$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer File: 6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer (raw, json) Hash identifier: 9ABc/KNtOblyeVyowVvX7GpA0t0z85+/0IMWgbKYjnk= Subject key identifier: 6E:5C:85:5A:08:B3:87:C6:CB:31:7D:91:D7:D9:A5:0E:A2:B3:5A:D4 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 4DBCD01B6A0DBC1D3EBB7C5E594F59211201E1E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft caRepository: rsync://rpkica.twnic.tw/rpki/DODOLTD/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:45:08 +0000 Certificate not after: Mon 10 May 2027 15:50:08 +0000 Subordinate resources: AS: 17413 AS: 38850 IP: 2401:dae0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bc:d0:1b:6a:0d:bc:1d:3e:bb:7c:5e:59:4f:59:21:12:01:e1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:45:08 2026 GMT Not After : May 10 15:50:08 2027 GMT Subject: CN=6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:bf:13:c4:c3:0c:17:c2:af:71:49:47:3c: 34:7b:94:7b:98:80:8e:4d:d3:ce:0f:1b:a5:fc:04: ba:31:e3:f0:bf:3b:40:c0:21:9d:71:19:b8:ed:f7: 70:f3:1b:f9:8c:ad:78:61:0f:e7:eb:a1:12:f9:fa: c0:9a:1e:6a:e1:a4:dd:88:2b:2c:e9:9b:80:1e:5b: 42:2b:47:fd:8f:d9:e3:1d:60:c6:c8:e3:eb:87:7c: f6:3a:6b:cc:2f:90:30:7d:fe:12:78:4b:5c:c5:c2: bf:0c:64:0d:2a:cb:fa:de:ee:11:4c:f8:02:f8:71: a0:88:a0:36:e6:59:34:ad:68:9b:2a:e9:ae:a2:2e: 9a:e2:39:0d:3d:66:b3:32:ad:9e:d7:e5:e1:1b:91: ba:4b:09:98:05:c5:83:86:a8:a2:b9:08:52:48:05: 10:f3:0f:c0:dd:91:eb:55:20:e4:55:9c:e0:df:7c: 0d:dc:e2:e8:f7:f5:ac:6f:b6:5d:6d:f6:28:75:51: a6:50:6e:df:05:82:15:e6:c3:86:30:b1:ab:31:51: 56:c6:02:9a:d0:12:10:63:ba:86:a1:d9:07:5c:23: 41:2e:e1:8d:51:bd:a7:68:31:49:e5:17:46:bb:d1: c1:15:cb:c2:58:a0:8b:5a:26:ff:03:7f:dd:e4:34: 12:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:5C:85:5A:08:B3:87:C6:CB:31:7D:91:D7:D9:A5:0E:A2:B3:5A:D4 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:dae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17413 38850 Signature Algorithm: sha256WithRSAEncryption 3e:00:1d:bf:79:ef:0d:49:67:db:4d:5d:5e:e2:84:8c:a1:d0: 70:cf:f6:8a:ab:3d:f4:00:7c:c0:c3:49:56:d3:78:e8:ec:73: 14:85:78:f8:77:48:6e:07:2a:18:ac:44:fb:ab:ea:53:eb:a1: 9b:bc:f9:88:05:f3:d8:86:e4:7d:27:b5:99:2a:56:a1:81:61: 31:fd:1e:d4:83:21:1a:ef:f6:dd:2c:43:aa:77:36:53:49:e2: c1:8f:ba:bf:c6:09:77:28:bd:17:6f:b2:39:d9:0c:32:85:ed: b7:56:60:b9:b2:25:e6:36:31:bf:71:45:fd:5a:22:f0:e3:a6: e6:3d:c6:c7:74:69:ff:04:44:04:ed:3b:c2:de:e3:5c:84:65: be:05:77:6b:34:2e:28:f6:7e:c0:d1:a8:78:56:2d:fb:86:43: da:59:ba:5a:f4:c8:7b:28:7d:ba:99:8f:e0:f5:8e:57:a8:23: a1:61:a6:38:c6:c9:93:a3:75:8a:db:75:7c:75:a6:d5:ae:95: 90:ac:5d:7a:d1:d2:54:d6:71:54:c1:a6:86:64:e2:58:de:03: 9f:c8:d7:c3:05:86:fa:c6:87:6c:45:a7:2b:dc:7e:e7:7c:c4: 25:e1:3b:d4:45:64:f6:aa:1c:73:b0:d2:20:dc:de:b5:6c:6e: ef:55:b2:e8 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUTbzQG2oNvB0+u3xeWU9ZIRIB4egwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDUwOFoX DTI3MDUxMDE1NTAwOFowMzExMC8GA1UEAxMoNkU1Qzg1NUEwOEIzODdDNkNCMzE3 RDkxRDdEOUE1MEVBMkIzNUFENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbOvxPEwwwXwq9xSUc8NHuUe5iAjk3Tzg8bpfwEujHj8L87QMAhnXEZuO33 cPMb+YyteGEP5+uhEvn6wJoeauGk3YgrLOmbgB5bQitH/Y/Z4x1gxsjj64d89jpr zC+QMH3+EnhLXMXCvwxkDSrL+t7uEUz4AvhxoIigNuZZNK1omyrprqIumuI5DT1m szKtntfl4RuRuksJmAXFg4aoorkIUkgFEPMPwN2R61Ug5FWc4N98Ddzi6Pf1rG+2 XW32KHVRplBu3wWCFebDhjCxqzFRVsYCmtASEGO6hqHZB1wjQS7hjVG9p2gxSeUX RrvRwRXLwligi1om/wN/3eQ0EgMCAwEAAaOCAokwggKFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG5chVoIs4fGyzF9kdfZpQ6is1rUMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET0RPTFRELzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPRE9M VEQvMC82RTVDODU1QTA4QjM4N0M2Q0IzMTdEOTFEN0Q5QTUwRUEyQjM1QUQ0Lm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAJAHa4DAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJE BQIDAJfCMA0GCSqGSIb3DQEBCwUAA4IBAQA+AB2/ee8NSWfbTV1e4oSModBwz/aK qz30AHzAw0lW03jo7HMUhXj4d0huByoYrET7q+pT66GbvPmIBfPYhuR9J7WZKlah gWEx/R7UgyEa7/bdLEOqdzZTSeLBj7q/xgl3KL0Xb7I52Qwyhe23VmC5siXmNjG/ cUX9WiLw46bmPcbHdGn/BEQE7TvC3uNchGW+BXdrNC4o9n7A0ah4Vi37hkPaWbpa 9Mh7KH26mY/g9Y5XqCOhYaY4xsmTo3WK23V8dabVrpWQrF160dJU1nFUwaaGZOJY 3gOfyNfDBYb6xodsRacr3H7nfMQl4TvURWT2qhxzsNIg3N61bG7vVbLo -----END CERTIFICATE-----Generated at Wed May 13 19:58:11 2026 by rpki-client