF:15:D0:5D:55:52:A2 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 1DCD7E854B96C8A707DC5F8AA4A1933336211790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.mft caRepository: rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:43:51 +0000 Certificate not after: Mon 10 May 2027 15:48:51 +0000 Subordinate resources: AS: 18416 IP: 103.148.146.0/23 IP: 2405:d140::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cd:7e:85:4b:96:c8:a7:07:dc:5f:8a:a4:a1:93:33:36:21:17:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:43:51 2026 GMT Not After : May 10 15:48:51 2027 GMT Subject: CN=46A39033600C06F3DE67312DA7FF15D05D5552A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9b:46:30:8a:1f:93:ba:c4:47:60:dd:e3:5c: 18:46:53:97:ef:5d:20:47:10:26:d9:a2:c5:d0:b4: 61:f2:32:30:6c:6b:3c:84:5c:00:d0:2e:c3:ae:06: 2e:9b:cb:e4:9c:18:f0:f7:9f:8e:81:9b:77:68:e2: 81:de:f0:5b:3e:9c:62:0f:50:95:aa:e1:2a:12:66: e9:6e:e8:19:4f:8f:1e:41:16:a3:ec:53:fd:54:97: 9e:ec:0c:67:a2:68:4f:6b:eb:2d:d3:3e:bc:f6:3c: 97:bc:bc:da:65:6e:d5:b1:2e:32:67:50:45:a8:83: 7b:4e:9e:33:14:47:32:df:83:58:6a:a5:91:d0:3d: 91:50:03:a1:93:3e:06:17:5a:9e:4a:b0:73:10:50: e8:93:8b:99:84:b3:bb:ad:23:18:5b:ed:77:40:60: ce:e8:73:3b:59:c2:d7:e6:5f:f5:30:ae:61:b2:db: 12:3e:f6:bd:4d:70:1c:12:99:d5:8e:62:1d:23:c0: 9f:35:b4:36:be:62:1b:48:a8:d9:36:73:2b:e9:03: 24:38:b4:13:89:c7:5c:03:6a:46:b9:c0:7e:cd:fc: 63:0c:42:62:07:4c:ea:ac:13:64:29:17:01:16:05: 91:48:66:8c:b9:88:7b:f2:ee:ea:e2:11:e9:5a:d6: be:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:A3:90:33:60:0C:06:F3:DE:67:31:2D:A7:FF:15:D0:5D:55:52:A2 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.146.0/23 IPv6: 2405:d140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18416 Signature Algorithm: sha256WithRSAEncryption 0d:d2:b0:93:22:b8:06:df:fb:e3:4b:a1:a2:fc:b3:d7:a9:b6: 91:0e:9e:8f:91:a3:f0:9b:c2:69:75:0a:0f:6a:61:6f:27:0c: d8:22:a5:ae:50:4b:f3:dd:ab:63:e9:16:c3:0e:9b:5c:fc:00: 68:1e:52:96:5e:03:93:b4:d4:e2:80:3d:03:c6:55:69:b0:e2: c2:c8:30:0d:97:98:62:11:13:0f:6f:48:88:00:88:df:e1:cc: c3:69:b3:03:70:9f:36:22:76:68:7d:45:39:b2:29:02:19:45: af:85:99:3b:29:c9:09:81:1a:79:20:b3:e8:be:96:86:09:ea: 3e:72:d0:b8:59:aa:05:9a:b6:ee:94:17:fe:e4:bc:85:98:87: 7c:f6:8c:ee:fd:79:5b:62:db:22:f9:a3:ca:be:29:91:97:b4: 2b:f5:3a:14:01:a4:cb:da:f6:7b:5e:35:ba:3f:b5:e6:98:1a: 40:e8:cc:1a:36:b8:57:83:18:69:fa:a4:4e:3e:63:dd:07:e7: d2:c6:fe:e4:5c:6e:0b:b8:c3:b2:83:61:24:0a:58:09:94:95: 14:be:de:f5:5d:69:88:7b:6a:7e:0a:c0:c0:11:74:53:31:a6: a3:b4:49:9a:99:7b:ff:f4:75:cc:87:36:fd:8b:ec:6d:1d:9a: 0f:8e:74:1b -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgIUHc1+hUuWyKcH3F+KpKGTMzYhF5AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDM1MVoX DTI3MDUxMDE1NDg1MVowMzExMC8GA1UEAxMoNDZBMzkwMzM2MDBDMDZGM0RFNjcz MTJEQTdGRjE1RDA1RDU1NTJBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI+bRjCKH5O6xEdg3eNcGEZTl+9dIEcQJtmixdC0YfIyMGxrPIRcANAuw64G LpvL5JwY8PefjoGbd2jigd7wWz6cYg9QlarhKhJm6W7oGU+PHkEWo+xT/VSXnuwM Z6JoT2vrLdM+vPY8l7y82mVu1bEuMmdQRaiDe06eMxRHMt+DWGqlkdA9kVADoZM+ BhdankqwcxBQ6JOLmYSzu60jGFvtd0BgzuhzO1nC1+Zf9TCuYbLbEj72vU1wHBKZ 1Y5iHSPAnzW0Nr5iG0io2TZzK+kDJDi0E4nHXANqRrnAfs38YwxCYgdM6qwTZCkX ARYFkUhmjLmIe/Lu6uIR6VrWvoECAwEAAaOCApgwggKUMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEajkDNgDAbz3mcxLaf/FdBdVVKiMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElBT0NISUFP LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NI SUFPQ0hJQU8vMC80NkEzOTAzMzYwMEMwNkYzREU2NzMxMkRBN0ZGMTVEMDVENTU1 MkEyLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5SSMA0EAgACMAcDBQAkBdFAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAkfwMA0GCSqGSIb3DQEBCwUAA4IBAQAN0rCTIrgG 3/vjS6Gi/LPXqbaRDp6PkaPwm8JpdQoPamFvJwzYIqWuUEvz3atj6RbDDptc/ABo HlKWXgOTtNTigD0DxlVpsOLCyDANl5hiERMPb0iIAIjf4czDabMDcJ82InZofUU5 sikCGUWvhZk7KckJgRp5ILPovpaGCeo+ctC4WaoFmrbulBf+5LyFmId89ozu/Xlb Ytsi+aPKvimRl7Qr9ToUAaTL2vZ7XjW6P7XmmBpA6MwaNrhXgxhp+qROPmPdB+fS xv7kXG4LuMOyg2EkClgJlJUUvt71XWmIe2p+CsDAEXRTMaajtEmamXv/9HXMhzb9 i+xtHZoPjnQb -----END CERTIFICATE-----Generated at Wed May 13 19:57:48 2026 by rpki-client