$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/60684AE08F9C9C1F3EED1FD86C06B47554B9BFF9.cer File: 60684AE08F9C9C1F3EED1FD86C06B47554B9BFF9.cer (raw, json) Hash identifier: ADWGfbyGe/pyrWdS0Kc760Cmg2ShISnI7qgabD7EHCw= Subject key identifier: 60:68:4A:E0:8F:9C:9C:1F:3E:ED:1F:D8:6C:06:B4:75:54:B9:BF:F9 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 6F010A5A572D0382DFFE2B80D313CDBA8FCEE662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/TAIFUCLOUD/0/60684AE08F9C9C1F3EED1FD86C06B47554B9BFF9.mft caRepository: rsync://rpkica.twnic.tw/rpki/TAIFUCLOUD/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:57:27 +0000 Certificate not after: Mon 10 May 2027 16:02:27 +0000 Subordinate resources: AS: 131628 IP: 103.120.148.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:01:0a:5a:57:2d:03:82:df:fe:2b:80:d3:13:cd:ba:8f:ce:e6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:57:27 2026 GMT Not After : May 10 16:02:27 2027 GMT Subject: CN=60684AE08F9C9C1F3EED1FD86C06B47554B9BFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:19:f5:0c:af:ac:00:7c:2a:05:de:ff:84: cf:36:6d:c9:45:ae:b7:75:10:f7:bf:a5:76:16:34: 18:5b:ff:f0:d2:92:cf:83:1c:cb:e1:ee:39:6b:61: eb:90:ae:3b:3a:85:de:94:eb:cd:4a:b1:dd:e4:62: 89:18:35:ca:4e:58:18:00:b0:c7:7e:2c:a9:15:81: f1:93:c2:f7:78:56:f2:08:fe:02:0d:f6:2b:18:d6: 53:a9:a7:51:13:5c:a6:01:84:9b:5b:94:39:7e:ce: 5a:43:52:3c:1c:ca:5f:8a:80:18:fc:34:52:36:3a: 4c:03:74:0c:c7:24:2b:37:f5:6a:bb:96:aa:60:09: 19:cc:1b:70:9c:af:57:00:05:80:e8:82:8e:24:be: 68:72:a0:19:0c:9e:30:18:bf:0a:99:ff:2e:42:75: 6b:a3:1a:da:0c:82:b7:25:37:37:8f:5d:a6:18:de: 70:a3:4d:fa:9b:43:4e:6f:b6:56:8b:77:f8:34:74: db:50:19:db:9b:44:1c:2d:2c:52:07:a5:56:3a:3c: 8b:1d:26:8a:b9:26:a6:4d:14:e9:c4:27:82:4c:37: 2a:00:54:bb:79:7f:40:ac:e9:dd:11:f6:6e:4b:09: 7c:dd:5b:12:e1:68:06:a4:c4:e8:98:6f:c5:2c:d0: db:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:68:4A:E0:8F:9C:9C:1F:3E:ED:1F:D8:6C:06:B4:75:54:B9:BF:F9 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TAIFUCLOUD/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TAIFUCLOUD/0/60684AE08F9C9C1F3EED1FD86C06B47554B9BFF9.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.148.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131628 Signature Algorithm: sha256WithRSAEncryption b7:b1:8f:67:f9:21:1a:cb:a2:15:dc:65:99:b1:d3:35:e0:38: 24:4c:64:29:21:c6:2b:c2:0e:17:c3:cd:fd:36:61:b9:c6:14: 20:d9:2a:ef:84:7e:08:13:d4:49:8a:13:6e:03:95:ac:8c:83: b2:e1:63:33:6d:8a:7f:30:48:74:bc:c6:e4:e4:8a:08:f7:52: 9a:b4:23:d7:aa:f5:af:7f:44:57:37:53:b6:53:31:b0:69:ca: 61:c9:f3:46:f6:67:b1:d0:77:5d:84:67:b3:8c:e2:8d:82:7e: 56:e4:3a:5b:0d:47:1b:8f:59:85:b0:0e:3d:58:c9:82:d3:c0: 39:f1:75:74:3f:3d:e0:c9:9b:0c:e6:91:83:da:91:bc:9a:dd: 53:41:f8:84:ad:47:fe:0a:a4:85:e0:17:5c:8f:75:01:88:63: 92:ac:b3:64:16:1d:35:b7:57:30:b5:2d:7c:2d:89:27:28:4d: 69:ea:a8:2d:9f:1b:87:fb:72:b0:6f:73:74:f6:7d:6e:76:d7: 68:bc:b2:9b:5f:e9:76:a7:05:f8:61:68:79:65:bb:d4:c1:a4: f6:1f:ac:c9:fb:d5:f8:d9:2c:4c:81:a7:d0:9d:95:2d:e6:b5: e2:8a:9e:ad:cd:42:64:1c:48:a4:0b:95:56:a8:a1:94:a1:c7: 22:f0:e8:26 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUbwEKWlctA4Lf/iuA0xPNuo/O5mIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTcyN1oX DTI3MDUxMDE2MDIyN1owMzExMC8GA1UEAxMoNjA2ODRBRTA4RjlDOUMxRjNFRUQx RkQ4NkMwNkI0NzU1NEI5QkZGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKB9GfUMr6wAfCoF3v+EzzZtyUWut3UQ97+ldhY0GFv/8NKSz4Mcy+HuOWth 65CuOzqF3pTrzUqx3eRiiRg1yk5YGACwx34sqRWB8ZPC93hW8gj+Ag32KxjWU6mn URNcpgGEm1uUOX7OWkNSPBzKX4qAGPw0UjY6TAN0DMckKzf1aruWqmAJGcwbcJyv VwAFgOiCjiS+aHKgGQyeMBi/Cpn/LkJ1a6Ma2gyCtyU3N49dphjecKNN+ptDTm+2 Vot3+DR021AZ25tEHC0sUgelVjo8ix0mirkmpk0U6cQngkw3KgBUu3l/QKzp3RH2 bksJfN1bEuFoBqTE6JhvxSzQ2zUCAwEAAaOCAoowggKGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGBoSuCPnJwfPu0f2GwGtHVUub/5MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQUlGVUNMT1VE LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RB SUZVQ0xPVUQvMC82MDY4NEFFMDhGOUM5QzFGM0VFRDFGRDg2QzA2QjQ3NTU0QjlC RkY5Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3iUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwICLDANBgkqhkiG9w0BAQsFAAOCAQEAt7GPZ/khGsuiFdxlmbHTNeA4JExk KSHGK8IOF8PN/TZhucYUINkq74R+CBPUSYoTbgOVrIyDsuFjM22KfzBIdLzG5OSK CPdSmrQj16r1r39EVzdTtlMxsGnKYcnzRvZnsdB3XYRns4zijYJ+VuQ6Ww1HG49Z hbAOPVjJgtPAOfF1dD894MmbDOaRg9qRvJrdU0H4hK1H/gqkheAXXI91AYhjkqyz ZBYdNbdXMLUtfC2JJyhNaeqoLZ8bh/tysG9zdPZ9bnbXaLyym1/pdqcF+GFoeWW7 1MGk9h+syfvV+NksTIGn0J2VLea14oqerc1CZBxIpAuVVqihlKHHIvDoJg== -----END CERTIFICATE-----Generated at Wed May 13 19:58:26 2026 by rpki-client